무료 온라인 액세스 CompTIA.SY0-601-KR.v2024-01-15.q241 모의 시험 (Page 37)

SY0-601-KR 문제 176

공격자가 회사를 목표로 삼고 있습니다. 공격자는 회사 직원이 특정 웹 사이트에 자주 액세스하는 것을 알아차립니다. 공격자는 웹 사이트를 맬웨어로 감염시키기로 결정하고 직원의 장치도 감염되기를 바랍니다. 다음 중 공격자가 사용하는 기술은 무엇입니까?

A. 워터링홀 공격

B. 프리텍스팅

C. 타이포스쿼팅

D. 사칭

SY0-601-KR 문제 177

하드웨어 및 소프트웨어 수준 모두에서 시스템의 구성 요소 실행을 평가하고 성능 특성을 측정하는 데 가장 많이 사용되는 환경은 다음 중 어느 것입니까?

A. 테스트

B. 스테이징

C. 개발

D. 생산

SY0-601-KR 문제 178

보안 분석가는 배포를 위해 새 장치를 강화할 때 서버 팀이 따라야 할 기준선을 만들고 있습니다. 다음 중 분석가가 생성하는 항목을 가장 잘 설명하는 것은 무엇입니까?

A. 변경 관리 절차

B. 정보 보안 정책

C. 사이버보안 프레임워크

D. 보안 구성 가이드

정답: D

Explanation
A secure configuration guide is a document that provides an overview of the security features and best practices for a specific product, system, or application. A secure configuration guide helps to reduce unnecessary cyber vulnerabilities and enhance overall security by applying consistent and standardized settings and policies. A security analyst can create baselines for the server team to follow when hardening new devices for deployment based on a secure configuration guide.
A). Change management procedure. This is not the correct answer, because a change management procedure is a document that describes the steps and processes for implementing, reviewing, and approving changes to an IT system or environment. A change management procedure helps to minimize the risks and impacts of changes on the system performance, availability, and security.
B). Information security policy. This is not the correct answer, because an information security policy is a document that defines the rules and principles for protecting the confidentiality, integrity, and availability of information assets within an organization. An information security policy helps to establish the roles and responsibilities of employees, managers, and stakeholders regarding information security.
C). Cybersecurity framework. This is not the correct answer, because a cybersecurity framework is a document that provides a set of standards, guidelines, and best practices for managing cybersecurity risks and improving resilience. A cybersecurity framework helps to align the business objectives and priorities with the security requirements and capabilities.
D). Secure configuration guide. This is the correct answer, because a secure configuration guide is a document that provides an overview of the security features and best practices for a specific product, system, or application. A secure configuration guide helps to reduce unnecessary cyber vulnerabilities and enhance overall security by applying consistent and standardized settings and policies.
Reference: Secure Configuration Guide, Security Technical Implementation Guide - Wikipedia.

SY0-601-KR 문제 179

네트워크 침투 테스터가 대상 시스템에 대한 액세스 권한을 성공적으로 얻었습니다. 다음 중 침투 테스터가 수행해야 하는 작업은 무엇입니까?

A. 모든 증거의 로그 파일 지우기

B. 옆으로 다른 기계로 이동합니다.

C. 향후 사용을 위해 지속성을 설정합니다.

D. 제로데이 취약점을 악용합니다.

SY0-601-KR 문제 180

한 회사는 최근 직원들이 모바일 애플리케이션을 통해 이메일 및 메시지 확인과 같은 작업을 위해 개인 소유 장치를 사용하도록 허용하기로 결정했습니다. 회사는 MDM을 사용하고 싶지만 직원들은 개인 데이터의 손실을 우려하고 있습니다. 다음 중 직원의 우려 사항을 해결하면서 회사 데이터 손실로부터 회사를 가장 잘 보호하기 위해 IT 부서가 구현해야 하는 것은 무엇입니까?

