SY0-601 P5 Question and answers rated A+ 2025/2026
1. Which of the following provides a catalog of
security and privacy controls related to the United D. NIST 800-53
States fed- eral information systems?
A. GDPR
B. PCI DSS
C. ISO 27000
D. NIST 800-53
2. A security analyst was asked to evaluate a
potential attack that occurred on a publicly D. XSS
accessible section of the company's website. The
malicious actor posted an entry in an attempt to
trick users into clicking the following: c0mptia
Fname Fscript
A. DLL injection
B. Session replay
C. SQLi
D. XSS
3. A company's Chief Information Security Officer (CISO) A. Hacktivists
recently warned the security manager that the
com- pany's Chief Executive Officer (CEO) is
planning to publish a controversial opinion article
in a national newspaper, which may result in new
cyberat- tacks. Which of the following would be
best for the security manager to use in a threat
mod- el?
A. Hacktivists
B. White-hat hackers
C. Script kiddies
D. Insider threats
4. C. CASB
,SY0-601 P5 Question and answers rated A+ 2025/2026
An analyst is concerned about data leaks and wants
to restrict access to internet services to authorized
users only. The analyst also wants to
control the actions each user can perform on each
service. Which of the following would be the best
tech- nology for the analyst to consider
Implementing?
A. DLP
B. VPC
C. CASB
D. Content filtering
D. Migrate to a cloud
5. A grocery store is expressing security and backup solution.
reliability concerns regarding the on-site backup
strategy cur- rently being performed by locally
attached
disks. The main concerns are the physical security
of the backup media and the durability of the data
stored on these devices. Which of the
following is a cost-effective approach to address
these concerns?
A. Enhance resiliency by adding a hardware RAID.
B. Move data to a tape library and store the
tapes off-site.
C. Install a local network-attached storage.
D. Migrate to a cloud backup solution.
6. A security engineer needs to recommend a C. A next-generation fire-
solution
to defend against malicious actors misusing protocols wall
and being allowed through network
defenses. Which of the following will the engineer
most likely recommend?
A. A content filter
,SY0-601 P5 Question and answers rated A+ 2025/2026
B. A WAF
C. A next-generation firewall
D. An IDS
C. Geolocation policy
7. A company's legal department drafted sensitive
doc- uments in a SaaS application and wants to
ensure the documents cannot be accessed by
individuals in high-risk countries. Which of the follow-
ing is the most effective way to limit this access?
A. Data masking
B. Encryption
C. Geolocation policy
D. Data sovereignty regulation
8. An organization suffered numerous multiday B. Generator
power outages at its current location. The Chief
Executive Officer wants to create a disaster F. UPS
recovery
strategy to resolve this issue. Which of the following
options offer low-cost solutions? (Choose two.)
A. Warm site
B. Generator
C. Hot site
D. Cold site
E. Cloud backups
F.UPS
9. A security analyst is reviewing the following
logs: q559 A. Password spraying
Which of the following attacks is most likely occur-
ring?
A. Password spraying
B. Account forgery
,SY0-601 P5 Question and answers rated A+ 2025/2026
C. Pass-the-hash
D. Brute-force
10. A security analyst discovers that one of the web D. WAF
APIs is being abused by an unknown third party.
Logs indi- cate that the third party is attempting
to
manipulate the parameters being passed to the
API endpoint. Which of the following solutions
would best help to protect against the attack?
A. DLP
B. SIEM
C. NIDS
D. WAF
11. An application owner reports suspicious activity A. Pass-the-hash
on an internal financial application from various
internal users within the past 14 days. A security
analyst notices the following:
•Financial transactions were occurring during
irreg- ular time frames and outside of business
hours by unauthorized users.
• Internal users in question were changing
their pass- words frequently during that time
period.
• A jump box that several domain
administrator users use to connect to remote
devices was recently com- promised.
• The authentication method used in the
environment is NTLM.
Which of the following types of attacks is most
likely being used to gain unauthorized access?
