SY0-601 practice questions 141–150

1. Question 141 · 856 in bank

   A user reports constant lag and performance issues with the wireless network when working at a local coffee shop. A security analyst walks the user through an installation of Wireshark and gets a five-minute pcap to analyze. The analyst observes the following output:

   

   Which of the following attacks does the analyst MOST likely see in this packet capture?

   • ASession replay
   • BEvil twin
   • CBluejacking
   • DARP poisoning

   Show answer

   Answer: B

   Explanation

   coffee shop = public wifi, a deauthentication attack to the target client, disconnecting it from its current network, thus allowing the client to automatically connect to the evil twin access point.

   Source: Adapted from community discussion — [Removed]

   Next question

2. Question 142 · 856 in bank

   A security analyst is reviewing the following output from a system:

   

   Which of the following is MOST likely being observed?

   • AARP poisoning
   • BMan in the middle
   • CDenial of service
   • DDNS poisoning

   Show answer

   Answer: C

   Explanation

   A SYN flood attack, is a type of Denial-of-Service (DoS) attack that exploits the TCP (Transmission Control Protocol) handshake process to overwhelm and exhaust the resources of a target server or network. In a typical TCP handshake, when a client initiates a connection with a server, it sends a SYN (synchronize) packet to the server. The server responds with a SYN-ACK (synchronize-acknowledge) packet, and the client completes the connection establishment by sending an ACK (acknowledge) packet back to the server. Once the handshake is complete, data can be exchanged between the client and server. In a SYN flood attack, the attacker sends a large number of SYN packets to the target server but does not respond to the SYN-ACK packets sent by the server. As a result, the target server keeps waiting for the final ACK packet to complete the connection, and these half-open connections consume server resources such as memory and processing power.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

3. Question 143 · 856 in bank

   Which of the following concepts BEST describes tracking and documenting changes to software and managing access to files and systems?

   • AVersion control
   • BContinuous monitoring
   • CStored procedures
   • DAutomation

   Show answer

   Answer: A

   Explanation

   Version control is the concept that best describes tracking and documenting changes to software and managing access to files and systems. It is a system that helps developers and teams manage changes to source code, documents, and other files. Version control allows multiple users to collaborate on a project, keep track of changes, and maintain a history of all modifications made to the files. In version control, each change made to a file is recorded as a new version, and developers can access and revert to previous versions if needed. This enables better collaboration, reduces conflicts, and provides an audit trail of changes made to files over time.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

4. Question 144 · 856 in bank

   Select 2

   Which of the following are common VoIP-associated vulnerabilities? (Choose two.)

   • ASPIM
   • BVishing
   • CHopping
   • DPhishing
   • ECredential harvesting
   • FTailgating

   Show answer

   Answer: BE

   Explanation

   after heavy consideration and reading through multiple sec+ books, i m kinda going with B & D. vishing and credential harvesting as being the most common attacks, as hopping doesnt ever seem to come up in the material. https://fitsmallbusiness.com/voip-security-threats/

   Source: Adapted from community discussion — k9_462

   Next question

5. Question 145 · 856 in bank

   A penetration tester is brought on site to conduct a full attack simulation at a hospital. The penetration tester notices a WAP that is hanging from the drop ceiling by its cabling and is reachable. Which of the following recommendations would the penetration tester MOST likely make given this observation?

   • AEmploy a general contractor to replace the drop-ceiling tiles.
   • BPlace the network cabling inside a secure conduit.
   • CSecure the access point and cabling inside the drop ceiling.
   • DUtilize only access points that have internal antennas

   Show answer

   Answer: C

   Explanation

   The penetration tester would likely recommend securing the access point and cabling inside the drop ceiling to prevent unauthorized access or tampering. Hanging the WAP from the drop ceiling by its cabling makes it easily reachable and susceptible to physical attacks or unauthorized alterations. By securing the access point and cabling, the organization can reduce the risk of potential security breaches or disruptions caused by unauthorized individuals gaining access to the WAP. This can be achieved by using appropriate mounting brackets, enclosures, or other physical security measures to prevent easy access to the WAP and its cabling.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

6. Question 146 · 856 in bank

   Which of the following techniques eliminates the use of rainbow tables for password cracking?

