SY0-601 practice questions 91–100

1. Question 91 · 856 in bank

   Which of the following is a known security risk associated with data archives that contain financial information?

   • AData can become a liability if archived longer than required by regulatory guidance.
   • BData must be archived off-site to avoid breaches and meet business requirements.
   • CCompanies are prohibited from providing archived data to e-discovery requests.
   • DUnencrypted archives should be preserved as long as possible and encrypted.

   Show answer

   Answer: A

   Explanation

   Archiving financial information for longer than required by regulatory guidelines can pose a security risk. The longer data is retained, the more exposure it has to potential breaches or unauthorized access, increasing the risk of sensitive financial information being compromised. Additionally, unnecessary retention of financial data can result in legal and compliance issues if the data is accessed or disclosed improperly. Proper data retention policies should be in place to ensure that financial data is retained for the required period and then securely disposed of when no longer needed.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

2. Question 92 · 856 in bank

   Which of the following BEST describes the process of documenting who has access to evidence?

   • AOrder of volatility
   • BChain of custody
   • CNon-repudiation
   • DAdmissibility

   Show answer

   Answer: B

   Explanation

   Answer: Chain of custody A chain of custody is a chronological paper trail documenting when, how, and by whom individual items of physical or electronic evidence—such as cell phone logs—were collected, handled, analyzed, or otherwise controlled during an investigation. ======================== Helpful info Order of Volatility -the sequence or order in which the digital evidence is collected. The order is maintained from highly volatile to less volatile data. Highly volatile data resides in the memory, cache, or CPU registers, and it will be lost as soon as the power to the computer is turned off. Non-repudiation - the assurance that the sender of information is provided with proof of delivery and the recipient is provided with proof of the sender's identity, so neither can later deny having processed the information. Admissibility - the quality of being acceptable or valid, especially as evidence in a court of law.

   Source: Adapted from community discussion — rodwave

   Next question

3. Question 93 · 856 in bank

   Select 2

   A systems engineer wants to leverage a cloud-based architecture with low latency between network-connected devices that also reduces the bandwidth that is required by performing analytics directly on the endpoints. Which of the following would BEST meet the requirements? (Choose two.)

   • APrivate cloud
   • BSaaS
   • CHybrid cloud
   • DIaaS
   • EDRaaS
   • FFog computing

   Show answer

   Answer: CF

   Explanation

   CF - I had to look it up, so for those that didn't know; "Many people use the terms fog computing and edge computing interchangeably because both involve bringing intelligence and processing closer to where the data is created" - https://www.techtarget.com/iotagenda/definition/fog-computing-fogging

   Source: Adapted from community discussion — ScottT

   References

   • azure.microsoft.com documentation
   • azure.microsoft.com documentation

   Next question

4. Question 94 · 856 in bank

   Which of the following is a policy that provides a greater depth and breadth of knowledge across an organization?

   • AAsset management policy
   • BSeparation of duties policy
   • CAcceptable use policy
   • DJob rotation policy

   Show answer

   Answer: D

   Explanation

   the question was talking about gaining knowledge across the organization "gaining knowledge in every department" the only way that can be done is through job rotation

   Source: Adapted from community discussion — gen2dee

   Next question

5. Question 95 · 856 in bank

   A company is moving its retail website to a public cloud provider. The company wants to tokenize credit card data but not allow the cloud provider to see the stored credit card information. Which of the following would BEST meet these objectives?

   • AWAF
   • BCASB
   • CVPN
   • DTLS

   Show answer

   Answer: B

   Explanation

   A CASB is a security solution that sits between an organization's on-premises infrastructure and the cloud provider's infrastructure. It acts as a gatekeeper, providing security and visibility into cloud-based applications and services. CASBs can enforce security policies, monitor cloud usage, and provide data protection capabilities. The specific capability that would meet the objective of tokenizing credit card data while keeping it secure from the cloud provider is called "Tokenization." Tokenization is a data security technique where sensitive data, such as credit card numbers, is replaced with randomly generated tokens. These tokens have no meaningful value and are useless to anyone who does not have access to the tokenization system's mapping table. The tokenization process occurs before the data is sent to the cloud provider, ensuring that the provider only deals with meaningless tokens and not the actual credit card data.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

6. Question 96 · 856 in bank

   A security analyst is tasked with defining the "something you are" factor of the company's MFA settings. Which of the following is BEST to use to complete the configuration?

   • AGait analysis
   • BVein
   • CSoft token
   • DHMAC-based, one-time password

   Show answer

   Answer: B

   Explanation

   Gait and vein are both 'something you are' factor. But gait is also considered 'something you do' Im going with vein here

   Source: Adapted from community discussion — stoneface

   Next question

7. Question 97 · 856 in bank

   Which of the following processes will eliminate data using a method that will allow the storage device to be reused after the process is complete?

   • APulverizing
   • BOverwriting
   • CShredding
   • DDegaussing

   Show answer

   Answer: B

   Explanation

   you cannot reuse a hard drive once it has been degaussed. This is because the degaussing process not only removes all the data, but it also removes the start up files. As such, a degaussed hard drive will not boot up.

   Source: Adapted from community discussion — asum

   Next question

8. Question 98 · 856 in bank

   A user's account is constantly being locked out. Upon further review, a security analyst found the following in the SIEM:

   

   Which of the following describes what is occurring?

   • AAn attacker is utilizing a password-spraying attack against the account.
   • BAn attacker is utilizing a dictionary attack against the account.
   • CAn attacker is utilizing a brute-force attack against the account.
   • DAn attacker is utilizing a rainbow table attack against the account.

   Show answer

   Answer: C

   Explanation

   Dictionary attack -> known and common words being used Spraying password -> will try top 3/5 passwords on multiple user accounts Brute Force -> will try any password combination, resulting with a lock out most of the time

   Source: Adapted from community discussion — db97

   Next question

9. Question 99 · 856 in bank

   Which of the following is a reason to publish files' hashes?

   • ATo validate the integrity of the files
   • BTo verify if the software was digitally signed
   • CTo use the hash as a software activation key
   • DTo use the hash as a decryption passphrase

   Show answer

   Answer: A

   Explanation

   Publishing files' hashes is a common practice used to validate the integrity of files and ensure that they have not been tampered with or corrupted. A hash value is a unique fixed-size string of characters generated from the contents of a file using a cryptographic hashing algorithm. Even a minor change in the file's content will result in a completely different hash value. When files are distributed, users can independently calculate the hash value of the received file and compare it to the published hash value. If the calculated hash matches the published hash, it means that the file has not been altered during transit, ensuring its integrity. If the hash values do not match, it indicates that the file may have been tampered with, corrupted, or modified, and users should exercise caution before using the file.

   Source: Adapted from community discussion — Protract8593

   Next question

10. Question 100 · 856 in bank

    A web server has been compromised due to a ransomware attack. Further investigation reveals the ransomware has been in the server for the past 72 hours. The systems administrator needs to get the services back up as soon as possible. Which of the following should the administrator use to restore services to a secure state?

    • AThe last incremental backup that was conducted 72 hours ago
    • BThe last known-good configuration
    • CThe last full backup that was conducted seven days ago
    • DThe baseline OS configuration

    Show answer

    Answer: C

    Explanation

    I would go with C here. Reason - 7 days ago is more than 72 hours ago and possibly the last good backup taken. Just my thoughts. Open for discussion...

    Source: Adapted from community discussion — comeragh

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 91. 856 questions available.