Ultimate Guide to Prepare SY0-601 Certification Exam for CompTIA Security+ in 2021
Use Real SY0-601 Dumps - CompTIA Correct Answers updated on 2021
NEW QUESTION 71
A company recently added a DR site and is redesigning the network. Users at the DR site are having issues browsing websites.
INSTRUCTIONS
Click on each firewall to do the following:
* Deny cleartext web traffic.
* Ensure secure management protocols are used.
* Resolve issues at the DR site.
The ruleset order cannot be modified due to outside constraints.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
See explanation below.
Explanation
Firewall 1:
DNS Rule - ANY --> ANY --> DNS --> PERMIT
HTTPS Outbound - 10.0.0.1/24 --> ANY --> HTTPS --> PERMIT
Management - ANY --> ANY --> SSH --> PERMIT
HTTPS Inbound - ANY --> ANY --> HTTPS --> PERMIT
HTTP Inbound - ANY --> ANY --> HTTP --> DENY
Firewall 2:
Firewall 3:
DNS Rule - ANY --> ANY --> DNS --> PERMIT
HTTPS Outbound - 192.168.0.1/24 --> ANY --> HTTPS --> PERMIT
Management - ANY --> ANY --> SSH --> PERMIT
HTTPS Inbound - ANY --> ANY --> HTTPS --> PERMIT
HTTP Inbound - ANY --> ANY --> HTTP --> DENY
NEW QUESTION 72
A security engineer needs to enhance MFA access to sensitive areas in a building. A key card and fingerprint scan are already in use. Which of the following would add another factor of authentication?
- A. Hard token
- B. Retina scan
- C. Keypad PIN
- D. SMS text
Answer: B
NEW QUESTION 73
Select the appropriate attack and remediation from each drop-down list to label the corresponding attack with its remediation.
INSTRUCTIONS
Not all attacks and remediation actions will be used.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
NEW QUESTION 74
Which of the following will MOST likely cause machine learning and Al-enabled systems to operate with unintended consequences?
- A. Data bias
- B. Buffer overflows
- C. Stored procedures
- D. Code reuse
Answer: A
Explanation:
Explanation
https://lionbridge.ai/articles/7-types-of-data-bias-in-machine-learning/
NEW QUESTION 75
The IT department's on-site developer has been with the team for many years. Each time an application is released, the security team is able to identify multiple vulnerabilities. Which of the following would BEST help the team ensure the application is ready to be released to production?
- A. Obfuscate the source code.
- B. Submit the application to QA before releasing it.
- C. Limit the use of third-party libraries.
- D. Prevent data exposure queries.
Answer: B
NEW QUESTION 76
A security analyst sees the following log output while reviewing web logs:
Which of the following mitigation strategies would be BEST to prevent this attack from being successful?
- A. Stored procedures
- B. Input validation
- C. Code signing
- D. Secure cookies
Answer: B
NEW QUESTION 77
An analyst visits an internet forum looking for information about a tool. The analyst finds a threat that appears to contain relevant information. One of the posts says the following:
Which of the following BEST describes the attack that was attempted against the forum readers?
- A. DLL attack
- B. API attack
- C. SOU attack
- D. XSS attack
Answer: D
NEW QUESTION 78
A security analyst reviews the datacenter access logs for a fingerprint scanner and notices an abundance of errors that correlate with users' reports of issues accessing the facility. Which of the following MOST likely the cause of the cause of the access issues?
- A. False rejection
- B. Cross-over error rate
- C. Efficacy rale
- D. Attestation
Answer: B
NEW QUESTION 79
A security analyst Is hardening a Linux workstation and must ensure It has public keys forwarded to remote systems for secure login Which of the following steps should the analyst perform to meet these requirements?
(Select TWO).
- A. Forward the keys using scp.
- B. Forward the keys using ssh-keyger.
- C. Forward the keys using openssl -s.
- D. Forward the keys using ash -i.
- E. Forward the keys using ssh-copy-id.
Answer: C,E
NEW QUESTION 80
Which of the following BEST describes a security exploit for which a vendor patch is not readily available?
- A. Integer overflow
- B. Race condition
- C. Zero-day
- D. End of life
Answer: C
NEW QUESTION 81
An organization routes all of its traffic through a VPN Most users are remote and connect into a corporate datacenter that houses confidential information There is a firewall at the Internet border followed by a DIP appliance, the VPN server and the datacenter itself. Which of the following is the WEAKEST design element?
- A. Split-tunnel connections can negatively impact the DLP appliance's performance
- B. Encrypted VPN traffic will not be inspected when entering or leaving the network
- C. Adding two hops in the VPN tunnel may slow down remote connections
- D. The DLP appliance should be integrated into a NGFW.
Answer: B
NEW QUESTION 82
A user recent an SMS on a mobile phone that asked for bank delays. Which of the following social-engineering techniques was used in this case?
- A. Smishing
- B. SPIM
- C. Vishing
- D. Spear phishing
Answer: A
NEW QUESTION 83
A company has limited storage available and online presence that cannot for more than four hours. Which of the following backup methodologies should the company implement to allow for the FASTEST database restore time In the event of a failure, which being maindful of the limited available storage space?
- A. Implement full backups every Sunday at 8:00 p.m and nightly differential backups at 8:00
- B. Implement different backups every Sunday at 8:00 and nightly incremental backups at 8:00 p.m
- C. Implement nightly full backups every Sunday at 8:00 p.m
- D. Implement fulltape backup every Sunday at 8:00 p.m and perform nightly tape rotations.
