SY0-601 practice questions 671–680

1. Question 671 · 856 in bank

   A software company adopted the following processes before releasing software to production: • Peer review • Static code scanning • Signing A considerable number of vulnerabilities are still being detected when code is executed on production. Which of the following security tools can improve vulnerability detection on this environment?

   • AFile integrity monitoring for the source code
   • BDynamic code analysis tool
   • CEncrypted code repository
   • DEndpoint detection and response solution

   Show answer

   Answer: B

   Explanation

   If vulnerabilities are being detected when code is executed in production, it indicates that the issues arise during runtime. To improve vulnerability detection in such an environment, the best choice would be: B. Dynamic code analysis tool

   Source: Adapted from community discussion — BlackSpider

   Next question

2. Question 672 · 856 in bank

   A security analyst needs to harden access to a network. One of the requirements is to authenticate users with smart cards. Which of the following should the analyst enable to best meet this requirement?

   • ACHAP
   • BPEAP
   • CMS-CHAPv2
   • DEAP-TLS

   Show answer

   Answer: D

   Explanation

   D. EAP-TLS (Extensible Authentication Protocol - Transport Layer Security) EAP-TLS is a strong and secure authentication method that involves the use of digital certificates, typically stored on smart cards, for user authentication. It requires the user to present a valid certificate, which is verified by the authentication server, providing a high level of security.

   Source: Adapted from community discussion — DarexTech100

   Next question

3. Question 673 · 856 in bank

   A penetration-testing firm is working with a local community bank to create a proposal that best fits the needs of the bank. The bank's information security manager would like the penetration test to resemble a real attack scenario, but it cannot afford the hours required by the penetration-testing firm. Which of the following would best address the bank's desired scenario and budget?

   • AEngage the penetration-testing firm's rea-team services to fully mimic possible attackers.
   • BGive the penetration tester data diagrams of core banking applications in a known-environment test.
   • CLimit the scope of the penetration test to only the system that is used for teller workstations.
   • DProvide limited networking details in a partially known-environment test to reduce reconnaissance efforts.

   Show answer

   Answer: D

   Explanation

   If the bank desires a realistic attack scenario but has budget constraints, the best approach would be to reduce the time and effort the penetration testers would spend on the initial phases of an attack, such as reconnaissance. Therefore, the best option is: D. Provide limited networking details in a partially known-environment test to reduce reconnaissance efforts. By doing this, the bank is cutting down the time spent on initial information gathering, allowing the penetration testers to focus more on the actual testing and exploitation phases, thereby providing a realistic scenario within the bank's budget.

   Source: Adapted from community discussion — BlackSpider

   Next question

4. Question 674 · 856 in bank

   A security analyst is reviewing SIEM logs during an ongoing attack and notices the following:

   

   Which of the following best describes the type of attack?

   • ASQLi
   • BCSRF
   • CAPI attacks
   • DDirectory traversal

   Show answer

   Answer: D

   Explanation

   23 APR 2024 I took my exam and i passed with 776, this question was on my exam this website was very helpful, study it and understood the answer. GL.

   Source: Adapted from community discussion — Abdulaa

   Next question

5. Question 675 · 856 in bank

   A certificate vendor notified a company that recently invalidated certificates may need to be updated. Which of the following mechanisms should a security administrator use to determine whether the certificates installed on the company's machines need to be updated?

   • ASCEP
   • BOCSP
   • CCSR
   • DCRL

   Show answer

   Answer: B

   Explanation

   Yet again I don't like the context of the question, however I am inclined to go with OCSP. CRL's are certainly more efficient when bandwidth is being considered, as OCSP can generate lots of traffic. So why not CRL? In these situations where I'm initially 50/50 and am forced to make an inference, I try to ask myself what the exam authors are attempting to test us on. In the question, it specifically mentions that the certificates are "recently" invalidated. Wth does recently mean? The CRL could be updated every 24 hours, but if "recently" means they were officially invalidated 2 hours ago, then the CRL is useless. Bandwidth and network concerns are not mentioned at all in the question stem, so even though everyone is making great points about benefits of CRL, I submit that the relevant piece of information is the indication of wanting real-time results. Hence, OCSP

   Source: Adapted from community discussion — slapster

   Next question

6. Question 676 · 856 in bank

   A security analyst has been asked by the Chief Information Security Officer to: ✑ develop a secure method of providing centralized management of infrastructure ✑ reduce the need to constantly replace aging end user machines ✑ provide a consistent user desktop experience Which of the following BEST meets these requirements?

