CompTIA CompTIA Certifications SY0-601 Questions & Answers

• Question 1301:

  A security manager is implementing MFA and patch management. Which of the following would best describe the control type and category? (Choose two.)

  A. Physical

  B. Managerial

  C. Detective

  D. Administrative

  E. Preventative

  F. Technical

  Correct Answer: EF

• Question 1302:

  A security analyst is creating baselines for the server team to follow when hardening new devices for deployment. Which of the following best describes what the analyst is creating?

  A. Change management procedure

  B. Information security policy

  C. Cybersecurity framework

  D. Secure configuration guide

  Correct Answer: D

• Question 1303:

  Which of the following environments utilizes a subset of customer data and is most likely to be used to assess the impacts of major system upgrades and demonstrate system features?

  A. Development

  B. Test

  C. Production

  D. Staging

  Correct Answer: D

• Question 1304:

  An external vendor recently visited a company's headquarters for a presentation. Following the visit, a member of the hosting team found a file that the external vendor left behind on a server. The file contained detailed architecture information and code snippets. Which of the following data types best describes this file?

  A. Government

  B. Public

  C. Proprietary

  D. Critical

  Correct Answer: C

• Question 1305:

  An organization has too many variations of a single operating system and needs to standardize the arrangement prior to pushing the system image to users. Which of the following should the organization implement first?

  A. Standard naming convention

  B. Hashing

  C. Network diagrams

  D. Baseline configuration

  Correct Answer: D

• Question 1306:

  The Chief Information Security Officer (CISO) asks a security analyst to install an OS update to a production VM that has a 99% uptime SLA. The CISO tells the analyst the installation must be done as quickly as possible. Which of the following courses of action should the security analyst take first?

  A. Log in to the server and perform a health check on the VM.

  B. Install the patch immediately.

  C. Confirm that the backup service is running.

  D. Take a snapshot of the VM.

  Correct Answer: D

• Question 1307:

  The application development teams have been asked to answer the followingQuestions:

  ? Does this application receive patches from an external source?

  ? Does this application contain open-source code?

  ? Is this application accessible by external users?

  ? Does this application meet the corporate password standard?

  Which of the following are theseQuestions part of?

  A. Risk control self-assessment

  B. Risk management strategy

  C. Risk acceptance

  D. Risk matrix

  Correct Answer: A

• Question 1308:

  A website user is locked out of an account after clicking an email link and visiting a different website. Web server logs show the user's password was changed, even though the user did not change the password. Which of the following is the most likely cause?

  A. Cross-site request forgery

  B. Directory traversal

  C. ARP poisoning

  D. SQL injection

  Correct Answer: A

• Question 1309:

  Two companies are in the process of merging. The companies need to decide how to standardize their information security programs. Which of the following would best align the security programs?

  A. Shared deployment of CIS baselines

  B. Joint cybersecurity best practices

  C. Both companies following the same CSF

  D. Assessment of controls in a vulnerability report

  Correct Answer: C

• Question 1310:

  A company recently decided to allow employees to work remotely. The company wants to protect its data without using a VPN. Which of the following technologies should the company implement?

  A. Secure web gateway

  B. Virtual private cloud endpoint

  C. Deep packet inspection

  D. Next-generation firewall

  Correct Answer: A