SY0-601 Implementation 5

Question 1

A company requires that all employees use hardware tokens in addition to passwords when accessing the VPN. Which authentication factor do hardware tokens represent?

Accepted Answer

Something you have

Answer

Hardware tokens are physical devices representing the 'something you have' authentication factor in multi-factor authentication.

Question 2

Which implementation approach ensures that a user's browser only connects to a site using a specific certificate or public key, preventing impersonation even with a valid CA-issued cert?

Accepted Answer

Certificate pinning

Answer

Certificate pinning hardcodes the expected certificate or public key in the application, rejecting connections even with legitimately CA-signed alternative certificates.

Question 3

A network team is designing a DMZ. Which architecture correctly places web servers accessible to the Internet while protecting the internal network?

Accepted Answer

Web servers in a DMZ between two firewalls separating Internet and internal network

Answer

A DMZ places publicly accessible servers between an external firewall (facing Internet) and an internal firewall (protecting internal systems).

Question 4

Which load balancer persistence method ensures a user's session always routes to the same backend server by tracking a session cookie?

Accepted Answer

Sticky sessions (cookie-based persistence)

Answer

Sticky sessions use a session cookie to route all requests from a specific user to the same backend server throughout their session.

Question 5

When hardening a new server, a technician should disable unnecessary services. Which principle does this practice reflect?

Accepted Answer

Reducing attack surface

Answer

Disabling unneeded services reduces the attack surface by eliminating potential entry points that attackers could exploit.

(SY0-601) CompTIA Security+ IT Certification Practice Test

(SY0-601) CompTIA Security+ IT Certification Practice Test

SY0-601 Implementation 5