SY0-601 practice questions 401–410

1. Question 401 · 856 in bank

   A security administrator needs to add fault tolerance and load balancing to the connection from the file server to the backup storage. Which of the following is the best choice to achieve this objective?

   • AMultipath
   • BRAID
   • CSegmentation
   • D802.11

   Show answer

   Answer: A

   Explanation

   A- Multipath is a fault-tolerant technique used to enhance network reliability. It involves the use of multiple physical connections between two devices, providing redundancy in case one of the paths fails. It also improves performance by load balancing the traffic across the multiple paths. -RAID (Redundant Array of Independent Disks) is a data storage technology that combines multiple physical disks into a single logical unit to provide redundancy and improve performance. However, RAID does not provide fault tolerance or load balancing for network connections. -Segmentation is a network design technique that involves dividing a network into smaller segments to reduce network congestion and improve security. However, segmentation does not provide fault tolerance or load balancing for network connections. -802.11 is a family of wireless networking standards commonly known as Wi-Fi. It is not applicable in this scenario as it is a wireless technology and does not provide fault tolerance or load balancing for wired network connections.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

2. Question 402 · 856 in bank

   Which of the following incident response phases should the proper collection of the detected IoCs and establishment of a chain of custody be performed before?

   • AContainment
   • BIdentification
   • CPreparation
   • DRecovery

   Show answer

   Answer: A

   Explanation

   The keyword here is the word before, the collection of IoCs and establishment of chain of custody typically occurs during the identification phase, which is before the containment phase.

   Source: Adapted from community discussion — chocopiess

   Next question

3. Question 403 · 856 in bank

   Which of the following measures the average time that equipment will operate before it breaks?

   • ASLE
   • BMTBF
   • CRTO
   • DARO

   Show answer

   Answer: B

   Explanation

   -B is correct The measure that determines the average time that equipment will operate before it breaks is MTBF (Mean Time Between Failures). MTBF is a reliability metric that measures the expected time between two failures of a piece of equipment. It is calculated by dividing the total operating time of the equipment by the number of failures that occurred during that time. SLE (Single Loss Expectancy) measures the monetary value expected from a single loss event. RTO (Recovery Time Objective) is the duration of time that an organization can tolerate being without a specific system, service, or application after a disruption or outage. ARO (Annualized Rate of Occurrence) is a measure of how often a specific event or threat is expected to occur in a year.

   Source: Adapted from community discussion — mouettespaghetti

   Next question

4. Question 404 · 856 in bank

   A security administrator examines the ARP table of an access switch and sees the following output:

   

   • ADDoS on Fa0/2 port
   • BMAC flooding on Fa0/2 port
   • CARP poisoning on Fa0/1 port
   • DDNS poisoning on port Fa0/1

   Show answer

   Answer: B

   Explanation

   OMG !!! That is an ARP table ???? I think the guys who wrote this question didn't took CompTIA Network + . That is MAC ADDRESS TABLEEEEEE !!!!!!!!!!!!

   Source: Adapted from community discussion — freyprey

   Next question

5. Question 405 · 856 in bank

   Which of the following documents specifies what to do in the event of catastrophic loss of a physical or virtual system?

   • AData retention plan
   • BIncident response plan
   • CDisaster recovery plan
   • DCommunication plan

   Show answer

   Answer: C

   Explanation

   A disaster recovery plan (DRP) is a document that outlines the steps and procedures to be followed in the event of a catastrophic loss of a physical or virtual system, such as a natural disaster, cyberattack, or hardware failure. The DRP specifies how to recover critical systems, restore data, and resume normal operations as quickly as possible. It is an essential part of an organization's overall business continuity plan (BCP), which ensures that critical business functions can continue in the event of a disruption.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

6. Question 406 · 856 in bank

   Which of the following rales is responsible for defining the protection type and classification type for a given set of files?

   • AGeneral counsel
   • BData owner
   • CRisk manager
   • DChief Information Officer

   Show answer

   Answer: B

   Explanation

   The data owner is responsible for defining the protection type and classification type for a given set of files. The data owner is the individual or group within an organization who has responsibility for a specific set of data, including its accuracy, integrity, and confidentiality. They are responsible for defining access controls, identifying sensitive data, and determining the appropriate level of protection and classification for the data.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

7. Question 407 · 856 in bank

   An employee's company email is configured with conditional access and requires that MFA is enabled and used. An example of MFA is a phone call and:

   • Aa push notification
   • Ba password
   • Can SMS message
   • Dan authentication application

   Show answer

   Answer: B

   Explanation

   Please don't copy paste chatgpt answers here, you can get chatgpt to name all answers as correct with some dumb reasoning about them. You cannot answer the phone call if you dont have the phone. it's 100% something you have, forget the code you might get from the call, this is not stated in the questions. A. Push notificating --> something you have B. Password --> something you know C. Sms ---> It's the same as phone call. You need a phone to "know" the sms text--> some you have D. auth app --> something you have. Don't add text to the question that isn't there, don't overthink too much.

   Source: Adapted from community discussion — Xabovion

   Next question

8. Question 408 · 856 in bank

   Which of the following is a security implication of newer ICS devices that are becoming more common in corporations?

   • ADevices with cellular communication capabilities bypass traditional network security controls
   • BMany devices do not support elliptic-curve encryption algorithms due to the overhead they require
   • CThese devices often lack privacy controls and do not meet newer compliance regulations
   • DUnauthorized voice and audio recording can cause loss of intellectual property

   Show answer

   Answer: A

   Explanation

   Newer Industrial Control Systems (ICS) devices that have cellular communication capabilities pose a security risk because they can bypass traditional network security controls and allow direct remote access to the devices over the cellular network. This can be a significant issue if the devices are not properly secured and can be accessed without authentication or encryption.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

9. Question 409 · 856 in bank

   Which of the following is required in order for an IDS and a WAF to be effective on HTTPS traffic?

   • AHashing
   • BDNS sinkhole
   • CTLS inspection
   • DData masking

   Show answer

   Answer: C

   Explanation

   TLS inspection is required for an IDS and WAF to be effective on HTTPS traffic. This is because TLS encryption prevents inspection of the contents of the HTTPS traffic. TLS inspection involves the IDS and WAF decrypting the HTTPS traffic, inspecting it, and then re-encrypting it before forwarding it to its destination.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

10. Question 410 · 856 in bank

    Which of the following is the MOST effective control against zero-day vulnerabilities?

    • ANetwork segmentation
    • BPatch management
    • CIntrusion prevention system
    • DMultiple vulnerability scanners

    Show answer

    Answer: A

    Explanation

    IPS can only protect against known host and application-based attacks and exploits. IPS inspects traffic against signatures and anomalies, it does cover a broad spectrum of attack types, most of them signature-based, and signatures alone cannot protect against zero-day attacks. (www.rawcode7.medium.com) However, with network segmentation, you're able to isolate critical assets into different segments. And when a zero-day attack occurs, you're not at risk of losing all and are able to isolate the attack's effect to one segment.

    Source: Adapted from community discussion — Ay_ma

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 401. 856 questions available.