[Jan 06, 2022] Exam4PDF SY0-601 dumps & CompTIA Security+ sure practice dumps
CompTIA SY0-601 Actual Questions and Braindumps
NEW QUESTION 151
A security engineer is setting up passwordless authentication for the first time.
INSTRUCTIONS
Use the minimum set of commands to set this up and verify that it works. Commands cannot be reused.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
NEW QUESTION 152
A security analyst receives a SIEM alert that someone logged in to the appadmin test account, which is only used for the early detection of attacks. The security analyst then reviews the following application log:
Which of the following can the security analyst conclude?
- A. A service account password may have been changed, resulting in continuous failed logins within the application.
- B. A replay attack is being conducted against the application.
- C. A credentialed vulnerability scanner attack is testing several CVEs against the application.
- D. An injection attack is being conducted against a user authentication system.
Answer: A
NEW QUESTION 153
A security engineer needs to enhance MFA access to sensitive areas in a building. A key card and fingerprint scan are already in use. Which of the following would add another factor of authentication?
- A. Hard token
- B. Keypad PIN
- C. SMS text
- D. Retina scan
Answer: D
NEW QUESTION 154
Which of the following are requirements that must be configured for PCI DSS compliance? (Select TWO).
- A. Benchmarking security awareness training for contractors
- B. Assigning a unique ID to each person with computer access
- C. Installing and maintaining a web proxy to protect cardholder data
- D. Using vendor-supplied default passwords for system passwords
- E. Testing security systems and processes regularly
- F. Encrypting transmission of cardholder data across private networks
Answer: C,F
NEW QUESTION 155
A recent malware outbreak across a subnet included successful rootkit installations on many PCs, ensuring persistence by rendering remediation efforts ineffective. Which of the following would BEST detect the presence of a rootkit in the future?
- A. EDR
- B. DLP
- C. FDE
- D. NIDS
Answer: A
NEW QUESTION 156
A cybersecurity administrator has a reduced team and needs to operate an on-premises network and security infrastructure efficiently. To help with the situation, the administrator decides to hire a service provider.
Which of the following should the administrator use?
- A. Microservices
- B. MSSP
- C. SDP
- D. IaaS
- E. AAA
Answer: B
NEW QUESTION 157
Select the appropriate attack and remediation from each drop-down list to label the corresponding attack with its remediation.
INSTRUCTIONS
Not all attacks and remediation actions will be used.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
NEW QUESTION 158
A forensics examiner is attempting to dump password cached in the physical memory of a live system but keeps receiving an error message. Which of the following BEST describes the cause of the error?
- A. The swap file needs to be unlocked before it can be accessed
- B. Checksum mismatches are invalidating the disk image
- C. The examiner does not have administrative privileges to the system
- D. The system must be taken offline before a snapshot can be created
Answer: C
NEW QUESTION 159
A security administrator needs to inspect in-transit files on the enterprise network to search for Pll, credit card data, and classification words. Which of the following would be the BEST to use?
- A. EDR solution
- B. Network DLP solution
- C. HIPS software solution
- D. IDS solution
Answer: B
NEW QUESTION 160
A security analyst is performing a packet capture on a series of SOAP HTTP requests for a security assessment. The analyst redirects the output to a file After the capture is complete, the analyst needs to review the first transactions quickly and then search the entire series of requests for a particular string Which of the following would be BEST to use to accomplish the task? (Select TWO).
- A. Tcpdump
- B. head
- C. rail
- D. dd
- E. curl
- F. grep
- G. openssi
Answer: B,F
Explanation:
A - "analyst needs to review the first transactions quickly"
C - "search the entire series of requests for a particular string"
NEW QUESTION 161
A security analyst is investigation an incident that was first reported as an issue connecting to network shares and the internet, While reviewing logs and tool output, the analyst sees the following:
Which of the following attacks has occurred?
