Security+ SY0-601 Practice – Set M

Question 1

Which of the following would BEST protect the company from data exfiltration via removable media?

Accepted Answer

Block removable media & write access via host-based security tool.

Question 2

Which of the following is the MOST likely root cause?

Accepted Answer

The payment providers are insecurely processing credit card charges

Question 3

Why would a server admin place a document named password.txt on a desktop of an admin account on a server?

Accepted Answer

Honeyfile document designed to lure cyberintruder.

Question 4

Two options to prevent direct network access to laptops.

Accepted Answer

Trusted Platform Module (TPM), A host-based firewall

Question 5

Which of the following is the router experiencing?

Accepted Answer

Resource Exhaustion

Question 6

Which of the following would be the BEST way to achieve this objective?

Accepted Answer

Security Assertion Markup Language (SAML)

Question 7

Which of these organizations determine to be the GREATEST risk to intellectual property when creating this policy?

Accepted Answer

Data exfiltration over a mobile hotspot

Question 8

Which of the following recommendations would BEST address the concerns about the amount of PII stored locally?

Accepted Answer

Implement managed Full-disk encryption (FDE)

Question 9

Which of the following solutionswould BEST support the policy?

Accepted Answer

Mobile device management

Question 10

In which of the following risk management strategies would cybersecurity insurance be used?

Accepted Answer

Transference

Question 11

Which of the following technologies should the IT manager use when implementing MFA?

Accepted Answer

Push notifications

Question 12

Which of the following BEST describes this process?

Accepted Answer

Continuous integration

Question 13

Which is true?

Accepted Answer

SLA

Question 14

Which of the following would BEST help the team ensure the application is ready to be released to production?

Accepted Answer

Submit the application to QA before releasing it.

Question 15

Which of the followingaccess control schemes would be BEST for the company to implement?

Accepted Answer

Mandatory

Question 16

Which of the following would meet the organization’s needs for a third factor?

Accepted Answer

Fingerprints

Question 17

An org. is developing a plan in the event of a complete loss of critical systems and data.

Accepted Answer

Disaster Recovery

Question 18

Which of the following recommendations would be BEST to mitigate the impacts of a similar incident in the future?

Accepted Answer

Segment the network with firewalls.

Question 19

Threat intelligence.

Accepted Answer

Anonymize any PII that is observed within the IoC data.

Question 20

Which of the following recommendations would BEST address the CSO’s concern?

Accepted Answer

Chain of custody

Question 21

Which of the following is the BEST solution to protect these designs?

Accepted Answer

An air gap

Question 22

What policy would help identify & mitigate potential single points of failure in the co.&#x27;s IT/security operations?

Accepted Answer

Separation of duties

Question 23

In which of the following situations would it be BEST to use a detective control type for mitigation in a company?

Accepted Answer

IPS bought to monitor traffic, not block it as intended.

Question 24

Which of the following describes what the manager is doing?

Accepted Answer

Conducting a tabletop exercise

Question 25

Which of the following BEST explains the appliance’s vulnerable state?

Accepted Answer

The vendor has not supplied a patch for the appliance.

Question 26

What should the security manager consult first for forensics?

Accepted Answer

The vulnerability scan output

Question 27

Which of the following refers to app and systems that are used within an organization without consent or approval?

Accepted Answer

Shadow IT

Question 28

When configuring the MDM, which of the following is a key security implication of this heterogeneous device approach?

Accepted Answer

Compensatory controls needed for less secure devices.

Question 29

Which of the following can the security analyst conclude?

Accepted Answer

Service account password change causes failed logins.

Question 30

Which of the following control types is an IDS?

Accepted Answer

Detective

Security+ SY0-601 Practice – Set M

Questions 30

Security+ SY0-601 Practice – Set M

Questions 30