CompTIA CompTIA Certifications SY0-601 Questions & Answers

• Question 1321:

  Which of the following security controls is used to isolate a section of the network and its externally available resources from the internal corporate network in order to reduce the number of possible attacks?

  A. Faraday cages

  B. Air gap

  C. Vaulting

  D. Proximity readers

  Correct Answer: B

• Question 1322:

  A security analyst is responding to a malware incident at a company. The malware connects to a command-and-control server on the internet in order to function. Which of the following should the security analyst implement first?

  A. Network segmentation

  B. IP-based firewall rules

  C. Mobile device management

  D. Content filler

  Correct Answer: B

• Question 1323:

  An accounting intern receives an invoice via email from the Chief Executive Officer (CEO). In the email, the CEO demands the immediate release of funds to the bank account that is listed. Which of the following principles best describes why this attack might be successful?

  A. Authority

  B. Scarcity

  C. Consensus

  D. Familiarity

  Correct Answer: A

• Question 1324:

  An accounting intern receives an invoice via email from the Chief Executive Officer (CEO). In the email, the CEO demands the immediate release of funds to the bank account that is listed. Which of the following principles best describes why this attack might be successful?

  A. Authority

  B. Scarcity

  C. Consensus

  D. Familiarity

  Correct Answer: A

• Question 1325:

  A user downloaded software from an online forum. After the user installed the software, the security team observed external network traffic connecting to the user's computer on an uncommon port. Which of the following is the most likely explanation of this unauthorized connection?

  A. The software had a hidden keylogger.

  B. The software was ransomware.

  C. The user's computer had a fileless virus.

  D. The software contained a backdoor.

  Correct Answer: D

• Question 1326:

  During a penetration test, a flaw in the internal PKI was exploited to gain domain administrator rights using specially crafted certificates. Which of the following remediation tasks should be completed as part of the cleanup phase?

  A. Updating the CRL

  B. Patching the CA

  C. Changing passwords

  D. Implementing SOAR

  Correct Answer: B

• Question 1327:

  An organization recently experienced the following social engineering attacks that introduced malware into the network:

  ? In the first attack, the sender impersonated a staff member in the legal department and sent an email stating that the employee needed to click a link to sign an NDA in order to remain employed. The link provided was to a malicious website. ? In the second attack, the sender impersonated the director of finance and instructed the accounts payable department to pay an outstanding invoice. The attached invoice contained malware.

  Which of the following is the most likely reason these attacks were successful?

  A. Both attacks passed the spam filters, which resulted in the end users thinking the emails were legitimate.

  B. Both attacks concealed the delivery of malware, which led end users to trust the emails.

  C. Both attacks appealed to authority, which made the end users feel obligated to perform the requested actions.

  D. Both attacks relied on dumpster diving to obtain a list of valid contacts to receive the malicious emails.

  Correct Answer: C

• Question 1328:

  Which of the following security program audits includes a comprehensive evaluation of the security controls in place at an organization over a six- to 12-month time period?

  A. NIST CSF

  B. SOC 2 Type II

  C. ISO 27001

  D. PCI DSS

  Correct Answer: B

• Question 1329:

  Development team members set up multiple application environments so they can develop, test, and deploy code in a secure and reliable manner. One of the environments is configured with real data that has been obfuscated so the team can adequately assess how the code will work in production. Which of the following environments is set up?

  A. Quality assurance

  B. Development

  C. Sandbox

  D. Production

  Correct Answer: C

• Question 1330:

  Which of the following provides guidelines for the management and reduction of information security risk?

  A. CIS

  B. NIST CSF

  C. ISO

  D. PCI DSS

  Correct Answer: B