SY0-601 practice questions 641–650

1. Question 641 · 856 in bank

   Which of the following uses SAML for authentication?

   • ATOTP
   • BFederation
   • CKerberos
   • DHOTP

   Show answer

   Answer: B

   Explanation

   Answer: B: Federation, or identity federation, defines policies, protocols, and practices to manage identities across systems and organizations. Federation’s ultimate goal is to allow users to seamlessly access data or systems across domains. Federation is enabled through the use of industry standards such as Security Assertion Markup Language (SAML)

   Source: Adapted from community discussion — KetReeb

   Next question

2. Question 642 · 856 in bank

   A manufacturing organization wants to control and monitor access from the internal business network to the segregated production network, while ensuring minimal exposure of the production network to devices. Which of the following solutions would best accomplish this goal?

   • AProxy server
   • BNGFW
   • CWAF
   • DJump server

   Show answer

   Answer: D

   Explanation

   A jump server, also known as a jump host or jump box. The most common example is managing a host in a DMZ from trusted networks or computers. A jump server acts as a buffer for a network of multiple devices and keeps outside traffic from sensitive information. Its primary function is to prevent a malicious hacker from accessing your data and make your network less prone to self-propagating spyware. Jump servers are installed in such a way that they are placed between a secure zone and a DMZ to provide transparent management on devices on the DMZ. Jump servers are often used in organizations with private networks to enable secure access to assets and user workstations.

   Source: Adapted from community discussion — sujon_london

   Next question

3. Question 643 · 856 in bank

   Which of the following roles, according to the shared responsibility model, is responsible for securing the company's database in an IaaS model for a cloud environment?

   • AClient
   • BThird-party vendor
   • CCloud provider
   • DOBA

   Show answer

   Answer: A

   Explanation

   Took an AWS exam, and even this certification lists that it is the client's job to securely configure their VPC. They handle physical security, client handles logical.

   Source: Adapted from community discussion — ChopSNap

   Next question

4. Question 644 · 856 in bank

   Which of the following tools can assist with detecting an employee who has accidentally emailed a file containing a customer's PII?

   • ASCAP
   • BNetFlow
   • CAntivirus
   • DDLP

   Show answer

   Answer: D

   Next question

5. Question 645 · 856 in bank

   A bank insists all of its vendors must prevent data loss on stolen laptops. Which of the following strategies is the bank requiring?

   • AEncryption at rest
   • BMasking
   • CData classification
   • DPermission restrictions

   Show answer

   Answer: A

   Explanation

   Encryption at rest will not protect against data loss. None of the other options seem to be able to do the job either. Or am I missing something?

   Source: Adapted from community discussion — fryderyk

   Next question

6. Question 646 · 856 in bank

   After a recent vulnerability scan, a security engineer needs to harden the routers within the corporate network. Which of the following is the most appropriate to disable?

   • AConsole access
   • BRouting protocols
   • CVLANs
   • DWeb-based administration

   Show answer

   Answer: D

   Next question

7. Question 647 · 856 in bank

   A company requires hard drives to be securely wiped before sending decommissioned systems to recycling. Which of the following best describes this policy?

   • AEnumeration
   • BSanitization
   • CDestruction
   • DInventory

   Show answer

   Answer: B

   Explanation

   B. Data sanitization involves purposely, permanently deleting, or destroying data from a storage device, to ensure it cannot be recovered.

   Source: Adapted from community discussion — JT4

   Next question

8. Question 648 · 856 in bank

   An attacker posing as the Chief Executive Officer calls an employee and instructs the employee to buy gift cards. Which of the following techniques is the attacker using?

   • ASmishing
   • BPhishing
   • CImpersonating
   • DVishing

   Show answer

   Answer: D

   Explanation

   While "C. Impersonating" is indeed part of the attacker's actions, it's a more generic term for assuming someone else's identity. In this specific scenario, the attacker is using vishing (voice phishing) to impersonate the Chief Executive Officer (CEO) over the phone, which is a type of social engineering attack where the voice is used to manipulate the employee into buying gift cards. So, "D. Vishing" more accurately describes the specific technique being employed in this situation.

   Source: Adapted from community discussion — DashRyde

   Next question

9. Question 649 · 856 in bank

   Which of the following is a cryptographic concept that operates on a fixed length of bits?

   • ABlock cipher
   • BHashing
   • CKey stretching
   • DSalting

   Show answer

   Answer: A

   Explanation

   A. Block cipher A block cipher is a method of encrypting text (to produce ciphertext) in which a cryptographic key and algorithm are applied to a block of data (for example, 64 contiguous bits) at once as a group rather than to one bit at a time. This is a cryptographic concept that operates on a fixed length of bits, which is called a block.

   Source: Adapted from community discussion — DarexTech100

   Next question

10. Question 650 · 856 in bank

    Select 2

    During the onboarding process, an employee needs to create a password for an intranet account. The password must include ten characters, numbers, and letters, and two special characters. Once the password is created, the company will grant the employee access to other company-owned websites based on the intranet profile. Which of the following access management concepts is the company most likely using to safeguard intranet accounts and grant access to multiple sites based on a user's intranet account? (Choose two.)

    • AFederation
    • BIdentity proofing
    • CPassword complexity
    • DDefault password changes
    • EPassword manager
    • FOpen authentication

    Show answer

    Answer: AC

    Explanation

    The password must include ten characters, numbers, and letters, and two special characters -> It is A grant the employee access to other company-owned websites -> It is C A and C

    Source: Adapted from community discussion — kopeba3998

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 641. 856 questions available.