SY0-601 Implementation 3

Question 1

An organization is implementing endpoint protection and wants behavioral-based detection rather than relying on signature databases. Which technology should they deploy?

Accepted Answer

Host-based Intrusion Detection System (HIDS) with anomaly detection

Answer

A HIDS with anomaly/behavioral detection monitors activity patterns and flags deviations from baseline without requiring known malware signatures.

Question 2

Which secure coding practice directly mitigates SQL injection vulnerabilities by separating SQL code from user-supplied data?

Accepted Answer

Parameterized queries (prepared statements)

Answer

Parameterized queries treat user input strictly as data parameters, preventing it from being interpreted as SQL commands.

Question 3

A company's mobile device policy requires that corporate data be wiped from a device without affecting personal data when an employee leaves. Which MDM capability achieves this?

Accepted Answer

Containerization with selective wipe

Answer

Containerization separates corporate and personal data into distinct containers, allowing selective wipe of only the corporate container.

Question 4

Which firewall type can inspect the full HTTP request and response content, including payload, to block application-layer attacks like XSS and SQL injection?

Accepted Answer

Web Application Firewall (WAF)

Answer

A WAF operates at Layer 7 and inspects HTTP/HTTPS content to detect and block application-layer attacks targeting web applications.

Question 5

An admin needs to securely manage network devices from a remote location. Which protocol should replace Telnet to ensure encrypted management sessions?

Accepted Answer

SSH

Answer

SSH (Secure Shell) encrypts the entire management session including credentials, replacing the plaintext Telnet protocol.

(SY0-601) CompTIA Security+ IT Certification Practice Test

(SY0-601) CompTIA Security+ IT Certification Practice Test

SY0-601 Implementation 3