あなたを合格させるCompTIA Security+ SY0-601試験問題集で2025年01月07日には1061問あります
SY0-601無料試験学習ガイド！（更新された1061問あります)
Comptia SY0-601（Comptia Security+）認定試験は、コアセキュリティ機能を実行し、ITセキュリティキャリアを追求するために必要なスキルと知識を検証するために設計されたグローバルに認められた認定試験です。ネットワークを確保し、リスクを管理するための基本原則、および業界で使用される最新のテクノロジーとツールをカバーしています。この認定は、セキュリティアナリスト、システム管理者、ネットワークエンジニア、セキュリティコンサルタントなど、セキュリティの知識とスキルを強化したいIT専門家を対象としています。
CompTIA SY0-601試験は、候補者のセキュリティ専門知識を検証するための、グローバルに認知された認定試験です。この試験は、幅広いトピックをカバーしており、セキュリティに関する知識とスキルを向上させたいITプロフェッショナルに適しています。この認定は、雇用主に広く認知され、個人のキャリアアップを支援することができます。この認定は3年間有効であり、候補者は継続教育単位（CEU）を修了するか、認定試験を再受験することで更新する必要があります。
質問 # 117
A security analyst is investigating some users who are being redirected to a fake website that resembles www.comptia.org. The following output was found on the naming server of the organization:
Which of the following attacks has taken place?
- A. Disassociation
- B. DNS poisoning
- C. Domain hijacking
- D. Domain reputation
正解：B
質問 # 118
Which of the following best describes the situation where a successfully onboarded employee who is using a fingerprint reader is denied access at the company's mam gate?
- A. Crossover error rate
- B. False rejection
- C. False positive
- D. False match raw
正解：B
解説：
False rejection Short Explanation: A false rejection occurs when a biometric system fails to recognize an authorized user and denies access. This can happen due to poor quality of the biometric sample, environmental factors, or system errors. References: https://www.comptia.org/blog/what-is-biometrics
質問 # 119
A security analyst discovers that one of the web APIs is being abused by an unknown third party. Logs indicate that the third party is attempting to manipulate the parameters being passed to the API endpoint.
Which of the following solutions would best help to protect against the attack?
- A. SIEM
- B. DLP
- C. WAF
- D. NIDS
正解：C
解説：
WAF stands for Web Application Firewall, which is a type of firewall that can monitor, filter and block web traffic to and from web applications. WAF can protect web applications from common attacks such as cross-site scripting (XSS), SQL injection, directory traversal, buffer overflow and more. WAF can also enforce security policies and rules that can prevent parameter manipulation or tampering by an unknown third party. WAF is the best solution to help protect against the attack on the web API, as it can inspect the HTTP requests and responses and block any malicious or anomalous activity. Verified References:
* Other Application Attacks - SY0-601 CompTIA Security+ : 1.3
https://www.professormesser.com/security-plus/sy0-601/sy0-601-video/other-application-attacks/ (See Web Application Firewall)
* CompTIA Security+ SY0-601 Exam Cram
https://www.oreilly.com/library/view/comptia-security-sy0-601/9780136798767/ch03.xhtml (See Web Application Firewall)
* Security+ domain #1: Attacks, threats, and vulnerabilities [updated 2021]
https://resources.infosecinstitute.com/certification/security-domain-1-threats-attacks-and-vulnerabilities/ (See Web application firewall)
質問 # 120
A company is discarding a classified storage array and hires an outside vendor to complete the disposal. Which of the following should the company request from the vendor?
- A. Certification
- B. Classification
- C. Proof of ownership
- D. Inventory list
正解：A
質問 # 121
A security analyst was called to Investigate a file received directly from a hardware manufacturer.
The analyst is trying to determine whether the file was modified in transit before installation on the user's computer. Which of the following can be used to safely assess the file?
- A. Check the hash of the installation file
- B. Match the file names
- C. Verify the URL download location
- D. Verify the code-signing certificate
正解：A
解説：
The hardware manufacturer will post the hash of the file publicly, and anyone who receives a copy of that file will be able to run a checksum on the file themselves, and compare them to the official manufacturer-provided checksum. Hashing is almost always the correct answer in these type of questions. You'll see a lot of Github repositories using hashed checksums as well for verification, and I recently just installed Java onto my new computer. Java provided me with a hashed checksum for the setup executable.
質問 # 122
Which of the following is the MOST effective control against zero-day vulnerabilities?
