SY0-601 Practice Online

Question 1

Which of the following describes where an attacker can purchase DDoS or ransomware services?

A : Threat intelligence

B : Open-source intelligence

C : Vulnerability database

D : Dark web

Answer: D

Question 2

A company recently enhanced mobile device configuration by implementing a set of security controls: biometrics, context-aware authentication, and full device encryption. Even with these settings in place, an unattended phone was used by a malicious actor to access corporate data.

Which of the following additional controls should be put in place first?

A : GPS tagging

B : Remote wipe

C : Screen lock timer

D : SEAndroid

Answer: C

Question 3

A security analyst is investigating suspicious traffic on the web server located at IP address 10.10.1.1. A search of the WAF logs reveals the following output:

Other-Image-25e56aa85-5963-487b-841b-a2c909cd6811

Which of the following is MOST likely occurring?

A : XSS attack

B : SQLi attack

C : Replay attack

D : XSRF attack

Answer: B

Question 4

A new security engineer has started hardening systems. One of the hardening techniques the engineer is using involves disabling remote logins to the NAS. Users are now reporting the inability to use SCP to transfer files to the NAS, even though the data is still viewable from the users' PCs. Which of the following is the MOST likely cause of this issue?

A : TFTP was disabled on the local hosts

B : SSH was turned off instead of modifying the configuration file

C : Remote login was disabled in the networkd.conf instead of using the sshd.conf

D : Network services are no longer running on the NAS.

Answer: B

Question 5

What is the difference between a rootkit and privilege escalation?

A : Rootkits propagate themselves, while privilege escalation gives attackers additional resource permissions

B : Privilege escalation can result from the installation of a rootkit.

C : Rootkits are the result of privilege escalation.

D : Each uses a different TCP port.

Answer: B

Name:	CompTIA Security+
Exam Code:	SY0-601
Certification:	CompTIA Security+
Vendor:	CompTIA
Total Questions:	1889
Last Updated:	May 13, 2024

Download Demo SY0-601 Dumps

Create Account

Password Recovery

SY0-601 Practice Online

Download Demo SY0-601 Dumps

Member Login

Create Account

Password Recovery

SY0-601 Practice Online