SY0-601 practice questions 291–300

1. Question 291 · 856 in bank

   A global pandemic is forcing a private organization to close some business units and reduce staffing at others. Which of the following would be BEST to help the organization's executives determine their next course of action?

   • AAn incident response plan
   • BA communication plan
   • CA disaster recovery plan
   • DA business continuity plan

   Show answer

   Answer: D

   Explanation

   A business continuity plan outlines the strategies and procedures to be implemented during disruptive events to ensure the organization can continue its critical operations. It helps identify the essential functions, critical processes, and resources required to maintain business operations during adverse conditions. In this case, the organization's executives can refer to the business continuity plan to understand how to adapt their operations, allocate resources effectively, and make informed decisions about which business units to close and how to manage reduced staffing in the remaining units. The plan will provide guidance on how to maintain essential operations and minimize the impact of the changes caused by the pandemic.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

2. Question 292 · 856 in bank

   A cybersecurity analyst reviews the log files from a web server and sees a series of files that indicate a directory traversal attack has occurred. Which of the following is the analyst MOST likely seeing?

   • Ahttp://sample.url.com/
   • Bhttp://sample.url.com/someotherpageonsite/../../../etc/shadow
   • Chttp://sample.url.com/select-from-database-where-password-null
   • Dhttp://redirect.sameple.url.sampleurl.com/malicious-dns-redirect

   Show answer

   Answer: B

   Explanation

   This URL indicates a directory traversal attack, also known as path traversal or directory climbing attack. In this attack, the attacker tries to access files or directories outside of the web server's intended directory structure by manipulating the URL. The ".." sequences are used to navigate up the directory hierarchy and potentially reach sensitive files or directories. By including "../" multiple times, the attacker attempts to traverse back to the root directory ("/") and then access the "/etc/shadow" file, which typically stores encrypted password hashes on Unix-like systems. This is a common target for attackers as it may contain valuable information that can be used for further exploitation.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

3. Question 293 · 856 in bank

   A candidate attempts to go to http://comptia.org but accidentally visits http://comptiia.org. The malicious website looks exactly like the legitimate website. Which of the following BEST describes this type of attack?

   • AReconnaissance
   • BImpersonation
   • CTyposquatting
   • DWatering-hole

   Show answer

   Answer: C

   Explanation

   Typosquatting, also known as URL hijacking or typo hijacking, is a form of cybersquatting where an attacker registers domain names that closely resemble legitimate and popular domain names. The attacker takes advantage of users making typographical errors while entering a website's URL. In the given scenario, the candidate accidentally visits http://comptiia.org instead of the intended http://comptia.org. The attacker has registered a domain name that closely resembles the legitimate website's domain name. The malicious website is designed to look identical to the legitimate website, aiming to deceive users and trick them into entering sensitive information or performing malicious actions.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   References

   • comptia.org documentation

   Next question

4. Question 294 · 856 in bank

   The marketing department at a retail company wants to publish an internal website to the internet so it is reachable by a limited number of specific, external service providers in a secure manner. Which of the following configurations would be BEST to fulfil this requirement?

   • ANAC
   • BACL
   • CWAF
   • DNAT

   Show answer

   Answer: B

   Explanation

   The best configuration to fulfil this requirement is B. ACL (Access Control List). An Access Control List can be used to restrict access to external service providers based on their IP addresses, enabling a secure method of publishing the internal website to the internet.

   Source: Adapted from community discussion — ramesh2022

   Next question

5. Question 295 · 856 in bank

   A retail executive recently accepted a job with a major competitor. The following week, a security analyst reviews the security logs and identifies successful logon attempts to access the departed executive’s accounts. Which of the following security practices would have addressed the issue?

   • AA non-disclosure agreement
   • BLeast privilege
   • CAn acceptable use policy
   • DOffboarding

   Show answer

   Answer: D

   Explanation

   Offboarding refers to the process of managing the departure of an employee from an organization. It involves revoking the employee's access to company systems, applications, and data to ensure that they no longer have unauthorized access after leaving the organization. Offboarding typically includes disabling user accounts, changing passwords, and removing any privileges or permissions associated with the employee's role. In this scenario, if the offboarding process had been followed correctly, the departed executive's accounts would have been promptly deactivated or deleted, preventing any further logon attempts or unauthorized access. Offboarding is a crucial security practice to mitigate the risk of insider threats and unauthorized access by former employees.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

6. Question 296 · 856 in bank

   A network-connected magnetic resonance imaging (MRI) scanner at a hospital is controlled and operated by an outdated and unsupported specialized Windows OS. Which of the following is MOST likely preventing the IT manager at the hospital from upgrading the specialized OS?

   • AThe time needed for the MRI vendor to upgrade the system would negatively impact patients.
   • BThe MRI vendor does not support newer versions of the OS.
   • CChanging the OS breaches a support SLA with the MRI vendor.
   • DThe IT team does not have the budget required to upgrade the MRI scanner.

   Show answer

   Answer: B

   Explanation

   I disagree. MRI's dont work around the clock 24/7. Plus there are scheduled maintenance checks, during which the update could be done if possible. The more likely issue is that newer OS versions are not supported.

   Source: Adapted from community discussion — Ranaer

   Next question

7. Question 297 · 856 in bank

   A company received a “right to be forgotten” request. To legally comply, the company must remove data related to the requester from its systems. Which of the following is the company MOST likely complying with?

   • ANIST CSF
   • BGDPR
   • CPCI DSS
   • DISO 27001

   Show answer

   Answer: B

   Explanation

   The right to be forgotten appears in Recitals 65 and 66 and in Article 17 of the GDPR. It states, “The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay”

   Source: Adapted from community discussion — Jibz18

   Next question

8. Question 298 · 856 in bank

   A security team suspects that the cause of recent power consumption overloads is the unauthorized use of empty power outlets in the network rack. Which of the following options will mitigate this issue without compromising the number of outlets available?

   • AAdding a new UPS dedicated to the rack
   • BInstalling a managed PDU
   • CUsing only a dual power supplies unit
   • DIncreasing power generator capacity

   Show answer

   Answer: B

   Explanation

   Managed power distribution units provide the supply of energy, remote control over individual outlets (switching on/off) thus enable server restart and further monitoring of energy consumption from individual outlets

   Source: Adapted from community discussion — Jibz18

   Next question

9. Question 299 · 856 in bank

   A company is providing security awareness training regarding the importance of not forwarding social media messages from unverified sources. Which of the following risks would this training help to prevent?

   • AHoaxes
   • BSPIMs
   • CIdentity fraud
   • DCredential harvesting

   Show answer

   Answer: A

   Explanation

   I read the comments below. Many of you are associating social media messages with fake news which is leading you to the answer: Hoax. However, social media messages are usually just that, messages. Think of a DM via Instagram. That is a direct message through a social media application. Most social medias have IM features. I think there is a false notion of fake news with this question. For this reason, I believe it is SPIM.

   Source: Adapted from community discussion — babyzilla

   Next question

10. Question 300 · 856 in bank

    An engineer wants to inspect traffic to a cluster of web servers in a cloud environment. Which of the following solutions should the engineer implement?

    • ACASB
    • BWAF
    • CLoad balancer
    • DVPN

    Show answer

    Answer: B

    Explanation

    QUESTION 707 An engineer wants to inspect traffic to a cluster of web servers in a cloud environment. Which of the following solutions should the engineer implement? A. Proxy server B. WAF C. Load balancer D. VPN Answer: B QUESTION 70

    Source: Adapted from community discussion — DWISE1

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 291. 856 questions available.