- A. Patch management
- B. Intrusion prevention system
- C. Network segmentation
- D. Multiple vulnerability scanners
正解：C
質問 # 123
A network technician is installing a guest wireless network at a coffee shop. When a customer purchases an Item, the password for the wireless network is printed on the recent so the customer can log in.
Which of the following will the technician MOST likely configure to provide the highest level of security with the least amount of overhead?
- A. WEP-TKIP
- B. WPA-EAP
- C. WPA-PSK
- D. WPS-PIN
正解：C
解説：
WPA-PSK is a pre-shared key authentication method that uses a passphrase to encrypt data. It is the most common type of WPA security and is relatively easy to configure. The passphrase can be printed on the receipt, making it easy for customers to connect to the network.
質問 # 124
A web server has been compromised due to a ransomware attack. Further investigation reveals the ransomware has been in the server for the past 72 hours.
The systems administrator needs to get the services back up as soon as possible. Which of the following should the administrator use to restore services to a secure state?
- A. The last incremental backup that was conducted 72 hours ago Most Voted
- B. The last known-good configuration Most Voted
- C. The baseline OS configuration
- D. The last full backup that was conducted seven days ago
正解：D
質問 # 125
During a recent penetration test, the tester discovers large amounts of data were exfiltrated over the course of
12 months via the internet. The penetration tester stops the test to inform the client of the findings Which of the following should be the client's NEXT step to mitigate the issue''
- A. Disconnect the entire infrastructure from the internet
- B. Perform containment on the critical servers and resources
- C. Review the firewall and identify the source of the active connection
- D. Conduct a full vulnerability scan to identify possible vulnerabilities
正解：B
質問 # 126
A security administrator installed a new web server. The administrator did this to increase the capacity for an application due to resource exhaustion on another server. Which of the following algorithms should the administrator use to split the number of the connections on each server in half?
- A. Round-robin
- B. Least connection
- C. Weighted response
- D. Weighted least connection
正解：A
質問 # 127
A systems administrator needs to implement an access control scheme that will allow an object's access policy to be determined by its owner. Which of the following access control schemes BEST fits the requirements?
- A. Discretionary access control
- B. Role-based access control
- C. Attribute-based access control
- D. Mandatory access control
正解：A
質問 # 128
While troubleshooting a service disruption on a mission-critical server, a technician discovered the user account that was configured to run automated processes was disabled because the user's password failed to meet password complexity requirements. Which of the following would be the BEST solution to securely prevent future issues?
- A. Using an administrator account to run the processes and disabling the account when it is not in use
- B. Implementing a shared account the team can use to run automated processes
- C. Configuring a service account to run the processes
- D. Removing the password complexity requirements for the user account
正解：C
解説：
A service account is a user account that is created specifically to run automated processes and services. These accounts are typically not associated with an individual user, and are used for running background services and scheduled tasks. By configuring a service account to run the automated processes, you can ensure that the account will not be disabled due to password complexity requirements and other user-related issues.
質問 # 129
The Chief Information Security Officer directed a nsk reduction in shadow IT and created a policy requiring all unsanctioned high-nsk SaaS applications to be blocked from user access Which of the following is the BEST security solution to reduce this risk?
- A. VPN concentrator
- B. MFA
- C. VPC endpoint
- D. CASB
正解：D
質問 # 130
A security analyst is reviewing the following system command history on a computer that was recently utilized in a larger attack on the corporate infrastructure
Which of the following best describes what the analyst has discovered?
- A. An attempt to utilize living-off-the-land binaries
- B. A successful privilege escalation attack by a local user
- C. A systems administrator performing routine maintenance
- D. A user determining what level of permissions the user has
正解：B
質問 # 131
An enterprise needs to keep cryptographic keys in a safe manner. Which of the following network appliances can achieve this goal?
- A. HSM
- B. TPM
- C. DLP
- D. CASB
正解：A
解説：
A hardware security module (HSM) is a security device you can add to a system to manage, generate, and securely store cryptographic keys.
High performance HSMs are external devices connected to a network using TCP/IP. Smaller HSMs come as expansion cards you install within a server, or as devices you plug into computer ports.
質問 # 132
......
SY0-601問題集はCompTIA Security+認証済み試験問題と解答：https://www.jpntest.com/shiken/SY0-601-mondaishu
実際に出ると確認されたSY0-601試験問題集と解答でSY0-601無料更新：https://drive.google.com/open?id=1SW7ieJqSADOrIFkuEohkn_GcwGxWdTvL