SY0-601 practice questions 501–510

1. Question 501 · 856 in bank

   A security analyst was asked to evaluate a potential attack that occurred on a publicly accessible section of the company's website. The malicious actor posted an entry in an attempt to trick users into clicking the following: https://www.c0mpt1a.com/contact-us/%3Fname%3D%3Cscript%3Ealert(document.cookie)%3C%2Fscript%3E Which of the following was most likely observed?

   • ADLL injection
   • BSession replay
   • CSQLi
   • DXSS

   Show answer

   Answer: D

   Explanation

   Segment by segment: URL Structure: The URL starts with "https://www.c0mpt1a.com/contact-us/," which is a typical URL structure for a website's contact page. This part appears normal. Query Parameter: Following the "/", there is a query parameter represented as "?name=". Query parameters in a URL are often used to pass data to a web application. Payload: After the "name=" query parameter, there is a URL-encoded string: "%3Cscript%3Ealert(document.cookie)%3C%2Fscript%3E". Let's decode and analyze this payload step by step: "%3C" represents " ". So, "%3Cscript%3E" is " ", and "%3C%2Fscript%3E" is " " in HTML. Between the " " and " " tags, there is JavaScript code: "alert(document.cookie)".

   Source: Adapted from community discussion — sujon_london

   Next question

2. Question 502 · 856 in bank

   A company's Chief Information Security Officer (CISO) recently warned the security manager that the company's Chief Executive Officer (CEO) is planning to publish a controversial opinion article in a national newspaper, which may result in new cyberattacks. Which of the following would be best for the security manager to use in a threat model?

   • AHacktivists
   • BWhite-hat hackers
   • CScript kiddies
   • DInsider threats

   Show answer

   Answer: A

   Explanation

   In this scenario, the CISO is warning the security manager about the CEO's controversial opinion article, which may result in new cyberattacks. Hacktivists are individuals or groups of hackers who engage in hacking activities for ideological or political reasons. They may be motivated to launch cyberattacks in response to the CEO's article due to the controversial nature of its content. Including hacktivists in the threat model would help the security manager assess the potential risk posed by this group and develop appropriate mitigation strategies.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

3. Question 503 · 856 in bank

   Which of the following provides a catalog of security and privacy controls related to the United States federal information systems?

   • AGDPR
   • BPCI DSS
   • CISO 27000
   • DNIST 800-53

   Show answer

   Answer: D

   Explanation

   NIST 800-53 (National Institute of Standards and Technology Special Publication 800-53) is a catalog of security and privacy controls for United States federal information systems. It provides guidelines and recommendations for implementing a comprehensive security program to protect the confidentiality, integrity, and availability of sensitive information and systems. NIST 800-53 is widely used by government agencies and organizations to ensure compliance with security and privacy requirements.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

4. Question 504 · 856 in bank

   An analyst is concerned about data leaks and wants to restrict access to internet services to authorized users only. The analyst also wants to control the actions each user can perform on each service. Which of the following would be the best technology for the analyst to consider Implementing?

   • ADLP
   • BVPC
   • CCASB
   • DContent filtering

   Show answer

   Answer: C

   Explanation

   Please guys don't spread confusion if you are not sure about the answer then don't say anything... This question is not talking about 'only data leaks' it is talking about restricting access to internet services and controlling the actions on these services. One thing i know for sure is that DLP won't do that for you. So the answer to this question is C = CASB (Cloud Access Security Broker).

   Source: Adapted from community discussion — sander22

   Next question

5. Question 505 · 856 in bank

   A grocery store is expressing security and reliability concerns regarding the on-site backup strategy currently being performed by locally attached disks. The main concerns are the physical security of the backup media and the durability of the data stored on these devices. Which of the following is a cost-effective approach to address these concerns?

   • AEnhance resiliency by adding a hardware RAID.
   • BMove data to a tape library and store the tapes off-site.
   • CInstall a local network-attached storage.
   • DMigrate to a cloud backup solution.

