SY0-601 practice questions 581–590

1. Question 581 · 856 in bank

   A systems administrator needs to implement an access control scheme that will allow an object's access policy to be determined by its owner. Which of the following access control schemes BEST fits the requirements?

   • ARole-based access control
   • BDiscretionary access control
   • CMandatory access control
   • DAttribute-based access control

   Show answer

   Answer: B

   Explanation

   DAC, the owner of an object has full control over who can access it. The owner can grant or revoke access to the object as they see fit. This is the most flexible access control scheme, but it can also be the most complex to manage. Mandatory access control (MAC) is a type of access control that assigns permissions to users based on their clearance level. This is the most secure access control scheme, but it can also be the most difficult to implement and manage. In this case, the systems administrator needs to implement an access control scheme that will allow the object's access policy to be determined by its owner.

   Source: Adapted from community discussion — sujon_london

   Next question

2. Question 582 · 856 in bank

   Which of the following security concepts should an e-commerce organization apply for protection against erroneous purchases?

   • APrivacy
   • BAvailability
   • CIntegrity
   • DConfidentiality

   Show answer

   Answer: C

   Explanation

   This might not be the right explanation but the reason I chose Integrity is because the question asks for protection against errorneous purchase which sounds like error/mistake purchase, as in a customer saying "this was purchased by error". Integrity provides non-repudiation so that would prevent someone from denying that they purchased it when in reality they did

   Source: Adapted from community discussion — xBrynlee

   Next question

3. Question 583 · 856 in bank

   Select 2

   A network administrator needs to build out a new datacenter, with a focus on resiliency and uptime. Which of the following would BEST meet this objective? (Choose two.)

   • ADual power supply
   • BOff-site backups
   • CAutomatic OS upgrades
   • DNIC teaming
   • EScheduled penetration testing
   • FNetwork-attached storage

   Show answer

   Answer: AD

   Explanation

   I can see the logic for off-site backups, but redundant network connections would be a higher priority for resiliency assuming that there are local backups. Any non-chatGpt documentation out there to back either up?

   Source: Adapted from community discussion — James_Tye

   Next question

4. Question 584 · 856 in bank

   A company's Chief Information Officer (CIO) is meeting with the Chief Information Security Officer (CISO) to plan some activities to enhance the skill levels of the company's developers. Which of the following would be MOST suitable for training the developers?

   • AA capture-the-flag competition
   • BA phishing simulation
   • CPhysical security training
   • DBasic awareness training

   Show answer

   Answer: A

   Explanation

   I am convinced by these explanations: capture-the-flag (CTF) competitions can be a suitable training option for enhancing the skill levels of a company's developers in cybersecurity. CTF competitions can help developers learn how to identify and exploit security vulnerabilities in various systems, applications, and networks, which is essential for building secure software. CTF challenges can be designed to simulate real-world scenarios and can test a variety of skills at any level, including cryptography, network analysis, reverse engineering, exploitation, web technologies, memory corruption, forensics, and open-source cyber intelligence. CTF competitions can also provide a well-rounded approach to enhancing developer skills in cybersecurity, as they can help developers learn how to secure their code and applications effectively. On the other hand, A phishing simulation is one set of learning while CTF is well rounded one.

   Source: Adapted from community discussion — sujon_london

   Next question

5. Question 585 · 856 in bank

   A cybersecurity administrator has a reduced team and needs to operate an on-premises network and security infrastructure efficiently. To help with the situation, the administrator decides to hire a service provider. Which of the following should the administrator use?

   • ASDP
   • BAAA
   • CIaaS
   • DMSSP
   • EMicroservices

   Show answer

   Answer: D

   Explanation

   MSSP (Managed Security Service Provider) to efficiently operate the on-premises network and security infrastructure with a reduced team. An MSSP provides outsourced monitoring and management of security devices and systems By hiring an MSSP, the administrator can leverage their expertise and resources to handle security operations, such as managed firewall, intrusion detection, virtual private network, vulnerability scanning, and anti-viral services MSSPs can also provide specialized cybersecurity skills, such as cloud security, identity, or compliance knowledge, and help prevent breaches through automated incident response

   Source: Adapted from community discussion — sujon_london

   Next question

6. Question 586 · 856 in bank

   A customer service representative reported an unusual text message that was sent to the help desk. The message contained an unrecognized invoice number with a large balance due and a link to click for more details. Which of the following BEST describes this technique?

   • AVishing
   • BWhaling
   • CPhishing
   • DSmishing

   Show answer

   Answer: D

   Explanation

   Smishing: Uses text messages. Vishing: Involves voice calls. Whaling: Targets high-profile individuals. Phishing: Usually occurs via email, targeting a wider audience.

   Source: Adapted from community discussion — Thurams

   Next question

7. Question 587 · 856 in bank

   Which of the following threat vectors would appear to be the most legitimate when used by a malicious actor to impersonate a company?

   • APhone call
   • BInstant message
   • CEmail
   • DText message

   Show answer

   Answer: C

   Explanation

   C. Email Email phishing is often the most legitimate appearing method used by malicious actors for impersonation. Hackers can clone official company email templates, use similar email addresses, and create a sense of urgency to trick recipients into sharing sensitive data or clicking on harmful links. Although all methods listed can be used for malicious purposes, emails often appear more formal and legitimate to the users. That's why it's important to always confirm the sender's identity and avoid clicking on suspicious links, regardless of how authentic the email seems.

   Source: Adapted from community discussion — mpengly88

   Next question

8. Question 588 · 856 in bank

   The SOC is reviewing processes and procedures after a recent incident. The review indicates it took more than 30 minutes to determine that quarantining an infected host was the best course of action. This allowed the malware to spread to additional hosts before it was contained. Which of the following would be BEST to improve the incident response process?

   • AUpdating the playbooks with better decision points
   • BDividing the network into trusted and untrusted zones
   • CProviding additional end-user training on acceptable use
   • DImplementing manual quarantining of infected hosts

   Show answer

   Answer: A

   Explanation

   Updating the playbooks with better decision points will help the SOC team to make quicker and more informed decisions during an incident. This will help to contain the incident and minimize the damage.

   Source: Adapted from community discussion — sujon_london

   Next question

9. Question 589 · 856 in bank

   A security administrator checks the table of a network switch, which shows the following output:

   

   Which of the following is happening to this switch?

   • AMAC flooding
   • BDNS poisoning
   • CMAC cloning
   • DARP poisoning

   Show answer

   Answer: A

   Explanation

   MAC flooding: MAC flooding is a network attack where an attacker floods a switch with a large number of Ethernet frames, each containing different source MAC addresses. The goal is to overwhelm the switch's MAC address table and force it into a "fail-open" mode, where it starts broadcasting traffic to all ports, effectively turning it into a hub. This allows the attacker to capture network traffic intended for other devices.

   Source: Adapted from community discussion — sujon_london

   Next question

10. Question 590 · 856 in bank

    An organization just experienced a major cyberattack incident. The attack was well coordinated, sophisticated, and highly skilled. Which of the following targeted the organization?

    • AShadow IT
    • BAn insider threat
    • CA hacktivist
    • DAn advanced persistent threat

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 581. 856 questions available.