We provide real SY0-601 exam questions and answers braindumps in two formats. Download PDF & Practice Tests. Pass CompTIA SY0-601 Exam quickly & easily. The SY0-601 PDF type is available for reading and printing. You can print more and practice many times. With the help of our CompTIA SY0-601 dumps pdf and vce product and material, you can easily pass the SY0-601 exam.
Free SY0-601 Demo Online For CompTIA Certifitcation:
NEW QUESTION 1
Which of the following would be BEST to establish between organizations to define the responsibilities of each party outline the key deliverables and include monetary penalties for breaches to manage third-party risk?
- A. An ARO
- B. An MOU
- C. An SLA
- D. A BPA
Answer: B
NEW QUESTION 2
A security engineer is setting up passwordless authentication for the first time. INSTRUCTIONS
Use the minimum set of commands to set this up and verify that it works. Commands cannot be reused.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
- A. Mastered
- B. Not Mastered
Answer: A
Explanation: 
NEW QUESTION 3
Which of the following BEST explains the reason why a server administrator would place a document named password.txt on the desktop of an administrator account on a server?
- A. The document is a honeyfile and is meant to attract the attention of a cyberintruder.
- B. The document is a backup file if the system needs to be recovered.
- C. The document is a standard file that the OS needs to verify the login credentials.
- D. The document is a keylogger that stores all keystrokes should the account be compromised.
Answer: A
NEW QUESTION 4
A security analyst discovers that a company username and password database was posted on an internet forum. The username and passwords are stored in plan text. Which of the following would mitigate the damage done by this type of data exfiltration in the future?
- A. Create DLP controls that prevent documents from leaving the network
- B. Implement salting and hashing
- C. Configure the web content filter to block access to the forum.
- D. Increase password complexity requirements
Answer: A
NEW QUESTION 5
A small business just recovered from a ransomware attack against its file servers by purchasing the decryption keys from the attackers. The issue was triggered by a phishing email and the IT administrator wants to ensure it does not happen again. Which of the following should the IT administrator do FIRST after recovery?
- A. Scan the NAS for residual or dormant malware and take new daily backups that are tested on a frequent basis
- B. Restrict administrative privileges and patch ail systems and applications.
- C. Rebuild all workstations and install new antivirus software
- D. Implement application whitelisting and perform user application hardening
Answer: A
NEW QUESTION 6
Which of the following disaster recovery tests is The LEAST time-consuming for the disaster recovery team?
- A. Tabletop
- B. Parallel
- C. Full interruption
- D. Simulation
Answer: D
NEW QUESTION 7
Which of the following cloud models provides clients with servers, storage, and networks but nothing else?
- A. SaaS
- B. PaaS
- C. IaaS
- D. DaaS
Answer: C
NEW QUESTION 8
A company’s bank has reported that multiple corporate credit cards have been stolen over the past several weeks. The bank has provided the names of the affected cardholders to the company’s forensics team to assist in the cyber-incident investigation.
An incident responder learns the following information:
The timeline of stolen card numbers corresponds closely with affected users making Internet-based purchases from diverse websites via enterprise desktop PCs. All purchase connections were encrypted, and the company uses an SSL inspection proxy for the inspection of encrypted traffic of the hardwired network. Purchases made with corporate cards over the corporate guest WiFi network, where no SSL inspection occurs, were unaffected.
Which of the following is the MOST likely root cause?
- A. HTTPS sessions are being downgraded to insecure cipher suites
- B. The SSL inspection proxy is feeding events to a compromised SIEM
- C. The payment providers are insecurely processing credit card charges
- D. The adversary has not yet established a presence on the guest WiFi network
Answer: C
NEW QUESTION 9
A security analyst has been asked to investigate a situation after the SOC started to receive alerts from the SIEM. The analyst first looks at the domain controller and finds the following events:
To better understand what is going on, the analyst runs a command and receives the following output:
Based on the analyst’s findings, which of the following attacks is being executed?
- A. Credential harvesting
- B. Keylogger
- C. Brute-force
- D. Spraying
Answer: D
NEW QUESTION 10
An organization's Chief Security Officer (CSO) wants to validate the business's involvement in the incident response plan to ensure its validity and thoroughness. Which of the following will the CSO MOST likely use?
