SY0-601

SY0-601 practice questions, page 9 of 35, with answer review and explanations.

Question 41

A company wants to restrict emailing of PHI documents. The company is implementing a DLP solution. In order to restrict PHI documents, which of the following should be performed FIRST?

  1. Retention
  2. Governance
  3. Classification
  4. Change management

Question 42

A security analyst is investigating some users who are being redirected to a fake website that resembles www.comptia.org. The following output was found on the naming server of the organization: Which of the following attacks has taken place?

  1. Domain reputation
  2. Domain hijacking
  3. Disassociation
  4. DNS poisoning

Question 43

Which of the following describes the continuous delivery software development methodology?

  1. Waterfall
  2. Spiral
  3. V-shaped
  4. Agile

Question 44

Which of the following is the BEST example of a cost-effective physical control to enforce a USB removable media restriction policy?

  1. Putting security/antitamper tape over USB ports, logging the port numbers, and regularly inspecting the ports
  2. Implementing a GPO that will restrict access to authorized USB removable media and regularly verifying that it is enforced
  3. Placing systems into locked, key-controlled containers with no access to the USB ports
  4. Installing an endpoint agent to detect connectivity of USB and removable media

Question 45

A company suspects that some corporate accounts were compromised. The number of suspicious logins from locations not recognized by the users is increasing. Employees who travel need their accounts protected without the risk of blocking legitimate login requests that may be made over new sign-in properties. Which of the following security controls can be implemented?

  1. Enforce MFA when an account request reaches a risk threshold.
  2. Implement geofencing to only allow access from headquarters.
  3. Enforce time-based login requests that align with business hours.
  4. Shift the access control scheme to a discretionary access control.