SY0-601 practice questions 181–190

1. Question 181 · 856 in bank

   A security analyst has been tasked with creating a new WiFi network for the company. The requirements received by the analyst are as follows: * Must be able to differentiate between users connected to WiFi * The encryption keys need to change routinely without interrupting the users or forcing reauthentication * Must be able to integrate with RADIUS * Must not have any open SSIDs Which of the following options BEST accommodates these requirements?

   • AWPA2-Enterprise
   • BWPA3-PSK
   • C802.11n
   • DWPS

   Show answer

   Answer: A

   Explanation

   WPA2-Enterprise Deploying WPA2-Enterprise requires a RADIUS server, which handles the task of authenticating network users access. The actual authentication process is based on the 802.1x policy and comes in several different systems labelled EAP. Because each device is authenticated before it connects, a personal, encrypted tunnel is effectively created between the device and the network. https://www.securew2.com/solutions/wpa2-enterprise-and-802-1x-simplified

   Source: Adapted from community discussion — Granddude

   Next question

2. Question 182 · 856 in bank

   A security administrator is trying to determine whether a server is vulnerable to a range of attacks. After using a tool, the administrator obtains the following output:

   

   Which of the following attacks was successfully implemented based on the output?

   • AMemory leak
   • BRace conditions
   • CSQL injection
   • DDirectory traversal

   Show answer

   Answer: D

   Explanation

   Directory traversal is a type of HTTP exploit that is used by attackers to gain unauthorized access to restricted directories and files

   Source: Adapted from community discussion — Thapas

   Next question

3. Question 183 · 856 in bank

   A Chief Security Officer is looking for a solution that can reduce the occurrence of customers receiving errors from back-end infrastructure when systems go offline unexpectedly. The security architect would like the solution to help maintain session persistence. Which of the following would BEST meet the requirements?

   • AReverse proxy
   • BNIC teaming
   • CLoad balancer
   • DForward proxy

   Show answer

   Answer: C

   Explanation

   A load balancer can monitor the backend servers and direct traffic to working servers when other servers go offline. It can also maintain session persistence, where a reverse proxy does not care about session persistence.

   Source: Adapted from community discussion — jspecht

   Next question

4. Question 184 · 856 in bank

   Which of the following should an organization consider implementing in the event executives need to speak to the media after a publicized data breach?

   • AIncident response plan
   • BBusiness continuity plan
   • CCommunication plan
   • DDisaster recovery plan

   Show answer

   Answer: C

   Explanation

   Answer is C. A communication plan is a policy-driven approach to providing company stakeholders with certain information I got this through process of elimination. I take my test this Saturday 10/29/22. This is the last question in review for me. See yall on the other side.

   Source: Adapted from community discussion — Gino_Slim

   Next question

5. Question 185 · 856 in bank

   A well-known organization has been experiencing attacks from APTs. The organization is concerned that custom malware is being created and emailed into the company or installed on USB sticks that are dropped in parking lots. Which of the following is the BEST defense against this scenario?

   • AConfiguring signature-based antivirus to update every 30 minutes
   • BEnforcing S/MIME for email and automatically encrypting USB drives upon insertion
   • CImplementing application execution in a sandbox for unknown software
   • DFuzzing new files for vulnerabilities if they are not digitally signed

   Show answer

   Answer: C

   Explanation

   Encryption is the method by which information is converted into secret code that hides the information's true meaning. This does nothing for protecting a system. Encrypting bad code will just look different and mess up your system anyway.

   Source: Adapted from community discussion — [Removed]

   Next question

6. Question 186 · 856 in bank

   A company is implementing BYOD and wants to ensure all users have access to the same cloud-based services. Which of the following would BEST allow the company to meet this requirement?

   • AIaaS
   • BPaaS
   • CMaaS
   • DSaaS

   Show answer

   Answer: D

   Explanation

   Software as a Service (SaaS) would be the best option to ensure all users have access to the same cloud-based services in a BYOD (Bring Your Own Device) environment. SaaS provides access to software applications hosted on the cloud that can be accessed over the internet. It allows users to access the same applications and services regardless of the device they are using, making it suitable for a diverse range of devices in a BYOD setup.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

7. Question 187 · 856 in bank

   During a recent security incident at a multinational corporation a security analyst found the following logs for an account called user:

   

   Which of the following account policies would BEST prevent attackers from logging in as user?

   • AImpossible travel time
   • BGeofencing
   • CTime-based logins
   • DGeolocation

   Show answer

   Answer: A

   Explanation

   Answer: Impossible travel time Impossible Travel is a calculation made by comparing a user's last known location to their current location, then assessing whether the trip is likely or even possible in the time that elapsed between the two measurements. It can calculate the time it would take to travel from New York to Los Angeles and see it would be impossible to accomplish this within a minute.

   Source: Adapted from community discussion — rodwave

   Next question

8. Question 188 · 856 in bank

   The Chief Compliance Officer from a bank has approved a background check policy for all new hires. Which of the following is the policy MOST likely protecting against?

   • APreventing any current employees' siblings from working at the bank to prevent nepotism
   • BHiring an employee who has been convicted of theft to adhere to industry compliance
   • CFiltering applicants who have added false information to resumes so they appear better qualified
   • DEnsuring no new hires have worked at other banks that may be trying to steal customer information

   Show answer

   Answer: B

   Explanation

   It think the wording is a problem if you guys are considering B. Background checks is to identify falsification and misrepresentation. Answer is C

   Source: Adapted from community discussion — inkedia3

   Next question

9. Question 189 · 856 in bank

   An organization is tuning SIEM rules based off of threat intelligence reports. Which of the following phases of the incident response process does this scenario represent?

   • ALessons learned
   • BEradication
   • CRecovery
   • DPreparation

   Show answer

   Answer: D

   Explanation

   Answer: Preparation The preparation phase is when the organization is preparing for the attack. Tuning the SIEM is just providing the latest threat information to the system for preparation. ======================= Phases of the Incident Response Plan: 1. Preparation - Preparing for an attack and how to respond 2. Identification - Identifying the threat 3. Containment - Containing the threat 4. Eradication - Removing the threat 5. Recovery - Recovering affected systems 6. Lessons Learned - Evaluating the incident response, see where there can be improvements for a future incident.

   Source: Adapted from community discussion — rodwave

   Next question

10. Question 190 · 856 in bank

    The database administration team is requesting guidance for a secure solution that will ensure confidentiality of cardholder data at rest only in certain fields in the database schema. The requirement is to substitute a sensitive data field with a non-sensitive field that is rendered useless if a data breach occurs. Which of the following is the BEST solution to meet the requirement?

    • ATokenization
    • BMasking
    • CFull disk encryption
    • DMirroring

    Show answer

    Answer: A

    Explanation

    "While both tokenization and masking are great techniques used to protect sensitive data, tokenization is mainly used to protect data at rest whereas masking is used to protect data in use." http://www.differencebetween.net/technology/difference-between-tokenization-and-masking/#ixzz7kbfKgsdk

    Source: Adapted from community discussion — carpathia

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 181. 856 questions available.