A. 전화를 도난당한 경우 MDM 소프트웨어에서 원격 삭제 옵션을 활성화합니다.

B. PIN을 사용하여 전화기에 액세스하도록 MDM 소프트웨어를 구성합니다.

C. 잠금 화면을 활성화하지 않고 FDE용 MDM을 구성합니다.

D. 회사의 애플리케이션을 설치하기 전에 전화기에서 공장초기화를 수행합니다.

정답: C

Explanation
MDM software is a type of remote asset-management software that runs from a central server. It is used by businesses to optimize the functionality and security of their mobile devices, including smartphones and tablets. It can monitor and regulate both corporate-owned and personally owned devices to the organization's policies.
FDE stands for full disk encryption, which is a method of encrypting all data on a device's storage. FDE can protect data from unauthorized access in case the device is lost or stolen.
If a company decides to allow its employees to use their personally owned devices for work tasks, it should configure MDM software to enforce FDE on those devices. This way, the company can protect its data from being exposed if the device falls into the wrong hands.
However, employees may be concerned about the loss of personal data if the company also enables the remote-wiping option in the MDM software. Remote wiping is a feature that allows the company to erase all data on a device remotely in case of theft or loss. Remote wiping can also affect personal data on the device, which may not be acceptable to employees.
Therefore, a possible compromise is to configure MDM for FDE without enabling the lock screen. This means that the device will be encrypted, but it will not require a password or PIN to unlock it. This way, employees can access their personal data easily, while the company can still protect its data with encryption.
The other options are not correct because:
A: Enable the remote-wiping option in the MDM software in case the phone is stolen. This option may address the company's concern about data loss, but it may not address the employees' concern about personal data loss. Remote wiping can erase both work and personal data on the device, which may not be desirable for employees.
B: Configure the MDM software to enforce the use of PINs to access the phone. This option may enhance the security of the device, but it may not address the company's concern about data loss. PINs can be guessed or bypassed by attackers, and they do not protect data if the device is physically accessed.
D: Perform a factory reset on the phone before installing the company's applications. This option may address the company's concern about data loss, but it may not address the employees' concern about personal data loss. A factory reset will erase all data on the device, including personal data, which may not be acceptable to employees.
According to CompTIA Security+ SY0-601 Exam Objectives 2.4 Given a scenario, implement secure systems design:
"MDM software is a type of remote asset-management software that runs from a central server1. It is used by businesses to optimize the functionality and security of their mobile devices, including smartphones and tablets2."
"FDE stands for full disk encryption, which is a method of encrypting all data on a device's storage3." References: https://www.comptia.org/certifications/security#examdetails
https://www.comptia.org/content/guides/comptia-security-sy0-601-exam-objectives
https://www.makeuseof.com/what-is-mobile-device-management-mdm-software/

프리미엄 번들

DumpTop 에서 공유하는 최신 SY0-601-KR 시험 덤프는 SY0-601-KR 시험패스를 도와드릴수 있습니다! DumpTop 은 최근 업데이트된 SY0-601-KR 시험자료를 제공해드립니다. DumpTop SY0-601-KR 덤프도 시험문제 변경에 따라 업데이트되었으며 오답도 수정되었습니다. DumpTop SY0-601-KR 덤프 최신버전을 공유받아보세요.

SY0-601-KR 덤프 프리미엄 버전 액세스

(1061 Q&As 덤프, 30%OFF할인코드: KrDump)

다른 버전: 1000CompTIA.SY0-601-KR.v2024-01-29.q264; 775CompTIA.SY0-601-KR.v2023-12-29.q220; 903CompTIA.SY0-601-KR.v2023-12-25.q204; 1006CompTIA.SY0-601-KR.v2023-12-21.q243; 2460CompTIA.SY0-601-KR.v2023-12-12.q249; 2737CompTIA.SY0-601-KR.v2023-12-09.q253; 944CompTIA.SY0-601-KR.v2023-12-06.q269; 2577CompTIA.SY0-601-KR.v2023-12-02.q246; 1744CompTIA.SY0-601-KR.v2023-10-30.q392; 2151CompTIA.SY0-601-KR.v2023-10-18.q429; 2147CompTIA.SY0-601-KR.v2023-10-17.q419; 4237CompTIA.SY0-601-KR.v2023-09-22.q355; 2218CompTIA.SY0-601-KR.v2023-09-04.q452; 5492CompTIA.SY0-601-KR.v2023-08-19.q378; 1099CompTIA.SY0-601-KR.v2023-08-12.q164; 1911CompTIA.SY0-601-KR.v2023-07-05.q444; 2112CompTIA.SY0-601-KR.v2023-06-13.q136

최근 업로드: 108Microsoft.AZ-500-KR.v2026-06-04.q213; 111Microsoft.DP-600-KR.v2026-06-04.q98; 105Microsoft.AZ-204-KR.v2026-06-04.q237; 136Microsoft.PL-600-KR.v2026-06-04.q112; 193Microsoft.SC-300-KR.v2026-06-03.q151; 154Microsoft.DP-600-KR.v2026-06-03.q70; 871PMI.PMP-KR.v2026-06-01.q1069; 233Microsoft.MS-102-KR.v2026-06-01.q252; 212Amazon.DOP-C02-KR.v2026-06-01.q207; 159Microsoft.AZ-104-KR.v2026-06-01.q197