Free CompTIA SY0-601 Practice Exam with Questions & Answers | Set: 7

Which of the following is the best way to secure an on-site data center against intrusion from an insider?

Which of the following is the most important security concern when using legacy systems to provide production service?

A company is required to use certified hardware when building networks. Which of the following best addresses the risks associated with procuring counterfeit hardware?

A penetration test revealed that several Linux servers were misconfigured at the file level and access was granted incorrectly. A security analyst is referencing the instructions in the incident response runbook for remediation information. Which of the following is the best command to use to resolve the issue?

An audit identified Pll being utilized in the development environment of a critical application The Chief Privacy Officer (CPO) is adamant that this data must be removed; however, the developers state that they require real data to perform developmental and functionality tests. Which of the following should a security professional implement to best satisfy both the CPO's and the development team's requirements?

A systems administrator wants to add a second factor to the single sign-on portal that the organization uses. Currently, only a username and password are required. Which of the following should the administrator implement to best meet this requirement?

Which of the following are cases in which an engineer should recommend the decommissioning of a network device? (Select two).

After a web server was migrated to a cloud environment, user access to that server was blocked. Even though an on-premises firewall configuration has been modified to reflect the cloud infrastructure, users are still experiencing access issues. Which of the following most likely needs to be configured?

A security administrator is reissuing a former employee's laptop. Which of the following is the best combination of data handling activities for the administrator to perform? (Select two).

An organization with high security needs is concerned about unauthorized exfiltration of data via Wi-Fi from within a secure facility. Which of the following security controls should the company implement?

Which of the following is the phase in the incident response process when a security analyst reviews roles and responsibilities?

Which of the following threat actors is the most likely to be hired by a foreign government to attack critical systems located in other countries?

Which of the following is the best resource to consult for information on the most common application exploitation methods?

A security analyst is responding to a malware incident at a company. The malware connects to a command-and-control server on the internet in order to function. Which of the following should the security analyst implement first?

Which of the following would best explain why a security analyst is running daily vulnerability scans on all corporate endpoints?

Users are reporting performance issues from a specific application server. A security administrator are administrator is originating from. Which of the following types of log files should be used to capture this information?

A technician wants to improve the situational and environmental awareness of existing users as they transition from remote to in-office work. Which of the following is the best option?

Various stakeholders are meeting to discuss their hypothetical roles and responsibilities in a specific situation, such as a security incident or major disaster. Which of the following best describes this meeting?

Which of the following best practices gives administrators a set period to perform changes to an operational system to ensure availability and minimize business impacts?

Which of the following ensures an organization can continue to do business with minimal interruption in the event of a major disaster?