SY0-601 Online Practice Questions and Answers

Correct Answer: A

Chmod removes the setuido permission, that is, it removes the S bit. Setuido is the specific permission, but it is removed with Chmod.

https://www.cbtnuggets.com/blog/technology/system-admin/linux-file-permissions-understanding-setuid-setgid-and-the-sticky-bit

Correct Answer: B

Correct Answer: A

The right-to-audit clause in a contract would enable the company to perform annual security audits on the vendor. This clause gives the company the ability to monitor the ongoing security practices and maturity of the vendor. By conducting security audits, the company can assess the vendor's compliance with security requirements, identify potential security risks, and ensure that the vendor is implementing appropriate security measures. This is a common practice to maintain oversight and ensure security alignment between the company and its vendors.

Correct Answer: C

Containerization is defined as a form of operating system virtualization, through which applications are run in isolated user spaces called containers, all using the same shared operating system (OS).

Correct Answer: C

A. incorrect, there cannot be a "common" configuration profile applied to different vendor devices, each device vendor will need a different profile configured for it. B. incorrect, SCEP-based is the most common type of enrollment, if this were true, all MDM certificates would unnecessarily be exposed.

C. correct, the compensating control would be a baseline mdm profile for each vendor (IOS, Android, Samsung, etc.)

D. incorrect, MDMs do in fact support heterogeneous deployments, minimum most MDM's will support IOS and Android.

Device enrollment with Intune https://docs.microsoft.com/en-us/mem/intune/user-help/use-managed-devices-to-get-work-done

SCEP Information https://docs.microsoft.com/en-us/mem/intune/protect/certificates-configure

Correct Answer: C

The NIST Risk Management Framework (RMF) is a process for evaluating the security of a system and implementing controls to reduce potential risks associated with it. The RMF process involves categorizing the system, selecting the controls that apply to the system, implementing the controls, and then assessing the success of the controls before authorizing the system. For more information on the NIST Risk Management Framework and other security processes, refer to the CompTIA Security+ SY0-601 Official Text Book and Resources.

Correct Answer: C

"HVACKer attacks are only useful for relaying commands into an air-gapped network, but not for stealing data. While malware can control a computer's heat emissions, *HVAC units are not equipped with enough accurate temperature sensors to pick up data* from a computer's almost indiscernible heat emissions."

Correct Answer: A

False Acceptance - There are only two metrics that are used to determine the performance of biometrics: FAR (False Acceptance Rate) and FRR (False Rejection Rate). False Acceptance Rate is a metric for biometric performance that determines the number of instances where unauthorized persons were incorrectly authorized. For this question, a biometric error would mean that someone was authorized when they weren't supposed to be authorized.

Correct Answer: D

The acceptable use policy (AUP) defines the rules and guidelines for using company resources, including computers, laptops, and other devices. It typically specifies what activities are allowed and prohibited on company devices, such as accessing social media applications. By reviewing the AUP, a security analyst can determine whether accessing social media applications on a company device is permitted or not.

Correct Answer: