SY0-601 — Most Debated Topics

Community-voted ranking of 103 topics, sorted by disagreement level. Higher dispute = more test-takers disagree on the answer.

#1
MFA and Patch Management Control Type and Category
S-Grade Dispute: 84% 17 comments
#2
Threat Hunting Data Sources for Exploitable Systems
S-Grade Dispute: 59% 16 comments
#3
Full Weekly and Differential Daily Backup Strategy
S-Grade Dispute: 54% 20 comments
#4
Access Auditing as the SaaS Vendor Risk to Focus On
S-Grade Dispute: 52% 21 comments
#5
Mobile Data Security After Device Theft
S-Grade Dispute: 52% 41 comments
#6
Remediating Excessive Domain Admin Rights With PAM and RBAC
S-Grade Dispute: 50% 19 comments
#7
Why Resetting Local Passwords Blocks Pass-the-Hash Attacks
S-Grade Dispute: 48% 14 comments
#8
Blocking Malware Command and Control With IP-Based Firewall Rules
S-Grade Dispute: 42% 25 comments
#9
PKI Flaw Remediation: Patching the CA
S-Grade Dispute: 40% 9 comments
#10
Hash Algorithm for Data Integrity Verification
S-Grade Dispute: 37% 23 comments
#11
MDM Features for Lost Mobile Device Security
S-Grade Dispute: 36% 23 comments
#12
Ransomware Backup Recovery Strategy
S-Grade Dispute: 34% 16 comments
#13
SIP Server Security Weaknesses and Unsolicited Calls
S-Grade Dispute: 33% 6 comments
#14
Tokenization Characteristics for Credit Card Protection
S-Grade Dispute: 30% 11 comments
#15
Identifying Remote Access Trojan Infection Vectors
S-Grade Dispute: 29% 18 comments
#16
Protecting Unsupported Application Servers
S-Grade Dispute: 28% 18 comments
#17
Enforcing a SaaS Usage Policy With a Cloud Access Security Broker
S-Grade Dispute: 25% 6 comments
#18
Identifying Sandbox Environments with Obfuscated Data
S-Grade Dispute: 25% 7 comments
#19
Switching From Tape to Cloud Backup for Disaster Availability
S-Grade Dispute: 24% 13 comments
#20
Compromising Credentials via Offline Brute-Force
S-Grade Dispute: 22% 7 comments
#21
Detecting Fraud via Job Rotation
S-Grade Dispute: 22% 20 comments
#22
IaaS vs PaaS When the Business Owns the Operating System
S-Grade Dispute: 20% 11 comments
#23
Device Identification and Policy Management
S-Grade Dispute: 19% 10 comments
#24
Mitigating MFP Document Confidentiality Risks
S-Grade Dispute: 19% 10 comments
#25
Why Are Only Internal Kiosk Credentials Compromised?
S-Grade Dispute: 18% 12 comments
#26
Penetration Test Types: Unknown vs Known Environment
S-Grade Dispute: 18% 13 comments
#27
Successful Privilege Escalation From a Local User to System
S-Grade Dispute: 17% 8 comments
#28
Determining Phishing Link Success via Log Sources
S-Grade Dispute: 14% 6 comments
#29
Troubleshooting Application Access to Internal Resources
S-Grade Dispute: 14% 7 comments
#30
Air Gap Isolation for Externally Exposed Network Segments
S-Grade Dispute: 13% 8 comments
#31
Cloud Service Models for Outsourced Patching
S-Grade Dispute: 13% 8 comments
#32
SOAR vs SIEM for Reducing SOC Manual Work
S-Grade Dispute: 13% 8 comments
#33
Social Engineering Authority Exploitation in SY0-601
S-Grade Dispute: 12% 5 comments
#34
Data Masking With Asterisks in a Banking Web Application
S-Grade Dispute: 11% 8 comments
#35
Staging Environment Purpose in System Upgrades
S-Grade Dispute: 11% 6 comments
#36
Guidelines for Information Security Risk Management
S-Grade Dispute: 11% 6 comments
#37
Identifying Rogue Access Points Bypassing Content Filters
S-Grade Dispute: 10% 5 comments
#38
Implementing Second Factor for Single Sign-On
A-Grade Dispute: 9% 4 comments
#39
Identifying Security Baseline Documentation for Device Hardening
S-Grade Dispute: 8% 6 comments
#40
Outsourcing Payment Processing Compliance Requirements
A-Grade Dispute: 0% 5 comments
#41
Identifying Invoice Scams in Accounting
A-Grade Dispute: 0% 6 comments
#42
Identifying Fileless Malware via PowerShell Execution
A-Grade Dispute: 0% 4 comments
#43
Smart Card MFA Additional Factor
A-Grade Dispute: 0% 7 comments
#44
Identifying ARP Poisoning from MAC and Traffic Clues
A-Grade Dispute: 0% 5 comments
#45
Forensic Checksums and Data Integrity
A-Grade Dispute: 0% 5 comments
#46
Identifying Dead Code in Software Development
A-Grade Dispute: 0% 3 comments
#47
Threat Actor Using Public Repository Commands
A-Grade Dispute: 0% 4 comments
#48
Mitigating Client-Side Bypass in Web Applications
A-Grade Dispute: 0% 5 comments
#49
Vulnerability Prioritization Tools
A-Grade Dispute: 0% 4 comments
#50
Preventing Burnout and Ensuring Continuity
A-Grade Dispute: 0% 5 comments
#51
Identifying Threat Actors Using Zero-Day Exploits
A-Grade Dispute: 0% 4 comments
#52
Implementing SAML for Cloud Vendor SSO
A-Grade Dispute: 0% 6 comments
#53
Tracking Changes Between Software Deployments
A-Grade Dispute: 0% 4 comments
#54
Identifying Operational Controls in Code Deployment
A-Grade Dispute: 0% 3 comments
#55
Identifying ARP Poisoning via Command Output
A-Grade Dispute: 0% 4 comments
#56
Categorizing and Sharing Threat Actor TTPs
A-Grade Dispute: 0% 4 comments
#57
Data Retention Policy for Compliance and Destruction
A-Grade Dispute: 0% 4 comments
#58
Video Camera Security Control Classification
A-Grade Dispute: 0% 5 comments
#59
Determining Vulnerability Severity with CVSS
A-Grade Dispute: 0% 5 comments
#60
Image Geolocation Coordinates as Metadata
A-Grade Dispute: 0% 5 comments
#61
Identifying USB Baiting Social Engineering Attacks
A-Grade Dispute: 0% 5 comments
#62
Password Security: Salting vs Hashing
A-Grade Dispute: 0% 7 comments
#63
What is adding a value to the end of a password called?
A-Grade Dispute: 0% 8 comments
#64
Protecting MFA from Carrier Social Engineering
A-Grade Dispute: 0% 5 comments
#65
Enforcing Role-Based Security Policies for SaaS Applications
A-Grade Dispute: 0% 5 comments
#66
Mitigating Risk for Unpatchable Legacy SCADA Controllers
A-Grade Dispute: 0% 7 comments
#67
Data Types Subject to Regulations and Laws
A-Grade Dispute: 0% 3 comments
#68
HVAC Impact on Hardware Availability
A-Grade Dispute: 0% 5 comments
#69
Legal Hold Definition in Forensics
A-Grade Dispute: 0% 6 comments
#70
Cloud Service Model with Maximum Control
A-Grade Dispute: 0% 4 comments
#71
Linux File Permission Remediation Command
A-Grade Dispute: 0% 5 comments
#72
Security Concerns with Legacy Systems in Production
A-Grade Dispute: 0% 4 comments
#73
Securing Finance Data with Offshore Teams via VDI
A-Grade Dispute: 0% 5 comments
#74
Password Spraying vs Brute-Force Attack Identification
A-Grade Dispute: 0% 11 comments
#75
DNS Logging Tool Control Type
A-Grade Dispute: 0% 4 comments
#76
Spoofed Identity Digital Certificate Key Type
A-Grade Dispute: 0% 4 comments
#77
Protecting Source Code from Reverse Engineering
A-Grade Dispute: 0% 5 comments
#78
Prioritizing Vulnerability Patching with CVSS
A-Grade Dispute: 0% 7 comments
#79
Protecting Sensitive Data with DLP and Classification
A-Grade Dispute: 0% 5 comments
#80
Identifying Decoy Systems for Reconnaissance Detection
A-Grade Dispute: 0% 3 comments
#81
What is the Final Step of the Incident Response Process?
A-Grade Dispute: 0% 5 comments
#82
Which Protocol Supports Certificate Authentication and Device Quarantine?
A-Grade Dispute: 0% 6 comments
#83
Duplicate MAC Addresses in Network Audits | SY0-601
A-Grade Dispute: 0% 7 comments
#84
Which Backup Type Recovers the Entire OS and System?
A-Grade Dispute: 0% 4 comments
#85
Which MFA Method Supports Seamless BYOD Integration?
A-Grade Dispute: 0% 7 comments
#86
Which WLAN Installation Step Resolves Frequency Interference?
A-Grade Dispute: 0% 7 comments
#87
How to Route Multiple Internal Web Servers Through One External IP?
A-Grade Dispute: 0% 9 comments
#88
First Step in Creating an Anomaly Detection Process?
A-Grade Dispute: 0% 5 comments
#89
Why is SMS OTP More Risky Than TOTP?
A-Grade Dispute: 0% 5 comments
#90
What Should Be Implemented First to Standardize OS Variations?
A-Grade Dispute: 0% 5 comments
#91
First Step Before Patching a High-Availability Production VM
A-Grade Dispute: 0% 5 comments
#92
Application Risk Assessment Questions
A-Grade Dispute: 0% 4 comments
#93
Identifying CSRF from Account Lockout and Password Change
A-Grade Dispute: 0% 3 comments
#94
Standardizing Security Programs During M&A
A-Grade Dispute: 0% 5 comments
#95
Protecting Remote Data Without VPN
A-Grade Dispute: 0% 4 comments
#96
Secure Command-Line File Transfer Protocols
A-Grade Dispute: 0% 3 comments
#97
SaaS Identity Integration for Separate Logins
A-Grade Dispute: 0% 6 comments
#98
CEO Invoice Email Attack Principle
A-Grade Dispute: 0% 4 comments
#99
Identifying Backdoors from External Network Traffic
A-Grade Dispute: 0% 4 comments
#100
SOC 2 Type II Audit Duration and Scope
A-Grade Dispute: 0% 5 comments
#101
Identifying Unknown Wi-Fi Signals as Rogue Access Points
A-Grade Dispute: 0% 4 comments
#102
Resolving TLS Errors Due to OCSP Blocking
A-Grade Dispute: 0% 4 comments
#103
Hiding Server Count and Addresses with Virtual IP
A-Grade Dispute: 0% 5 comments

← Back to SY0-601 CompTIA Security+ study guide