SY0-601 practice questions 151–160

1. Question 151 · 856 in bank

   A security analyst is tasked with classifying data to be stored on company servers. Which of the following should be classified as proprietary?

   • ACustomers’ dates of birth
   • BCustomers’ email addresses
   • CMarketing strategies
   • DEmployee salaries

   Show answer

   Answer: C

   Explanation

   Proprietary Information” shall mean information (whether now existing or hereafter created or acquired) developed, created, or discovered by the Company, or which became known by, or was conveyed to the Company, which has commercial value in the Company's business.

   Source: Adapted from community discussion — passmemo

   Next question

2. Question 152 · 856 in bank

   Which of the following holds staff accountable while escorting unauthorized personnel?

   • ALocks
   • BBadges
   • CCameras
   • DVisitor logs

   Show answer

   Answer: D

   Explanation

   Be careful with this one! Visitor logs hold staff accountable while escorting unauthorized personnel. A visitor log is a record of individuals who enter a facility, and it typically includes details such as the date and time of the visit, the name of the visitor, and the name of the staff member who escorted them. By maintaining a visitor log, it is possible to track who has entered the facility and who was responsible for escorting them. This can help to hold staff accountable for escorting unauthorized personnel and ensure that they are following security protocols and procedures. Locks, badges, and cameras are all important security measures, but they are not directly related to holding staff accountable for escorting unauthorized personnel.

   Source: Adapted from community discussion — FMMIR

   Next question

3. Question 153 · 856 in bank

   An organization’s Chief Security Officer (CSO) wants to validate the business’s involvement in the incident response plan to ensure its validity and thoroughness. Which of the following will the CSO MOST likely use?

   • AAn external security assessment
   • BA bug bounty program
   • CA tabletop exercise
   • DA red-team engagement

   Show answer

   Answer: C

   Explanation

   The reason why option A (an external security assessment) is not the most likely choice for the CSO to validate the business's involvement in the incident response plan is because an external security assessment focuses on evaluating the overall security posture of an organization, rather than specifically validating the incident response plan tabletop exercise (C) is specifically designed to test and validate the incident response plan. It allows participants to simulate and discuss their responses to various emergency scenarios, ensuring that the plan is comprehensive and that all stakeholders understand their roles and responsibilities It's important to note that while an external security assessment can provide valuable insights into an organization's security posture, it may not be the most suitable method for validating the incident response plan in this specific scenario.

   Source: Adapted from community discussion — sujon_london

   Next question

4. Question 154 · 856 in bank

   Which of the following documents provides guidance regarding the recommended deployment of network security systems from the manufacturer?

   • ACloud control matrix
   • BReference architecture
   • CNIST RMF
   • DCIS Top 20

   Show answer

   Answer: B

   Explanation

   Correct answer is B, becouse the vendorrs are responsble for their products and solutions and they are providing reference arhitectures. CIS Top 20 - is a security controls framework..

   Source: Adapted from community discussion — dansecu

   References

   • AWS documentation

   Next question

5. Question 155 · 856 in bank

   Which of the following describes the exploitation of an interactive process to gain access to restricted areas?

   • APersistence
   • BBuffer overflow
   • CPrivilege escalation
   • DPharming

   Show answer

   Answer: C

   Explanation

   exploitation of interactive process is the commandline from where exploits can be run to gain root permissions in a system

   Source: Adapted from community discussion — varun0

   Next question

6. Question 156 · 856 in bank

   During a recent security assessment, a vulnerability was found in a common OS. The OS vendor was unaware of the issue and promised to release a patch within the next quarter. Which of the following BEST describes this type of vulnerability?

   • ALegacy operating system
   • BWeak configuration
   • CZero day
   • DSupply chain

   Show answer

   Answer: C

   Explanation

   A "zero-day" vulnerability refers to a security flaw or weakness in software or an operating system that is unknown to the vendor or developers of that software. It is called "zero-day" because there are zero days between the time the vulnerability is discovered by attackers and the time the vendor becomes aware of it and can develop a patch to fix it. In this scenario, the vulnerability was found during a security assessment, and the vendor is unaware of it and has not yet released a patch, making it a zero-day vulnerability.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

7. Question 157 · 856 in bank

   Which of the following is a targeted attack aimed at compromising users within a specific industry or group?

   • AWatering hole
   • BTyposquatting
   • CHoax
   • DImpersonation

   Show answer

   Answer: A

   Explanation

   Through process of elimination alone it's A. If you end up getting stuck on a CompTIA test remember this: - A completely wrong answer - A correct answer - A CompTIA correct answer (the one you want) - An answer that sounds good because you didn't study

   Source: Adapted from community discussion — Gino_Slim

   Next question

8. Question 158 · 856 in bank

   To reduce and limit software and infrastructure costs, the Chief Information Officer has requested to move email services to the cloud. The cloud provider and the organization must have security controls to protect sensitive data. Which of the following cloud services would BEST accommodate the request?

   • AIaaS
   • BPaaS
   • CDaaS
   • DSaaS

   Show answer

   Answer: D

   Explanation

   "SaaS allows people to use cloud-based web applications. In fact, email services such as Gmail and Hotmail are examples of cloud-based SaaS services."

   Source: Adapted from community discussion — Dachosenone

   Next question

9. Question 159 · 856 in bank

   A security engineer is concerned that the strategy for detection on endpoints is too heavily dependent on previously defined attacks. The engineer would like a tool to monitor for changes to key files and network traffic on the device. Which of the following tools BEST addresses both detection and prevention?

   • ANIDS
   • BHIPS
   • CAV
   • DNGFW

   Show answer

   Answer: B

   Explanation

   A host-based intrusion detection and prevention system (HIPS) is a tool that monitors for changes to key files and network traffic on a device

   Source: Adapted from community discussion — passmemo

   Next question

10. Question 160 · 856 in bank

    During a recent incident, an external attacker was able to exploit an SMB vulnerability over the internet. Which of the following action items should a security analyst perform FIRST to prevent this from occurring again?

    • ACheck for any recent SMB CVEs.
    • BInstall AV on the affected server.
    • CBlock unneeded TCP 445 connections.
    • DDeploy a NIDS in the affected subnet.

    Show answer

    Answer: C

    Explanation

    Blocking unneeded TCP 445 connections would be the first step to prevent a similar SMB vulnerability exploitation from occurring again. TCP port 445 is commonly used by the Server Message Block (SMB) protocol, and leaving it open to the internet can expose the system to potential attacks. By blocking unneeded TCP 445 connections, the security analyst can limit the exposure of SMB services to the internet, reducing the attack surface and mitigating the risk of further exploitation through SMB vulnerabilities.

    Source: Adapted from community discussion — ApplebeesWaiter1122

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 151. 856 questions available.