s@lm@n
CompTIA
Exam SY0-601
CompTIA Security+ Exam 2022
Version: 53.0
[ Total Questions: 848 ]
Topic break down
Topic No. of Questions
Topic 1: Exam Pool A 150
Topic 2: Exam Pool B 109
Topic 3: Exam Pool C (NEW) 341
Topic 4: Exam Pool D (NEW) 106
Topic 5: Exam Pool E (NEW) 108
Topic 6: Exam Pool F (NEW) 34
, CompTIA SY0-601 : Practice Test
Topic 1, Exam Pool A
Question No : 1 - (Topic 1)
A user is attempting to navigate to a website from inside the company network using a
desktop. When the user types in the URL. https://www.site.com, the user is presented with
a certificate mismatch warning from the browser. The user does not receive a warning
when visiting http://www.anothersite.com. Which of the following describes this attack?
A. On-path
B. Domain hijacking
C. DNS poisoning
D. Evil twin
Answer: C
Question No : 2 - (Topic 1)
Which of the following provides a calculated value for known vulnerabilities so
organizations can prioritize mitigation steps?
A. CVSS
B. SIEM
C. SOAR
D. CVE
Answer: A
Explanation: CVSS is maintained by the Forum of Incident Response and Security Teams
( first.org/cvss). CVSS metrics generate a score from 0 to 10 based on characteristics of
the vulnerability, such as whether it can be triggered remotely or needs local access,
whether user intervention is required, and so on
Question No : 3 - (Topic 1)
Pass Your Certification With Marks4sure Guarantee 2
, CompTIA SY0-601 : Practice Test
A security administrator is analyzing the corporate wireless network The network only has
two access points running on channels 1 and 11. While using airodump-ng. the
administrator notices other access points are running with the same corporate ESSID on all
available channels and with the same BSSID of one of the legitimate access ports Which of
the following attacks in happening on the corporate network?
A. Man in the middle
B. Evil twin
C. Jamming
D. Rogue access point
E. Disassociation
Answer: B
Question No : 4 - (Topic 1)
A security analyst receives an alert from trie company's SIEM that anomalous activity is
coming from a local source IP address of 192.168.34.26. The Chief Information Security
Officer asks the analyst to block the originating source Several days later, another
employee opens an internal ticket stating that vulnerability scans are no longer being
performed properly. The IP address the employee provides is 192 168.3426. Which of the
following describes this type of alert?
A. True positive
B. True negative
C. False positive
D. False negative
Answer: C
Question No : 5 - (Topic 1)
DDoS attacks are causing an overload on the cluster of cloud servers. A security architect
is researching alternatives to make the cloud environment respond to load fluctuation in a
cost-effective way. Which of the following options BEST fulfils the architect’s requirements?
A. An orchestration solution that can adjust scalability of cloud assets
Pass Your Certification With Marks4sure Guarantee 3
, CompTIA SY0-601 : Practice Test
B. Use of multipath by adding more connections to cloud storage
C. Cloud assets replicated on geographically distributed regions
D. An on-site backup that is deployed and only used when the load increases
Answer: A
Explanation:
Scaling cloud infrastructures can experience lag during the periods of high activity, where
other assets have to either be added, or become active. This is the compromise for a
costeffective solution that scales. The company could go for a system that is absolutely
overkill on assets at all times, in preparation for those brief peak moments. But this is
expensive, and unlikely to be taken by most companies. Only case you would want to use
one of these is if you have a sensitive or critical service that MUST remain online. Stock
exchange servers, military servers, bank servers, etc. come to mind for this criteria.
Question zNo z: z6 z z- z(Topic z1)
Which zof zthe zfollowing ztools zis zeffective zin zpreventing za zuser zfrom zaccessing
zunauthorized zremovable zmedia?
z
A. USB zdata zblocker z z
B. Faraday zcage z z
C. Proximity zreader z z
D. Cable zlock z z
z
Answer: zB
z
z
Question zNo z: z7 z z- z(Topic z1)
The zChief zInformation zSecurity zOfficer zwants zto zprevent zexfiltration zof zsensitive
zinformation zfrom zemployee zcell zphones zwhen zusing zpublic zUSB zpower zcharging
zstations. zWhich zof zthe zfollowing zwould zbe zthe zBEST zsolution zto zImplement?