- A. An external security assessment
- B. A bug bounty program
- C. A tabletop exercise
- D. A red-team engagement
Answer: C
NEW QUESTION 11
A company is implementing MFA for all applications that store sensitive data. The IT manager wants MFA to be non-disruptive and user friendly. Which of the following technologies should the IT manager use when implementing MFA?
- A. One-time passwords
- B. Email tokens
- C. Push notifications
- D. Hardware authentication
Answer: C
NEW QUESTION 12
Joe, an employee, receives an email stating he won the lottery. The email includes a link that requests a name, mobile phone number, address, and date of birth be provided to confirm Joe’s identity before sending him the prize. Which of the following BEST describes this type of email?
- A. Spear phishing
- B. Whaling
- C. Phishing
- D. Vishing
Answer: C
NEW QUESTION 13
A network engineer needs to create a plan for upgrading the wireless infrastructure in a large office Priority must be given to areas that are currently experiencing latency and connection issues. Which of the following would be the BEST resource for determining the order of priority?
- A. Nmapn
- B. Heat maps
- C. Network diagrams
- D. Wireshark
Answer: C
NEW QUESTION 14
An organization has decided to host its web application and database in the cloud Which of the following BEST describes the security concerns for this decision?
- A. Access to the organization's servers could be exposed to other cloud-provider clients
- B. The cloud vendor is a new attack vector within the supply chain
- C. Outsourcing the code development adds risk to the cloud provider
- D. Vendor support will cease when the hosting platforms reach EOL.
Answer: B
NEW QUESTION 15
A security analyst is preparing a threat for an upcoming internal penetration test. The analyst needs to identify a method for determining the tactics, techniques, and procedures of a threat against the organization’s network. Which of the following will the analyst MOST likely use to accomplish the objective?
- A. A table exercise
- B. NST CSF
- C. MTRE ATT$CK
- D. OWASP
Answer: A
NEW QUESTION 16
Which of the following scenarios BEST describes a risk reduction technique?
- A. A security control objective cannot be met through a technical change, so the company purchases insurance and is no longer concerned about losses from data breaches.
- B. A security control objective cannot be met through a technical change, so the company implements a policy to train users on a more secure method of operation.
- C. A security control objective cannot be met through a technical change, so the company changes as method of operation
- D. A security control objective cannot be met through a technical change, so the Chief Information Officer (CIO) decides to sign off on the risk.
Answer: B
NEW QUESTION 17
A company recently transitioned to a strictly BYOD culture due to the cost of replacing lost or damaged corporate-owned mobile devices. Which of the following technologies would be BEST to balance the BYOD culture while also protecting the company’s data?
- A. Containerization
- B. Geofencing
- C. Full-disk encryption
- D. Remote wipe
Answer: C
NEW QUESTION 18
A university with remote campuses, which all use different service providers, loses Internet connectivity across all locations. After a few minutes, Internet and VoIP services are restored, only to go offline again at random intervals, typically within four minutes of services being restored. Outages continue throughout the day, impacting all inbound and outbound connections and services. Services that are limited to the local LAN or WiFi network are not impacted, but all WAN and VoIP services are affected.
Later that day, the edge-router manufacturer releases a CVE outlining the ability of an attacker to exploit the SIP protocol handling on devices, leading to resource exhaustion and system reloads. Which of the following BEST describe this type of attack? (Choose two.)
- A. DoS
- B. SSL stripping
- C. Memory leak
- D. Race condition
- E. Shimming
- F. Refactoring
Answer: AD
NEW QUESTION 19
When used at the design stage, which of the following improves the efficiency, accuracy, and speed of a database?
- A. Tokenization
- B. Data masking
- C. Normalization
- D. Obfuscation
Answer: C
NEW QUESTION 20
An analyst visits an internet forum looking for information about a tool. The analyst finds a threat that appears to contain relevant information. One of the posts says the following:
Which of the following BEST describes the attack that was attempted against the forum readers?
- A. SOU attack
- B. DLL attack
- C. XSS attack
- D. API attack
Answer: C
NEW QUESTION 21
......
P.S. Easily pass SY0-601 Exam with 218 Q&As Certshared Dumps & pdf Version, Welcome to Download the Newest Certshared SY0-601 Dumps: https://www.certshared.com/exam/SY0-601/ (218 New Questions)