SY0-601 Free Practice Test

- (Exam Topic 6)
A company owns a public-facing e-commerce website. The company outsources credit card transactions to a payment company. Which of the following BEST describes the role of the payment company?

1. A. Data controller
2. B. Data custodian
3. C. Data owners
4. D. Data processor

Correct Answer: D
A data processor is an organization that processes personal data on behalf of a data controller. In this scenario, the company that owns the e-commerce website is the data controller, as it determines the purposes and means of processing personal data (e.g. credit card information). The payment company is a data processor, as it processes personal data on behalf of the e-commerce company (i.e. it processes credit card transactions).
Reference: CompTIA Security+ Study Guide (SY0-601) 7th Edition by Emmett Dulaney, Chuck Easttom

- (Exam Topic 5)
A security researcher has alerted an organization that its sensitive user data was found for sale on a website. Which of the following should the organization use to inform the affected parties?

1. A. An incident response plan
2. B. A communications plan
3. C. A business continuity plan
4. D. A disaster recovery plan

Correct Answer: D

- (Exam Topic 4)
A security analyst is reviewing the following command-line output:

Which of the following Is the analyst observing?

1. A. IGMP spoofing
2. B. URL redirection
3. C. MAG address cloning
4. D. DNS poisoning

Correct Answer: C

- (Exam Topic 3)
A network administrator is setting up wireless access points in all the conference rooms and wants to authenticate device using PKI. Which of the following should the administrator configure?

1. A. A captive portal
2. B. PSK
3. C. 802.1X
4. D. WPS

Correct Answer: C

- (Exam Topic 5)
After a hardware incident, an unplanned emergency maintenance activity was conducted to rectify the issue. Multiple alerts were generated on the SIEM during this period of time. Which of the following BEST explains what happened?

1. A. The unexpected traffic correlated against multiple rules, generating multiple alerts.
2. B. Multiple alerts were generated due to an attack occurring at the same time.
3. C. An error in the correlation rules triggered multiple alerts.
4. D. The SIEM was unable to correlate the rules, triggering the alert

Correct Answer: A