z
A. DLP z
B. USB zdata zblocker z
Pass Your Certification With Marks4sure Guarantee 4
CompTIA
Exam SY0-601
CompTIA Security+ Exam 2022
Version: 53.0
[ Total Questions: 848 ]
Topic break down
Topic No. of Questions
Topic 1: Exam Pool A 150
Topic 2: Exam Pool B 109
Topic 3: Exam Pool C (NEW) 341
Topic 4: Exam Pool D (NEW) 106
Topic 5: Exam Pool E (NEW) 108
Topic 6: Exam Pool F (NEW) 34
, CompTIA SY0-601 : Practice Test
Topic 1, Exam Pool A
Question No : 1 - (Topic 1)
A user is attempting to navigate to a website from inside the company network using a
desktop. When the user types in the URL. https://www.site.com, the user is presented with
a certificate mismatch warning from the browser. The user does not receive a warning
when visiting http://www.anothersite.com. Which of the following describes this attack?
A. On-path
B. Domain hijacking
C. DNS poisoning
D. Evil twin
Answer: C
Question No : 2 - (Topic 1)
Which of the following provides a calculated value for known vulnerabilities so
organizations can prioritize mitigation steps?
A. CVSS
B. SIEM
C. SOAR
D. CVE
Answer: A
Explanation: CVSS is maintained by the Forum of Incident Response and Security Teams
( first.org/cvss). CVSS metrics generate a score from 0 to 10 based on characteristics of
the vulnerability, such as whether it can be triggered remotely or needs local access,
whether user intervention is required, and so on
Question No : 3 - (Topic 1)
Pass Your Certification With Marks4sure Guarantee 2
, CompTIA SY0-601 : Practice Test
A security administrator is analyzing the corporate wireless network The network only has
two access points running on channels 1 and 11. While using airodump-ng. the
administrator notices other access points are running with the same corporate ESSID on all
available channels and with the same BSSID of one of the legitimate access ports Which of
the following attacks in happening on the corporate network?
A. Man in the middle
B. Evil twin
C. Jamming
D. Rogue access point
E. Disassociation
Answer: B
Question No : 4 - (Topic 1)
A security analyst receives an alert from trie company's SIEM that anomalous activity is
coming from a local source IP address of 192.168.34.26. The Chief Information Security
Officer asks the analyst to block the originating source Several days later, another
employee opens an internal ticket stating that vulnerability scans are no longer being
performed properly. The IP address the employee provides is 192 168.3426. Which of the
following describes this type of alert?
A. True positive
B. True negative
C. False positive
D. False negative
Answer: C
Question No : 5 - (Topic 1)
DDoS attacks are causing an overload on the cluster of cloud servers. A security architect
is researching alternatives to make the cloud environment respond to load fluctuation in a
cost-effective way. Which of the following options BEST fulfils the architect’s requirements?
A. An orchestration solution that can adjust scalability of cloud assets
Pass Your Certification With Marks4sure Guarantee 3
, CompTIA SY0-601 : Practice Test
B. Use of multipath by adding more connections to cloud storage
C. Cloud assets replicated on geographically distributed regions
D. An on-site backup that is deployed and only used when the load increases
Answer: A
Explanation:
Scaling cloud infrastructures can experience lag during the periods of high activity, where
other assets have to either be added, or become active. This is the compromise for a
costeffective solution that scales. The company could go for a system that is absolutely
overkill on assets at all times, in preparation for those brief peak moments. But this is
expensive, and unlikely to be taken by most companies. Only case you would want to use
one of these is if you have a sensitive or critical service that MUST remain online. Stock
exchange servers, military servers, bank servers, etc. come to mind for this criteria.
Question zNo z: z6 z z- z(Topic z1)
Which zof zthe zfollowing ztools zis zeffective zin zpreventing za zuser zfrom zaccessing
zunauthorized zremovable zmedia?
z
A. USB zdata zblocker z z
B. Faraday zcage z z
C. Proximity zreader z z
D. Cable zlock z z
z
Answer: zB
z
z
Question zNo z: z7 z z- z(Topic z1)
The zChief zInformation zSecurity zOfficer zwants zto zprevent zexfiltration zof zsensitive
zinformation zfrom zemployee zcell zphones zwhen zusing zpublic zUSB zpower zcharging
zstations. zWhich zof zthe zfollowing zwould zbe zthe zBEST zsolution zto zImplement?
z
A. DLP z
B. USB zdata zblocker z
Pass Your Certification With Marks4sure Guarantee 4
