SY0-601 practice questions 31–40

1. Question 31 · 856 in bank

   A technician enables full disk encryption on a laptop that will be taken on a business trip. Which of the following does this process BEST protect?

   • AData in transit
   • BData in processing
   • CData at rest
   • DData tokenization

   Show answer

   Answer: C

   Explanation

   Data in transit is incorrect. The official terminology is data in motion. Data-in-Motion: Data that is in transit over a network. Think data packets working their way across the internet. Data-at-Rest: Stored data that resides on hard drives, tapes, in the cloud, or on other storage media. When this is taught, it's almost always taught as a USB stick laying on a desk in an office. Don't forget that this is broad category. Data-in-Processing: Data that is actively in use by a computer system. Includes data stored in memory while processing takes place.

   Source: Adapted from community discussion — Gravoc

   Next question

2. Question 32 · 856 in bank

   A security analyst was called to investigate a file received directly from a hardware manufacturer. The analyst is trying to determine whether the file was modified in transit before installation on the user's computer. Which of the following can be used to safely assess the file?

   • ACheck the hash of the installation file.
   • BMatch the file names.
   • CVerify the URL download location.
   • DVerify the code signing certificate.

   Show answer

   Answer: A

   Explanation

   The hardware manufacturer will post the hash of the file publicly, and anyone who receives a copy of that file will be able to run a checksum on the file themselves, and compare them to the official manufacturer-provided checksum. Hashing is almost always the correct answer in these type of questions. You'll see a lot of Github repositories using hashed checksums as well for verification, and I recently just installed Java onto my new computer. Java provided me with a hashed checksum for the setup executable.

   Source: Adapted from community discussion — Gravoc

   Next question

3. Question 33 · 856 in bank

   A help desk technician receives a phone call from someone claiming to be a part of the organization's cybersecurity incident response team. The caller asks the technician to verify the network's internal firewall IP Address. Which of the following is the technician's BEST course of action?

   • ADirect the caller to stop by the help desk in person and hang up declining any further requests from the caller.
   • BAsk for the caller's name, verify the person's identity in the email directory, and provide the requested information over the phone.
   • CWrite down the phone number of the caller if possible, the name of the person requesting the information, hang up, and notify the organization's cybersecurity officer.
   • DRequest the caller send an email for identity verification and provide the requested information via email to the caller.

   Show answer

   Answer: C

   Explanation

   Answer: Write down the phone number of the caller if possible, the name of the person requesting the information, hang up, and notify the organization's cybersecurity officer. In this scenario, the help desk technician should be wary of the person's request as help desk technicians would not have this information. Also, if the person claimed to be from the cybersecurity incident response team, they would more likely to have access to this information anyway, or at least know who to contact. For the sake of the technician, it would be best to get as much information as possible and delegate the task of confirming the person's identity to the cybersecurity officer. Even in the very slim chance that it was a legitimate request, it would still be best for the cyber security officer to provide this information instead of a tech.

   Source: Adapted from community discussion — rodwave

   Next question

4. Question 34 · 856 in bank

   Which of the following would BEST provide detective and corrective controls for thermal regulation?

   • AA smoke detector
   • BA fire alarm
   • CAn HVAC system
   • DA fire suppression system
   • EGuards

   Show answer

   Answer: C

   Explanation

   What are the functions of an HVAC system? An HVAC system is designed to control the environment in which it works. It achieves this by controlling the temperature (THERMAL) of a room through heating and cooling. It also controls the humidity level in that environment by controlling the movement and distribution of air inside the room. So it provides detective and corrective controls for THERMAL regulation.

   Source: Adapted from community discussion — stoneface

   Next question

5. Question 35 · 856 in bank

   Which of the following can be used by a monitoring tool to compare values and detect password leaks without providing the actual credentials?

   • AHashing
   • BTokenization
   • CMasking
   • DEncryption

   Show answer

   Answer: A

   Explanation

   Hashing, is the answer. Why? Because, with Hashing the tool can identify a credential without knowing the exact credential , by a mathematical method (ex: multiply the credential by a number, and all different credentials have different results). comparing the Hashing of the local credential with the Hashing of the web credentials the tool can extrapolate if the credential was compromised.

   Source: Adapted from community discussion — Ribeiro19

   Next question

6. Question 36 · 856 in bank

   Which of the following is a benefit of including a risk management framework into an organization's security approach?