   • AHashing
   • BTokenization
   • CAsymmetric encryption
   • DSalting

   Show answer

   Answer: D

   Explanation

   Salting is a technique used to eliminate the use of precomputed tables like rainbow tables for password cracking. When passwords are stored in a database, a unique random value known as a salt is generated and appended to each password before hashing. This salt value makes each hashed password unique, even if two users have the same password. As a result, rainbow tables, which are precomputed tables of hash values for commonly used passwords, become ineffective because the same password will have different hash values due to the presence of different salts. By using salting, even if an attacker gains access to the hashed passwords, they cannot easily reverse-engineer the original passwords using precomputed tables, significantly improving the security of stored passwords.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

7. Question 147 · 856 in bank

   During a security assessment, a security analyst finds a file with overly permissive permissions. Which of the following tools will allow the analyst to reduce the permissions for the existing users and groups and remove the set-user-ID bit from the file?

   • Als
   • Bchflags
   • Cchmod
   • Dlsof
   • Esetuid

   Show answer

   Answer: C

   Explanation

   Chmod removes the setuido permission, that is, it removes the S bit. Setuido is the specific permission, but it is removed with Chmod. https://www.cbtnuggets.com/blog/technology/system-admin/linux-file-permissions-understanding-setuid-setgid-and-the-sticky-bit

   Source: Adapted from community discussion — passmemo

   Next question

8. Question 148 · 856 in bank

   A network administrator is concerned about users being exposed to malicious content when accessing company cloud applications. The administrator wants to be able to block access to sites based on the AUP. The users must also be protected because many of them work from home or at remote locations, providing on-site customer support. Which of the following should the administrator employ to meet these criteria?

   • AImplement NAC.
   • BImplement an SWG.
   • CImplement a URL filter.
   • DImplement an MDM.

   Show answer

   Answer: B

   Explanation

   "A secure web gateway (SWG) protects users from web-based threats in addition to applying and enforcing corporate acceptable use policies."

   Source: Adapted from community discussion — Kashim

   Next question

9. Question 149 · 856 in bank

   A website developer is working on a new e-commerce website and has asked an information security expert for the most appropriate way to store credit card numbers to create an easy reordering process. Which of the following methods would BEST accomplish this goal?

   • ASalting the magnetic strip information
   • BEncrypting the credit card information in transit
   • CHashing the credit card numbers upon entry
   • DTokenizing the credit cards in the database

   Show answer

   Answer: D

   Explanation

   Tokenization is the best approach for storing credit card information securely in a database while allowing for an easy reordering process. Tokenization is a process in which sensitive data, such as credit card numbers, is replaced with a randomly generated token. The actual credit card information is securely stored in a separate, isolated system, often managed by a third-party payment processor. Here's why tokenization is the best choice: Security: Tokenization removes the need to store actual credit card numbers in the website's database, reducing the risk of a data breach or unauthorized access to sensitive information. Easy Reordering: When a customer reorders using a saved credit card, the website can use the token to reference the actual credit card information securely stored with the payment processor, making the reordering process seamless for the user.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

10. Question 150 · 856 in bank

    Which of the following supplies non-repudiation during a forensics investigation?

    • ADumping volatile memory contents first
    • BDuplicating a drive with dd
    • CUsing a SHA-2 signature of a drive image
    • DLogging everyone in contact with evidence
    • EEncrypting sensitive data

    Show answer

    Answer: C

    Explanation

    Yeah, it’s C. Nonrepudiation is specifically talking about the proof that someone has done something on the system. Taking a hash of the original disk is proof that it represents the state of the data when the investigation began. It’s not a signature in the sense of an encryption cert or something like that, but it is definitely a method of ensuring that the data on the drive represents the user’s changes, vice those of the investigator or someone else after the fact. Chain of custody doesn’t apply because nonrepudiation is talking about the data itself.

    Source: Adapted from community discussion — atrax

    References

    • Microsoft Learn
    • nist.gov documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 141. 856 questions available.