SY0-601 practice questions 661–670

1. Question 661 · 856 in bank

   The most recent vulnerability scan flagged the domain controller with a critical vulnerability. The systems administrator researched the vulnerability and discovered the domain controller does not run the associated application with the vulnerability. Which of the following steps should the administrator take next?

   • AEnsure the scan engine is configured correctly.
   • BApply a patch to the domain controller.
   • CResearch the CVE.
   • DDocument this as a false positive.

   Show answer

   Answer: D

   Explanation

   Hey guys I passed this exam this week and scored over 800/900 Let's me take a brief: - all 3 PBQ (interact questions) => so learn it carefully - all question in this dump, no new question - with 50/50 question just pick one base on your opinion, you don't need these question to be correct to pass the exam (only 1-2 question / 79 questions with 50/50 chance ?) - review all question at least 2 times and you good to go good luck guys

   Source: Adapted from community discussion — Cisco103

   Next question

2. Question 662 · 856 in bank

   A company has decided to move its operations to the cloud. It wants to utilize technology that will prevent users from downloading company applications for personal use, restrict data that is uploaded, and have visibility into which applications are being used across the company. Which of the following solutions will best meet these requirements?

   • AAn NGFW
   • BA CASB
   • CApplication whitelisting
   • DAn NG-SWG

   Show answer

   Answer: B

   Explanation

   A Cloud Access Security Broker (CASB) would best meet the requirements stated in the scenario. CASBs can provide visibility into which cloud applications are being used across a company, restrict data that is uploaded to the cloud, and prevent unauthorized downloading of company applications for personal use. They act as a gatekeeper, allowing the organization to extend its security policies beyond its own infrastructure. CASBs provide features like visibility, data security, threat protection, and compliance, ensuring secure and only authorized use of cloud services by employees.

   Source: Adapted from community discussion — Only12go

   Next question

3. Question 663 · 856 in bank

   An internet company has created a new collaboration application. To expand the user base, the company wants to implement an option that allows users to log in to the application with the credentials of other popular websites. Which of the following should the company implement?

   • ASSO
   • BCHAP
   • C802.1x
   • DOpenID

   Show answer

   Answer: D

   Explanation

   This is OpenID. It's using sign-in credentials from OTHER popular websites. An example of this would be logging into CompTIA using a google/gmail account. OpenID uses SSO. However, SSO is more broad and I feel OpenID perfectly fits this scenario.

   Source: Adapted from community discussion — TreeeSon

   Next question

4. Question 664 · 856 in bank

   A company is implementing a DLP solution on the file server. The file server has PII, financial information, and health information stored on it. Depending on what type of data that is hosted on the file server, the company wants different DLP rules assigned to the data. Which of the following should the company do to help accomplish this goal?

   • AClassify the data.
   • BMask the data.
   • CAssign the application owner.
   • DPerform a risk analysis.

   Show answer

   Answer: A

   Explanation

   Data classification and typing schemas tag data assets so that they can be managed through the information life cycle. A data classification schema is a decision tree for applying one or more tags or labels to each data asset. Many data classification schemas are based on the degree of confidentiality required: Public (unclassified)—there are no restrictions on viewing the data. Public information presents no risk to an organization if it is disclosed but does present a risk if it is modified or not available. Confidential (secret)—the information is highly sensitive, for viewing only by approved persons within the owner organization, and possibly by trusted third parties under NDA. Critical (top secret)—the information is too valuable to allow any risk of its capture. Viewing is severely restricted.

   Source: Adapted from community discussion — stoneface

   Next question

5. Question 665 · 856 in bank

   Business partners are working on a security mechanism to validate transactions securely. The requirement is for one company to be responsible for deploying a trusted solution that will register and issue artifacts used to sign, encrypt, and decrypt transaction files. Which of the following is the BEST solution to adopt?