A. Pass-the-hash
B. Brute-force
1. Which of the following provides a catalog of
security and privacy controls related to the United D. NIST 800-53
States fed- eral information systems?
A. GDPR
B. PCI DSS
C. ISO 27000
D. NIST 800-53
2. A security analyst was asked to evaluate a
potential attack that occurred on a publicly D. XSS
accessible section of the company's website. The
malicious actor posted an entry in an attempt to
trick users into clicking the following: c0mptia
Fname Fscript
A. DLL injection
B. Session replay
C. SQLi
D. XSS
3. A company's Chief Information Security Officer (CISO) A. Hacktivists
recently warned the security manager that the
com- pany's Chief Executive Officer (CEO) is
planning to publish a controversial opinion article
in a national newspaper, which may result in new
cyberat- tacks. Which of the following would be
best for the security manager to use in a threat
mod- el?
A. Hacktivists
B. White-hat hackers
C. Script kiddies
D. Insider threats
4. C. CASB
,SY0-601 P5 Question and answers rated A+ 2025/2026
An analyst is concerned about data leaks and wants
to restrict access to internet services to authorized
users only. The analyst also wants to
control the actions each user can perform on each
service. Which of the following would be the best
tech- nology for the analyst to consider
Implementing?
A. DLP
B. VPC
C. CASB
D. Content filtering
D. Migrate to a cloud
5. A grocery store is expressing security and backup solution.
reliability concerns regarding the on-site backup
strategy cur- rently being performed by locally
attached
disks. The main concerns are the physical security
of the backup media and the durability of the data
stored on these devices. Which of the
following is a cost-effective approach to address
these concerns?
A. Enhance resiliency by adding a hardware RAID.
B. Move data to a tape library and store the
tapes off-site.
C. Install a local network-attached storage.
D. Migrate to a cloud backup solution.
6. A security engineer needs to recommend a C. A next-generation fire-
solution
to defend against malicious actors misusing protocols wall
and being allowed through network
defenses. Which of the following will the engineer
most likely recommend?
A. A content filter
,SY0-601 P5 Question and answers rated A+ 2025/2026
B. A WAF
C. A next-generation firewall
D. An IDS
C. Geolocation policy
7. A company's legal department drafted sensitive
doc- uments in a SaaS application and wants to
ensure the documents cannot be accessed by
individuals in high-risk countries. Which of the follow-
ing is the most effective way to limit this access?
A. Data masking
B. Encryption
C. Geolocation policy
D. Data sovereignty regulation
8. An organization suffered numerous multiday B. Generator
power outages at its current location. The Chief
Executive Officer wants to create a disaster F. UPS
recovery
strategy to resolve this issue. Which of the following
options offer low-cost solutions? (Choose two.)
A. Warm site
B. Generator
C. Hot site
D. Cold site
E. Cloud backups
F.UPS
9. A security analyst is reviewing the following
logs: q559 A. Password spraying
Which of the following attacks is most likely occur-
ring?
A. Password spraying
B. Account forgery
,SY0-601 P5 Question and answers rated A+ 2025/2026
C. Pass-the-hash
D. Brute-force
10. A security analyst discovers that one of the web D. WAF
APIs is being abused by an unknown third party.
Logs indi- cate that the third party is attempting
to
manipulate the parameters being passed to the
API endpoint. Which of the following solutions
would best help to protect against the attack?
A. DLP
B. SIEM
C. NIDS
D. WAF
11. An application owner reports suspicious activity A. Pass-the-hash
on an internal financial application from various
internal users within the past 14 days. A security
analyst notices the following:
•Financial transactions were occurring during
irreg- ular time frames and outside of business
hours by unauthorized users.
• Internal users in question were changing
their pass- words frequently during that time
period.
• A jump box that several domain
administrator users use to connect to remote
devices was recently com- promised.
• The authentication method used in the
environment is NTLM.
Which of the following types of attacks is most
likely being used to gain unauthorized access?
A. Pass-the-hash
B. Brute-force