Answer: B
NEW QUESTION 84
Which of the following will MOST likely cause machine learning and Al-enabled systems to operate with unintended consequences?
- A. Stored procedures
- B. Buffer overflows
- C. Data bias
- D. Code reuse
Answer: A
Explanation:
https://lionbridge.ai/articles/7-types-of-data-bias-in-machine-learning/
NEW QUESTION 85
After entering a username and password, an administrator must draw a gesture on a touch screen. Which of the following demonstrates what the administrator is providing?
- A. Two-factor authentication
- B. Multifactor authentication
- C. Something you can do
- D. Biometrics
Answer: C
NEW QUESTION 86
The security administrator has installed a new firewall which implements an implicit DENY policy by default.
INSTRUCTIONS:
Click on the firewall and configure it to allow ONLY the following communication.
1. The Accounting workstation can ONLY access the web server on the public network over the default HTTPS port. The accounting workstation should not access other networks.
2. The HR workstation should be restricted to communicate with the Financial server ONLY, over the default SCP port
3. The Admin workstation should ONLY be able to access the servers on the secure network over the default TFTP port.
Instructions: The firewall will process the rules in a top-down manner in order as a first match The port number must be typed in and only one port number can be entered per rule Type ANY for all ports. The original firewall configuration can be reset at any time by pressing the reset button. Once you have met the simulation requirements, click save and then Done to submit.
Hot Area:
Answer:
Explanation:
Explanation
Graphical user interface Description automatically generated with medium confidence
Graphical user interface Description automatically generated
Section: Network Security
Implicit deny is the default security stance that says if you aren't specifically granted access or privileges for a resource, you're denied access by default.Rule #1 allows the Accounting workstation to ONLY access the web server on the public network over the default HTTPS port, which is TCP port 443.Rule #2 allows the HR workstation to ONLY communicate with the Financial server over the default SCP port, which is TCP Port
22Rule #3 & Rule #4 allow the Admin workstation to ONLY access the Financial and Purchasing servers located on the secure network over the default TFTP port, which is Port 69.
References:Stewart,
James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp. 26, 44
http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers
NEW QUESTION 87
An organization's RPO for a critical system is two hours. The system is used Monday through Friday, from
9:00 am to 5:00 pm.Currently, the organization performs a full backup every Saturday that takes four hours to complete. Which of the following additional backup implementations would be the BEST way for the analyst to meet the business requirements?
- A. Incremental backupsMonday through Friday at 6:00 p.m and differential backups hourly
- B. incremental backups Monday through Friday at 6:00 p.m and full backups hourly.
- C. Full backups Monday through Friday at 6:00 p.m and differential backups hourly.
- D. Full backups Monday through Friday at 6:00 p.m and incremental backups hourly.
Answer: A
NEW QUESTION 88
A cybersecurity manager has scheduled biannual meetings with the IT team and department leaders to discuss how they would respond to hypothetical cyberattacks. During these meetings, the manager presents a scenario and injects additional information throughout the session to replicate what might occur in a dynamic cybersecurity event involving the company, its facilities, its data, and its staff. Which of the following describes what the manager is doing?
- A. Developing an incident response plan
- B. Conducting a tabletop exercise
- C. Building a disaster recovery plan
- D. Running a simulation exercise
Answer: B
NEW QUESTION 89
A cybersecurity administrator has a reduced team and needs to operate an on-premises network and security infrastructure efficiently. To help with the situation, the administrator decides to hire a service provider.
Which of the following should the administrator use?
- A. AAA
- B. MSSP
- C. IaaS
- D. Microservices
- E. SDP
Answer: B
NEW QUESTION 90
A security analyst receives a SIEM alert that someone logged in to the appadmin test account, which is only used for the early detection of attacks. The security analyst then reviews the following application log:
Which of the following can the security analyst conclude?
- A. An injection attack is being conducted against a user authentication system.
- B. A service account password may have been changed, resulting in continuous failed logins within the application.
- C. A replay attack is being conducted against the application.
- D. A credentialed vulnerability scanner attack is testing several CVEs against the application.
Answer: B
NEW QUESTION 91
After segmenting the network, the network manager wants to control the traffic between the segments. Which of the following should the manager use to control the network traffic?
- A. A VPN
- B. An ACL
- C. A DMZ
- D. A VLAN
Answer: D
NEW QUESTION 92
A security analyst needs to produce a document that details how a security incident occurred, the steps that were taken for recovery, and how future incidents can be avoided. During which of the following stages of the response process will this activity take place?
- A. Lessons learned
- B. Identification
- C. Recovery
- D. Preparation
Answer: A
NEW QUESTION 93
Select the appropriate attack and remediation from each drop-down list to label the corresponding attack with its remediation.
INSTRUCTIONS
Not all attacks and remediation actions will be used.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
NEW QUESTION 94
A security analyst receives a SIEM alert that someone logged in to the appadmin test account, which is only used for the early detection of attacks. The security analyst then reviews the following application log:
Which of the following can the security analyst conclude?
- A. An injection attack is being conducted against a user authentication system.
- B. A service account password may have been changed, resulting in continuous failed logins within the application.
- C. A replay attack is being conducted against the application.
- D. A credentialed vulnerability scanner attack is testing several CVEs against the application.
Answer: B
NEW QUESTION 95
......
CompTIA Security+ -SY0-601 Exam-Practice-Dumps: https://www.exam4pdf.com/SY0-601-dumps-torrent.html
SY0-601 Premium Files Test pdf - Free Dumps Collection: https://drive.google.com/open?id=1uJTEcHc-7a3WE_c0mT0sIGuO_2G833c1