- A. IP conflict
- B. Pass-the-hash
- C. Directory traversal
- D. MAC flooding
- E. ARP poisoning
Answer: E
NEW QUESTION 162
A company's bank has reported that multiple corporate credit cards have been stolen over the past several weeks. The bank has provided the names of the affected cardholders to the company's forensics team to assist in the cyber-incident investigation.
An incident responder learns the following information:
* The timeline of stolen card numbers corresponds closely with affected users making Internet-based purchases from diverse websites via enterprise desktop PCs.
* All purchase connections were encrypted, and the company uses an SSL inspection proxy for the
* inspection of encrypted traffic of the hardwired network.
* Purchases made with corporate cards over the corporate guest WiFi network, where no SSL inspection occurs, were unaffected.
Which of the following is the MOST likely root cause?
- A. The adversary has not yet established a presence on the guest WiFi network
- B. The payment providers are insecurely processing credit card charges
- C. The SSL inspection proxy is feeding events to a compromised SIEM
- D. HTTPS sessions are being downgraded to insecure cipher suites
Answer: B
NEW QUESTION 163
Which of the following will MOST likely cause machine learning and Al-enabled systems to operate with unintended consequences?
- A. Buffer overflows
- B. Code reuse
- C. Stored procedures
- D. Data bias
Answer: D
Explanation:
Explanation
https://lionbridge.ai/articles/7-types-of-data-bias-in-machine-learning/
https://bernardmarr.com/default.asp?contentID=1827
NEW QUESTION 164
Which of the following provides the BEST protection for sensitive information and data stored in cloud-based services but still allows for full functionality and searchability of data within the cloud-based services?
- A. Data encryption
- B. Anonymization
- C. Data masking
- D. Tokenization
Answer: A
NEW QUESTION 165
An information security incident recently occurred at an organization, and the organization was required to report the incident to authorities and notify the affected parties. When the organization's customers became of aware of the incident, some reduced their orders or stopped placing orders entirely. Which of the following is the organization experiencing?
- A. Anonymlzation
- B. Reputation damage
- C. Interrupted supply chain
- D. Identity theft
Answer: B
NEW QUESTION 166
A security analyst is investigation an incident that was first reported as an issue connecting to network shares and the internet, While reviewing logs and tool output, the analyst sees the following:
Which of the following attacks has occurred?
- A. IP conflict
- B. Pass-the-hash
- C. Directory traversal
- D. MAC flooding
- E. ARP poisoning
Answer: E
NEW QUESTION 167
A security engineer is setting up passwordless authentication for the first time.
INSTRUCTIONS
Use the minimum set of commands to set this up and verify that it works. Commands cannot be reused.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
NEW QUESTION 168
A company recently added a DR site and is redesigning the network. Users at the DR site are having issues browsing websites.
INSTRUCTIONS
Click on each firewall to do the following:
* Deny cleartext web traffic.
* Ensure secure management protocols are used.
* Resolve issues at the DR site.
The ruleset order cannot be modified due to outside constraints.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
See explanation below.
Explanation
Firewall 1:
DNS Rule - ANY --> ANY --> DNS --> PERMIT
HTTPS Outbound - 10.0.0.1/24 --> ANY --> HTTPS --> PERMIT
Management - ANY --> ANY --> SSH --> PERMIT
HTTPS Inbound - ANY --> ANY --> HTTPS --> PERMIT
HTTP Inbound - ANY --> ANY --> HTTP --> DENY
Firewall 2:
Firewall 3:
DNS Rule - ANY --> ANY --> DNS --> PERMIT
HTTPS Outbound - 192.168.0.1/24 --> ANY --> HTTPS --> PERMIT
Management - ANY --> ANY --> SSH --> PERMIT
HTTPS Inbound - ANY --> ANY --> HTTPS --> PERMIT
HTTP Inbound - ANY --> ANY --> HTTP --> DENY
NEW QUESTION 169
Select the appropriate attack and remediation from each drop-down list to label the corresponding attack with its remediation.
INSTRUCTIONS
Not all attacks and remediation actions will be used.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
NEW QUESTION 170
A forensics investigator is examining a number of unauthorized payments the were reported on the company's website. Some unusual log entries show users received an email for an unwanted mailing list and clicked on a link to attempt to unsubscribe. One of the users reported the email to the phishing team, and the forwarded email revealed the link to be:
Which of the following will the forensics investigator MOST likely determine has occurred?
- A. SQL injection
- B. CSRF
- C. XSS
- D. XSRF
Answer: B
NEW QUESTION 171
An organization is concerned about hackers potentially entering a facility and plugging in a remotely accessible Kali Linux box. Which of the following should be the first lines of defense against such an attack?
(Select TWO).
- A. MAC filtering
- B. Zero Trust segmentation
- C. Access control vestibules
- D. Bollards
- E. Guards
- F. Network access control
Answer: B,C
NEW QUESTION 172
When selecting a technical solution for identity management, an architect chooses to go from an in-house to a third-party SaaS provider. Which of the following risk management strategies is this an example of?
- A. Acceptance
- B. Avoidance
- C. Transference
- D. Mitigation
Answer: C
Explanation:
Risk Transference refers to the shifting of the burden of loss for a risk to another party through legislation, contract, insurance or other means. https://www.bcmpedia.org/wiki/Risk_Transference
NEW QUESTION 173
A pharmaceutical sales representative logs on to a laptop and connects to the public WiFi to check emails and update reports. Which of the following would be BEST to prevent other devices on the network from directly accessing the laptop? (Choose two.)
- A. A DLP solution
- B. Full disk encryption
- C. A host-based firewall
- D. A VPN
- E. Trusted Platform Module
- F. Antivirus software
Answer: C,E
NEW QUESTION 174
A local coffee shop runs a small WiFi hot-spot for its customers that utilizes WPA2-PSK. The coffee shop would like to stay current with security trends and wants to implement WPA3 to make its WiFi even more secure. Which of the following technologies will the coffee shop MOST likely use in place of PSK?
- A. WPS
- B. MSCHAP
- C. SAE
- D. WEP
Answer: C
Explanation:
Explanation
In January 2018, the Wi-Fi Alliance announced WPA3 as a replacement to WPA2.[3][4] The new standard uses 128-bit encryption in WPA3-Personal mode (192-bit in WPA3-Enterprise)[5] and forward secrecy.[6] The WPA3 standard also replaces the pre-shared key (PSK) exchange with Simultaneous Authentication of Equals as defined in IEEE 802.11-2016 resulting in a more secure initial key exchange in personal mode
https://en.wikipedia.org/wiki/Simultaneous_Authentication_of_Equals#:~:text=In%20cryptography%2C%20Sim
NEW QUESTION 175
A security analyst is performing a forensic investigation compromised account credentials. Using the Event Viewer, the analyst able to detect the following message, ''Special privileges assigned to new login.'' Several of these messages did not have a valid logon associated with the user before these privileges were assigned. Which of the following attacks is MOST likely being detected?
- A. Pass-the-hash
- B. Buffer overflow
- C. Cross-site scripting
- D. Session replay
Answer: A
Explanation:
https://www.beyondtrust.com/resources/glossary/pass-the-hash-pth-attack
NEW QUESTION 176
......
Audience Profile
If you are getting ready to explore what the world of cybersecurity offers with this Security+ SY0-601 exam, then you should have some hands-on experience in security concepts. Overall, Junior Security Engineers, Help Desk Technicians, or entry-level Security Analysts can level-up their careers with the aforementioned certification.
Latest SY0-601 Pass Guaranteed Exam Dumps with Accurate & Updated Questions: https://www.exam4pdf.com/SY0-601-dumps-torrent.html
Pass SY0-601 Exam with Updated SY0-601 Exam Dumps PDF 2022: https://drive.google.com/open?id=1uJTEcHc-7a3WE_c0mT0sIGuO_2G833c1
