Free CompTIA Security+ SY0-601 Practice Test

Vishing (also called voice phishing) is conducting phishing attacks using telephony. This often involves using VoIP features such as caller ID spoofing to avoid detection.

Containerization allows for the use of containers to virtually segment a device into separate computing environments. These environments are functionally completely different systems that cannot interact with each other or share resources.

Issuing a legal hold is the correct first step in the e-discovery process. A legal hold is a directive to preserve all forms of relevant information when litigation is reasonably anticipated. The preservation of this information is critical to prevent data tampering, deletion, or any other actions that could compromise the integrity of the evidence. Although all other options listed are essential parts of the process, they follow the initial preservation step ensured by a legal hold.

Mandatory vacation policies are principally designed to act as a preventative and detective control. When employees are away from their duties, others must fill in and handle their responsibilities, potentially revealing any irregularities, fraud, or unauthorized activities that the absent employee may have been concealing. It's an opportunity for the organization to audit and verify the integrity of the employee's work. Answer A is correct because it directly addresses the primary security benefit of detecting fraudulent activities or policy violations that might otherwise go unnoticed. Answer B is incorrect as it misleads by focusing on productivity, which isn't directly related to the security aspect of the mandatory vacation. Answer C is incorrect because decreasing reliance on a single employee does not directly relate to revealing fraud or misconduct, it generally addresses continuity and operational dependency. Answer D is incorrect because it diverts attention to cost-reduction, which is not a primary security concern associated with mandatory vacation policies.

The assertion is incorrect because HVAC systems are primarily responsible for regulating temperature and airflow to prevent hardware overheating but do not directly control static electricity buildup. Static electricity is typically managed through proper grounding and the use of antistatic mats, wristbands, and other ESD (electrostatic discharge) controls.

A Faraday cage is specifically designed to block external static and non-static electric fields by channeling electricity throughout the cage's conducting material, thus protecting the contents inside from electric charges and electromagnetic radiation. It is used in secure facilities to prevent electronic eavesdropping and unintended RF communication. Tempest shielding, while related to blocking external signals, is more about mitigating emanations from electronic equipment rather than creating a physical barrier. On the other hand, a soundproof room and a reinforced concrete wall may provide certain levels of protection against eavesdropping and RF signals, but neither is specifically designed to prevent RF signal leakage like a Faraday cage.

The order of volatility states that cache memory is the most volatile and should be collected first. Being volatile means that when power is removed from the system the contents of that memory will be lost.

Geofencing is the correct answer as it enables the organization to enforce policies based on the physical location of the device. By using geofencing, the organization can automatically disable the microphone on corporate mobile devices within the defined geographic boundaries of confidential meeting areas, thereby preventing unauthorized recordings without impeding the microphone usage outside of these areas.

Corrective controls are controls that are designed to “correct” damages caused by an incident. A data backup and recovery strategy is intended to correct damages that result from data loss.

The correct answer is Computer-based training (CBT) because it describes a type of training that is delivered through an electronic platform, often online, allowing self-paced learning. This type of training is scalable for medium to large organizations and can be updated easily to reflect new threats or compliance requirements. Web-based seminars are incorrect as they are usually live or pre-recorded presentations delivered online at scheduled times, not self-paced. Role-based training and Mandatory vacation do not fit the description; role-based training is specifically tailored to the role of the individual within the company, and mandatory vacation is a policy used to help discover fraud or other indiscretions within the organization when an employee is away from work, unrelated to the training method.

Sn1per is an automated scanner that can be used to automate the process of collecting data for exploration and penetration testing.

This type of WiFi network is called Guest WiFi. Guest WiFi's are intended for external users like subcontractors or 3rd party partners. It could also be permitted for employees personnel devices. In some cases the Guest WiFi may also allow restricted access to internal resources, but this needs to be properly secured to ensure access is limited as much as possible.

Regular intervals of outgoing traffic spikes associated with security incidents are indicative of a Command and Control (C2) server communication from compromised internal hosts, as this pattern suggests that the hosts are potentially part of a botnet receiving instructions from an external control server. Incorrect options revolve around red herrings that describe plausible scenarios but do not fit the provided pattern as closely as the C2 server communication does.

Displaying a generic error message without details about the system architecture or software versions is the correct approach because it prevents attackers from gaining insights into the underlying system, which could assist in crafting targeted attacks. Providing excessive details can inadvertently supply attackers with valuable information. Logging the error internally is useful for debugging but does not directly address the concern of exposing details to the user. Redirecting to the home page could create usability concerns and may not address the root issue of sensitive error disclosures. Customizing HTTP response codes is not a sufficient method for obscuring sensitive error information because these codes could still reveal system characteristics.

The correct answer is 'To produce a fixed-size output that uniquely represents the data.' Hash functions are designed to take an input (or 'message') and return a fixed-size string of bytes. The output, called the hash value (or 'digest'), typically looks much different from the input and is unique to the original piece of data. This uniqueness property makes hashing useful for data integrity checks since any change to the data will result in a different hash value. The incorrect options either do not accurately describe the primary purpose of hashing or describe attributes of other security mechanisms (e.g., encryption, tokenization).