CompTIA SY0-601 Exam Questions & Answers

A penetration tester gains access to a network by exploiting a vulnerability on a public- facing web server. Which of the following techniques will the tester most likely perform NEXT?

A. Gather more Information about the target through passive reconnaissance.

B. Establish rules of engagement before proceeding.

C. Create a user account to maintain persistence.

D. Move laterally throughout the network to search for sensitive information.

A penetration tester was able to compromise an internal server and is now trying to pivot the current session in a network lateral movement Which of the following tools if available on the server, will provide the MOST useful information for the next assessment step?

A. Autopsy

B. Cuckoo

C. Memdump

D. Nmap

A security team received the following requirements for a new BYOD program that will allow employees to use personal smartphones to access business email:

1.

Sensitive customer data must be safeguarded.

2.

Documents from managed sources should not be opened in unmanaged destinations.

3.

Sharing of managed documents must be disabled.

4.

Employees should not be able to download emailed images to their devices.

5.

Personal photos and contact lists must be kept private.

6.

IT must be able to remove data from lost/stolen devices or when an employee no longer works for the company.

Which of the following are the best features to enable to meet these requirements? (Choose two.)

A. Remote wipe

B. VPN connection

C. Biometric authentication

D. Device location tracking

E. Geofencing

F. Application approve list

G. Containerization