SY0-601 practice questions 521–530

1. Question 521 · 856 in bank

   A cloud service provider has created an environment where customers can connect existing local networks to the cloud for additional computing resources and block internal HR applications from reaching the cloud. Which of the following cloud models is being used?

   • APublic
   • BCommunity
   • CHybrid
   • DPrivate

   Show answer

   Answer: C

   Explanation

   The scenario described in the question where customers connect their existing local networks to the cloud for additional computing resources and block internal HR applications from reaching the cloud is an example of a hybrid cloud model. A hybrid cloud model combines both private and public cloud services, allowing organizations to take advantage of the benefits of both environments. In a hybrid cloud model, certain applications and data can be kept in a private cloud, which offers greater control, security, and customization, while other applications and data can be hosted in the public cloud, which provides scalability and cost-efficiency. The two environments are connected through encrypted and secure connections, enabling seamless data exchange between them while maintaining the necessary security and access controls.

   Source: Adapted from community discussion — Protract8593

   References

   • AWS documentation

   Next question

2. Question 522 · 856 in bank

   A security analyst discovers several jpg photos from a cellular phone during a forensics investigation involving a compromised system. The analyst runs a forensics tool to gather file metadata. Which of the following would be part of the images if all the metadata is still intact?

   • AThe GPS location
   • BWhen the file was deleted
   • CThe total number of print jobs
   • DThe number of copies made

   Show answer

   Answer: A

   Explanation

   If all the metadata is still intact, one of the pieces of information that can be found in the image files is the GPS location. Many modern smartphones embed GPS location information (also known as geotags or geolocation data) into the metadata of photos taken by the phone's camera. This GPS location metadata records the latitude and longitude coordinates of the location where the photo was taken.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

3. Question 523 · 856 in bank

   A financial analyst is expecting an email containing sensitive information from a client. When the email arrives the analyst receives an error and is unable to open the encrypted message. Which of the following is the most likely cause of the issue?

   • AThe S/MIME plug-in is not enabled
   • BThe SSL certificate has expired
   • CSecure IMAP was not implemented
   • DPOP3S is not supported

   Show answer

   Answer: A

   Explanation

   The most likely cause of the issue is that the S/MIME (Secure/Multipurpose Internet Mail Extensions) plug-in, which is used for email encryption and digital signing, is not enabled or properly configured on the financial analyst's email client. S/MIME is a widely used protocol for securing email communications by providing encryption and digital signatures. If the analyst was expecting an encrypted email from the client, but the S/MIME plug-in is not enabled or not set up correctly, the email client will not be able to decrypt the message, resulting in an error when trying to open the encrypted email.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

4. Question 524 · 856 in bank

   A company develops a complex platform that is composed of a single application. After several issues with upgrades, the systems administrator recommends breaking down the application into unique, independent modules. Which of the following best identifies the systems administrator's recommendation?

   • AVirtualization
   • BServerless
   • CMicroservices
   • DAPI gateway

   Show answer

   Answer: C

   Explanation

   The systems administrator's recommendation is to break down the complex platform into unique, independent modules, which is a characteristic of the microservices architecture. Microservices is an architectural style where a large application is divided into smaller, loosely coupled services that can be independently developed, deployed, and scaled. Each service handles a specific business function and communicates with other services through APIs.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

5. Question 525 · 856 in bank

   Which of the following would be the best way to block unknown programs from executing?

   • AAccess control list
   • BApplication allow list
   • CHost-based firewall
   • DDLP solution

   Show answer

   Answer: B

   Explanation

   B. Application Allow List An application allow list (also known as application whitelisting) is the best option among the given choices for blocking unknown programs from executing. This approach only allows the execution of specific, approved programs and automatically blocks the execution of any program not on the list.

   Source: Adapted from community discussion — DarexTech100

   Next question

6. Question 526 · 856 in bank

   A company is planning to install a guest wireless network so visitors will be able to access the internet. The stakeholders want the network to be easy to connect to so time is not wasted during meetings. The WAPs are configured so that power levels and antennas cover only the conference rooms where visitors will attend meetings. Which of the following would best protect the company's internal wireless network against visitors accessing company resources?

   • AConfigure the guest wireless network to be on a separate VLAN from the company’s internal wireless network.
   • BChange the password for the guest wireless network every month.
   • CDecrease the power levels of the access points for the guest wireless network.
   • DEnable WPA2 using 802.1X for logging on to the guest wireless network.