   • AIt defines expected service levels from participating supply chain partners to ensure system outages are remediated in a timely manner.
   • BIt identifies specific vendor products that have been tested and approved for use in a secure environment.
   • CIt provides legal assurances and remedies in the event a data breach occurs.
   • DIt incorporates control, development, policy, and management activities into IT operations.

   Show answer

   Answer: D

   Explanation

   D. It incorporates control, development, policy, and management activities into IT operations. Including a risk management framework into an organization's security approach has several benefits, including incorporating control, development, policy, and management activities into IT operations. A risk management framework provides a structured and systematic approach to identify, assess, and manage risks to an organization's information systems and assets. It allows the organization to prioritize risks and allocate resources accordingly, which can lead to more effective and efficient security measures. Option A is related to service level agreements (SLAs) and supply chain management, which are not directly related to a risk management framework. Option B is related to vendor management and procurement, which are important components of a security program but not directly related to a risk management framework. Option C is related to legal compliance and liabilities, which are important but not directly related to a risk management framework.

   Source: Adapted from community discussion — Yawannawanka

   Next question

7. Question 37 · 856 in bank

   An organization maintains several environments in which patches are developed and tested before being deployed to an operational status. Which of the following is the environment in which patches will be deployed just prior to being put into an operational status?

   • ADevelopment
   • BTest
   • CProduction
   • DStaging

   Show answer

   Answer: D

   Explanation

   Answer: Staging Staging is an testing environment similar to production where software system will go through final testing to ensure the application will work properly when it's deployed to production ==================== Software Development Environment Stages: 1. Development - Where the actual development of the software takes place (source code/machine code) 2. Testing - The testing environment is where new or updated code functionalities from development is tested. The primary focus is components of the software vs the entire application. 3. Staging - After passing tests, the software system moves to the staging environment which is identical to production where the system will go through final testing to ensure the application will work properly when it's deployed to production 4. Production - This is the live environment that is available to users

   Source: Adapted from community discussion — rodwave

   Next question

8. Question 38 · 856 in bank

   During a trial, a judge determined evidence gathered from a hard drive was not admissible. Which of the following BEST explains this reasoning?

   • AThe forensic investigator forgot to run a checksum on the disk image after creation.
   • BThe chain of custody form did not note time zone offsets between transportation regions.
   • CThe computer was turned off, and a RAM image could not be taken at the same time.
   • DThe hard drive was not properly kept in an antistatic bag when it was moved.

   Show answer

   Answer: B

   Explanation

   The question states that a trial Judge determined evidence gathered from a hard drive was not admissible. It is obvious that this is a legal matter. All of the remaining answers are of a technical nature, So consequently the only issue that a Judge can rule on is a Chain of custody issue. So, ladies and gentlemen, I rest my case (quickly bangs a gavel upon the desk)

   Source: Adapted from community discussion — Dachosenone

   Next question

9. Question 39 · 856 in bank

   An organization wants to implement a biometric system with the highest likelihood that an unauthorized user will be denied access. Which of the following should the organization use to compare biometric solutions?

   • AFRR
   • BDifficulty of use
   • CCost
   • DFAR
   • ECER

   Show answer

   Answer: D

   Explanation

   "with the highest likelihood that an unauthorized user will be denied access" - I would think this is D (False Acceptance Rate).

   Source: Adapted from community discussion — comeragh

   Next question

10. Question 40 · 856 in bank

    A company recently experienced a significant data loss when proprietary information was leaked to a competitor. The company took special precautions by using proper labels; however, email filter logs do not have any record of the incident. An investigation confirmed the corporate network was not breached, but documents were downloaded from an employee's COPE tablet and passed to the competitor via cloud storage. Which of the following is the BEST remediation for this data leak?

    • AUser training
    • BCASB
    • CMDM
    • DDLP

    Show answer

    Answer: D

    Explanation

    If the data was indeed labeled and the leak still occurred, it would suggest that a Data Loss Prevention (DLP) solution might already be in place, but it did not effectively prevent the data leak. Given that the data was downloaded from an employee's COPE tablet and passed to the competitor via cloud storage, it's possible that the existing DLP solution was not configured to detect or block such data transfers. In this case, the most appropriate remediation would be to reevaluate and enhance the current DLP configuration to include monitoring and blocking data transfers to unauthorized cloud storage services. In summary, the correct answer would be: D. DLP (Data Loss Prevention) By improving the DLP configuration to better detect and prevent unauthorized data transfers, the organization can reduce the risk of future data leaks and enhance the protection of its proprietary information.

    Source: Adapted from community discussion — Protract8593

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 31. 856 questions available.