CompTIA CompTIA Certifications SY0-601 Questions & Answers

• Question 1271:

  Which of the following would best enable a systems administrator to easily determine which devices are located at a remote facility and allow policy to be pushed to only those devices?

  A. Baseline configurations

  B. Network diagrams

  C. Standard naming conventions

  D. Hot sites

  Correct Answer: C

  Standard naming conventions allow the system administrator to identify the devices by their location, function, or other criteria, and apply policy settings accordingly.

• Question 1272:

  A company is utilizing an offshore team to help support the finance department. The company wants to keep the data secure by keeping it on a company device but does not want to provide equipment to the offshore team. Which of the following should the company implement to meet this requirement?

  A. VDI

  B. MDM

  C. VPN

  D. VPC

  Correct Answer: A

• Question 1273:

  Which of the following is best used to detect fraud by assigning employees to different roles?

  A. Least privilege

  B. Mandatory vacation

  C. Separation of duties

  D. Job rotation

  Correct Answer: C

• Question 1274:

  A company implemented an MDM policy to mitigate risks after repeated instances of employees losing company-provided mobile phones. In several cases, the lost phones were used maliciously to perform social engineering attacks against other employees. Which of the following MDM features should be configured to best address this issue? (Choose two.)

  A. Screen locks

  B. Remote wipe

  C. Full device encryption

  D. Push notifications

  E. Application management

  F. Geolocation

  Correct Answer: BC

  B. Remote wipe

  C. Full device encryption

  The above two options are better options to solve the issue mentioned in theQuestion than other options there.

• Question 1275:

  During a recent company safety stand-down, the cyber-awareness team gave a presentation on the importance of cyber hygiene. One topic the team covered was best practices for printing centers. Which of the following describes an attack method that relates to printing centers?

  A. Whaling

  B. Credential harvesting

  C. Prepending

  D. Dumpster diving

  Correct Answer: D

• Question 1276:

  Which of the following is an algorithm performed to verify that data has not been modified?

  A. Hash

  B. Code check

  C. Encryption

  D. Checksum

  Correct Answer: A

• Question 1277:

  A network administrator deployed a DNS logging tool that logs suspicious websites that are visited and then sends a daily report based on various weighted metrics. Which of the following best describes the type of control the administrator put in place?

  A. Preventive

  B. Deterrent

  C. Corrective

  D. Detective

  Correct Answer: D

  The DNS logging tool is a detective control because it monitors the website visited by the users and reports any suspicious ones based on certain criteria. It does not prevent, deter or correct the behaviour of the users, but rather identifies and notifies the administrator of any potential security risks.

• Question 1278:

  A business uses Wi-Fi with content filtering enabled. An employee noticed a coworker accessed a blocked site from a work computer and reported the issue. While investigating the issue, a security administrator found another device providing internet access to certain employees. Which of the following best describes the security risk?

  A. The host-based security agent is not running on all computers.

  B. A rogue access point is allowing users to bypass controls.

  C. Employees who have certain credentials are using a hidden SSID.

  D. A valid access point is being jammed to limit availability.

  Correct Answer: B

• Question 1279:

  While considering the organization's cloud-adoption strategy, the Chief Information Security Officer sets a goal to outsource patching of firmware, operating systems, and applications to the chosen cloud vendor. Which of the following best meets this goal?

  A. Community cloud

  B. PaaS

  C. Containerization

  D. Private cloud

  E. SaaS

  F. IaaS

  Correct Answer: E

• Question 1280:

  A spoofed identity was detected for a digital certificate. Which of the following are the type of unidentified key and the certificate that could be in use on the company domain?

  A. Private key and root certificate

  B. Public key and expired certificate

  C. Private key and self-signed certificate

  D. Public key and wildcard certificate

  Correct Answer: C

  Private key and self-signed certificate. This is the type of uniidentied key and the certificate that could be in use on the company domain if a spoofed identity was detected. A private key is needed to create a self-signed certificate, and a self-signed certificate is vulnerable to spoofing.