SY0-601 Implementation 4

Question 1

A sysadmin is hardening a Linux server and wants to ensure that only explicitly authorized applications can execute. Which OS security feature enforces this?

Accepted Answer

AppArmor or SELinux application whitelisting

Answer

AppArmor and SELinux can enforce mandatory access control policies that restrict which applications can run and what resources they can access.

Question 2

Which DNS security extension prevents DNS cache poisoning by digitally signing DNS records to ensure authenticity and integrity?

Accepted Answer

DNSSEC

Answer

DNSSEC adds cryptographic signatures to DNS records, allowing resolvers to verify that responses are authentic and unaltered.

Question 3

A company is deploying a cloud workload and wants to ensure network microsegmentation between individual virtual machines. Which technology enables this?

Accepted Answer

Software-Defined Networking (SDN) with security groups

Answer

SDN security groups apply policy-based rules at the virtual network interface level, enabling microsegmentation between individual cloud workloads.

Question 4

Which authentication protocol sends credentials in plaintext and should be replaced in favor of more secure alternatives in enterprise environments?

Accepted Answer

PAP

Answer

PAP (Password Authentication Protocol) transmits credentials in cleartext and is considered insecure for modern enterprise authentication.

Question 5

An organization wants to implement data loss prevention (DLP) that scans files leaving the network via email. At which layer of security controls does this primarily operate?

Accepted Answer

Network-based DLP at the email gateway

Answer

Network-based DLP solutions inspect data in transit at the email gateway to detect and block unauthorized transmission of sensitive information.

(SY0-601) CompTIA Security+ IT Certification Practice Test

(SY0-601) CompTIA Security+ IT Certification Practice Test

SY0-601 Implementation 4