   Show answer

   Answer: D

   Explanation

   Using a cloud backup solution has several advantages: Physical Security: Data stored in the cloud is securely hosted and managed by the cloud service provider, reducing the risk of physical theft or damage to backup media. Durability: Cloud providers typically replicate data across multiple data centers, ensuring data durability and availability. Off-site Storage: Cloud backups provide off-site storage by default, protecting data from on-site disasters or local hardware failures. Scalability: Cloud backup solutions can easily scale to accommodate growing data needs without the need for additional hardware investments. Automation: Cloud backups can be automated, ensuring regular and consistent backups without manual intervention. Overall, migrating to a cloud backup solution is a viable and cost-effective option to improve the security and reliability of the grocery store's backup strategy.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

6. Question 506 · 856 in bank

   A security engineer needs to recommend a solution to defend against malicious actors misusing protocols and being allowed through network defenses. Which of the following will the engineer most likely recommend?

   • AA content filter
   • BA WAF
   • CA next-generation firewall
   • DAn IDS

   Show answer

   Answer: C

   Explanation

   C. A next-generation firewall A next-generation firewall (NGFW) offers advanced capabilities, including application awareness, protocol inspection, intrusion prevention, and deep packet inspection. These features make NGFWs well-suited to identify and block malicious actors misusing protocols and ensure that they do not bypass network defenses.

   Source: Adapted from community discussion — Chillbuddy

   Next question

7. Question 507 · 856 in bank

   A company's legal department drafted sensitive documents in a SaaS application and wants to ensure the documents cannot be accessed by individuals in high-risk countries. Which of the following is the most effective way to limit this access?

   • AData masking
   • BEncryption
   • CGeolocation policy
   • DData sovereignty regulation

   Show answer

   Answer: C

   Explanation

   A geolocation policy can be used to restrict access to sensitive documents based on the physical location of users. By implementing such a policy in the SaaS application, the company can block access from IP addresses associated with high-risk countries, preventing users in those regions from accessing the sensitive documents.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

8. Question 508 · 856 in bank

   Select 2

   An organization suffered numerous multiday power outages at its current location. The Chief Executive Officer wants to create a disaster recovery strategy to resolve this issue. Which of the following options offer low-cost solutions? (Choose two.)

   • AWarm site
   • BGenerator
   • CHot site
   • DCold site
   • ECloud backups
   • FUPS

   Show answer

   Answer: BF

   Explanation

   You are reading toooooooo deep into it. The question is clearly implying an electricity problem. And a multiday outage falls under the category of Disaster recovery without needing to be a full blown catastrophe like a tsunami or earthquake!!! not to mention that

   Source: Adapted from community discussion — david124

   Next question

9. Question 509 · 856 in bank

   A security analyst is reviewing the following logs:

   

   Which of the following attacks is most likely occurring?

   • APassword spraying
   • BAccount forgery
   • CPass-the-hash
   • DBrute-force

   Show answer

   Answer: A

   Explanation

   Password spraying is a type of brute-force attack used by hackers to gain unauthorized access to user accounts, systems, or services. Unlike traditional brute-force attacks that attempt to guess the password for a single user account by trying various combinations of characters, password spraying involves trying a small number of commonly used passwords against multiple accounts. The goal is to avoid detection by avoiding excessive failed login attempts for a single account, which could trigger account lockouts or other security measures. In a password spraying attack, the attacker typically selects a few common passwords (such as "password," "123456," "admin," etc.) and tries these passwords against many user accounts. This approach takes advantage of the fact that many users often choose weak and easily guessable passwords, and the attacker hopes that at least one of the accounts will have a weak password that matches the ones attempted.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

10. Question 510 · 856 in bank

    Which of the following is the FIRST environment in which proper, secure coding should be practiced?

    • AStage
    • BDevelopment
    • CProduction
    • DTest

    Show answer

    Answer: B

    Explanation

    Development The developer has to start writing secure code from beginning itself. Which will then be tested, staged and finally production

    Source: Adapted from community discussion — varun0

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 501. 856 questions available.