   Show answer

   Answer: A

   Explanation

   By configuring the guest wireless network to be on a separate VLAN, the network traffic of the guest network is logically isolated from the company's internal network. This prevents visitors from having direct access to internal resources, such as servers and sensitive data, even if they can connect to the guest network.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

7. Question 527 · 856 in bank

   An organization relies on third-party videoconferencing to conduct daily business. Recent security changes now require all remote workers to utilize a VPN to corporate resources. Which of the following would best maintain high-quality videoconferencing while minimizing latency when connected to the VPN?

   • AUsing geographic diversity to have VPN terminators closer to end users
   • BUtilizing split tunneling so only traffic for corporate resources is encrypted
   • CPurchasing higher bandwidth connections to meet the increased demand
   • DConfiguring QoS properly on the VPN accelerators

   Show answer

   Answer: D

   Explanation

   uality of Service (QoS) is a network management technique that prioritizes certain types of traffic, such as videoconferencing data, over other types of traffic on the network. By configuring QoS on the VPN accelerators, the organization can ensure that videoconferencing traffic receives sufficient bandwidth and low latency to maintain its quality, even when other types of traffic are competing for network resources. This helps prevent congestion and ensures that critical applications like videoconferencing receive the necessary priority, reducing the potential for audio or video disruptions during meetings.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

8. Question 528 · 856 in bank

   A security analyst is scanning a company's public network and discovers a host is running a remote desktop that can be used to access the production network. Which of the following changes should the security analyst recommend?

   • AChanging the remote desktop port to a non-standard number
   • BSetting up a VPN and placing the jump server inside the firewall
   • CUsing a proxy for web connections from the remote desktop server
   • DConnecting the remote server to the domain and increasing the password length

   Show answer

   Answer: B

   Explanation

   Placing the jump server inside the firewall and configuring a Virtual Private Network (VPN) for secure remote access would be the best recommendation to enhance security in this scenario. By using a jump server, which is a secure intermediary system, the security analyst can create a controlled access point to the production network. The jump server will act as a gateway for remote users to connect to the production network securely, while also reducing the attack surface by limiting direct access to the production network from external sources. Using a VPN ensures that data transmitted between the remote desktop and the production network is encrypted, protecting it from potential eavesdropping and unauthorized access. This approach helps to secure the remote access process and minimizes the risk of unauthorized access to critical resources within the production network. Additionally, by placing the jump server inside the firewall, the organization can apply additional security measures, such as access controls and monitoring, to further protect the production network from potential threats.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

9. Question 529 · 856 in bank

   A company recently experienced a major breach. An investigation concludes that customer credit card data was stolen and exfiltrated through a dedicated business partner connection to a vendor, who is not held to the same security control standards. Which of the following is the most likely source of the breach?

   • ASide channel
   • BSupply chain
   • CCryptographic downgrade
   • DMalware

   Show answer

   Answer: B

   Explanation

   Based on the information provided, the most likely source of the breach is the supply chain. The breach occurred when customer credit card data was stolen and exfiltrated through a dedicated business partner connection to a vendor. This indicates that the vendor, who is part of the supply chain, may not have the same level of security control standards as the company itself, making it a potential weak link in the overall security posture. Supply chain attacks involve targeting third-party vendors, suppliers, or business partners as a means to gain unauthorized access to the main target organization's systems or data.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

10. Question 530 · 856 in bank

    A company would like to provide flexibility for employees on device preference. However, the company is concerned about supporting too many different types of hardware. Which of the following deployment models will provide the needed flexibility with the greatest amount of control and security over company data and infrastructure?

    • ABYOD
    • BVDI
    • CCOPE
    • DCYOD

    Show answer

    Answer: D

    Explanation

    CYOD allows employees to choose their preferred devices from a pre-approved list of options provided by the company. While it offers flexibility, it also enables the organization to maintain control and ensure security by limiting the device choices to a predetermined set of hardware that meets the company's standards and security requirements. By providing a defined set of approved devices, the company can streamline support, manageability, and security measures for those specific devices. The IT department can focus on thoroughly testing and supporting a smaller range of hardware configurations, which reduces complexity and allows for tighter control over the devices accessing the company's data and infrastructure.

    Source: Adapted from community discussion — sursur

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 521. 856 questions available.