   • APKI
   • BBlockchain
   • CSAML
   • DOAuth

   Show answer

   Answer: A

   Explanation

   A. PKI (Public Key Infrastructure) is the best solution to adopt as it provides the means to securely issue, manage, and revoke digital certificates used to verify the identity of users and systems. PKI is commonly used to secure transactions and provide secure communication between entities, making it a suitable solution for the described scenario.

   Source: Adapted from community discussion — ronniehaang

   References

   • Microsoft Learn

   Next question

6. Question 666 · 856 in bank

   Following a prolonged data center outage that affected web-based sales, a company has decided to move its operations to a private cloud solution. The security team has received the following requirements: • There must be visibility into how teams are using cloud-based services. • The company must be able to identify when data related to payment cards is being sent to the cloud. • Data must be available regardless of the end user's geographic location. • Administrators need a single pane-of-glass view into traffic and trends. Which of the following should the security analyst recommend?

   • ACreate firewall rules to restrict traffic to other cloud service providers.
   • BInstall a DLP solution to monitor data in transit.
   • CImplement a CASB solution.
   • DConfigure a web-based content filter.

   Show answer

   Answer: C

   Explanation

   CASB (Cloud Access Security Broker) provides comprehensive visibility and control over cloud-based services. It acts as an intermediary between the user and the cloud provider, enabling the company to monitor and manage cloud usage, identify potential security risks, and enforce data protection policies.

   Source: Adapted from community discussion — aws_queen

   Next question

7. Question 667 · 856 in bank

   A recent malware outbreak across a subnet included successful rootkit installations on many PCs, ensuring persistence by rendering remediation efforts ineffective. Which of the following would best detect the presence of a rootkit in the future?

   • AFDE
   • BNIDS
   • CEDR
   • DDLP

   Show answer

   Answer: C

   Explanation

   Just passed the exam with a score of 800 on 10/28/23. About 90% of the questions are from here. This question is on the exam. I selected EDR

   Source: Adapted from community discussion — JT4

   Next question

8. Question 668 · 856 in bank

   An organization is building a single virtual environment that will host customer applications and data that require availability at all times. The data center that is hosting the environment will provide generator power and ISP services. Which of the following is the best solution to support the organization's requirement?

   • ANIC teaming
   • BCloud backups
   • CA load balancer appliance
   • DUPS

   Show answer

   Answer: D

   Explanation

   This is the only solution that make sense and address the issue! I have no idea why there is a confusion ? It’s electricity issue, no NIC nor Load Balancing have anything to with it! Please do not confuse others who come after you and get it wrong because of your inputs!

   Source: Adapted from community discussion — ComPCertOn

   Next question

9. Question 669 · 856 in bank

   A new company wants to avoid channel interference when building a WLAN. The company needs to know the radio frequency behavior, identify dead zones, and determine the best place for access points. Which of the following should be done first?

   • AConfigure heat maps.
   • BUtilize captive portals.
   • CConduct a site survey.
   • DInstall Wi-Fi analyzers.

   Show answer

   Answer: C

   Explanation

   Just passed the exam with a score of 800 on 10/28/23. About 90% of the questions are from here. This question is on the exam. Selected C

   Source: Adapted from community discussion — JT4

   Next question

10. Question 670 · 856 in bank

    Select 2

    The following IP information was provided to internal auditors to help assess organizational security:

    

    Which of the following tools would most likely be used to perform network reconnaissance and help understand what is accessible to all users? (Choose two.)

    • Aipconfig
    • Bping
    • Cchmod
    • Dnetstat
    • Etraceroute
    • Froute

    Show answer

    Answer: DE

    Explanation

    Options: B & D "The netstat command generates displays that show network status and protocol statistics. You can display the status of TCP and UDP endpoints in table format, routing table information, and interface information. netstat displays various types of network data depending on the command line option selected." " ping is a computer network administration software utility used to test the reachability of a host on an Internet Protocol (IP) network. It is available for virtually all operating systems that have networking capability, including most embedded network administration software."

    Source: Adapted from community discussion — fercho2023

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 661. 856 questions available.