CompTIA Security+ SY0-601

On which of the following is the live acquisition of data for forensic analysis MOST dependent? (Choose TWO)

Which of the following disaster recovery tests is the LEAST time-consuming for the Disaster Recovery Team?

When used at the design stage, which of the following improves the efficiency, accuracy , and speed of a database?

Which of the following is an example of a secure voice communication protocol?

A transitive trust:

Which of the following is a type of incident that typically triggers the activation of a disaster recovery plan?

Which of the following best describes an Information Security Management System (ISMS)?

Which of the following is an example of a host-based intrusion detection system (HIDS)?

Which of the following encryption algorithms is symmetric?

Which of the following wil provide the best physical security counter measures to stop intruders? (Select TWO)

Which refers to applications and systems that are used within an organization without consent or approval?

Which of the following describes the ability of code to target a hypervisor from inside a guest OS?

Which of the following would be the BEST method for creating a detailed diagram of wireless access points and hotspots?

Which of the following cloud models provides clients with servers, storage and networks, but nothing else?

Which should be put in place when negotiating with a new vendor about timeliness of response to a significant incident?

Which of the following control sets should a well-written BCP include? (Select THREE)

Which of the following attacks can be mitigated by proper data retention policies?

Which of the following serves to warn users against downloading and installing pirated software on company devices?

What is the primary purpose of a secure socket layer (SSL) certificate?

Which of the following is the MOST likely motivation for a script kiddie threat actor?

Which one distributes data among nodes, making it more difficult to manipulate the data while also minimizing downtime?

Which incident response step involves actions to protect critical systems while maintaining business operations

A company labeled some documents with the public sensitivity classification. This means the documents can be accessed by

What type of attack involves intercepting and modifying communication between two parties?

Which of the following disaster recovery sites would require the MOST time to get operations back online?

In which of the following common use cases would steganography be employed?

Which of the following encryption algorithms require one encryption key? (Select TWO)

What is the primary purpose of a port scanner?

Which of the following is a secure protocol for transferring files?

Under GDPR, which of the following is MOST responsible for the protection of privacy and website user rights?

The exploitation of a buffer-overrun vulnerability in an application will MOST likely lead to:

Which of the following ISO standards is certified for privacy?

What is the primary purpose of a firewall in network security?

Which of the following is an example of a mobile device management (MDM) solution?

A symmetric encryption algorithm is BEST suited for:

Which of the following algorithms has the SMALLEST key size?

Which one is an administrative control that would be MOST effective to reduce the occurance of malware execution?

Which of the following is a valid multifactor authentication combination?

What type of incident involves an attacker exploiting a web application to send malicious code to a user's browser?

An organization is concerned about video emissions from users desktops. Which is the BEST solution to implement?