   • ABYOD
   • BMobile device management
   • CVDI
   • DContainerization

   Show answer

   Answer: C

   Explanation

   VDI is a technology that allows users to access a virtualized desktop environment hosted on a centralized server. It provides a secure method of centrally managing infrastructure because all virtual desktops are hosted and managed from a centralized location, making it easier to apply security policies and updates uniformly. VDI also reduces the need to constantly replace aging end-user machines since the virtual desktops can be accessed from various devices, including older machines with less processing power and resources. Users can access their virtual desktops from different devices without the need for extensive hardware upgrades. Additionally, VDI provides a consistent user desktop experience since users are interacting with a standardized virtual desktop environment that remains consistent across different devices. This allows for a seamless user experience regardless of the device they use to access their virtual desktop. In summary, VDI is the best option that meets the requirements of providing centralized management of infrastructure, reducing the need to replace aging end-user machines, and providing a consistent user desktop experience.

   Source: Adapted from community discussion — Protract8593

   Next question

7. Question 677 · 856 in bank

   A recent vulnerability scan revealed multiple servers have non-standard ports open for applications that are no longer in use. The security team is working to ensure all devices are patched and hardened. Which of the following would the security team perform to ensure the task is completed with minimal impact to production?

   • AEnable HIDS on all servers and endpoints.
   • BDisable unnecessary services.
   • CConfigure the deny list appropriately on the NGFW.
   • DEnsure the antivirus is up to date.

   Show answer

   Answer: B

   Explanation

   My 5c here from a networking perspective The task is to harden endpoints A deny list on a FW is not hardening endpoints so that's out Of the choices left, enabling a HIDS is not really going to harden the endpoint, its essentially just detection and logging / alerting AV would definitely harden the system but still doesn't complete the task of closing the unused ports IMO Using the vulnerability scan results and list of apps no longer in use you can disable the unnecessary services which will stop the endpoints from listening on non-standard ports. I feel B fits best here as it actually addresses the result of the scan and would most likely also be the recommendation in the scan too.

   Source: Adapted from community discussion — Rowdy_47

   Next question

8. Question 678 · 856 in bank

   An employee fell for a phishing scam, which allowed an attacker to gain access to a company PC. The attacker scraped the PC's memory to find other credentials. Without cracking these credentials, the attacker used them to move laterally through the corporate network. Which of the following describes this type of attack?

   • APrivilege escalation
   • BBuffer overflow
   • CSQL injection
   • DPass-the-hash

   Show answer

   Answer: D

   Explanation

   They definitely got me with this one, I was thinking A at first because of the words they chose. it is MOST DEFINITELY D. Because of the fact that they didn't go up in escalation via accounts, they just went lateral, WITHOUT BREAKING HASHES. Cmon LayinCable, pay attention man. Learn from me guys.

   Source: Adapted from community discussion — LayinCable

   Next question

9. Question 679 · 856 in bank

   Which of the following is a common source of unintentional corporate credential leakage in cloud environments?

   • ACode repositories
   • BDark web
   • CThreat feeds
   • DState actors
   • EVulnerability databases

   Show answer

   Answer: A

   Explanation

   A. Code repositories Commonly, unintentional corporate credential leakage in cloud environments can occur through code repositories. Developers and teams often store code, configuration files, and other sensitive information in repositories like GitHub, Bitbucket, or GitLab. If these repositories are not properly secured or if sensitive data is inadvertently included in code commits, it can lead to credential exposure. Attackers might search public repositories for such information, potentially gaining unauthorized access to corporate resources. The other options (B. Dark web, C. Threat feeds, D. State actors, E. Vulnerability databases) are not typically sources of unintentional corporate credential leakage but rather relate to different aspects of cybersecurity, threat intelligence, and actors involved in cyberattacks.

   Source: Adapted from community discussion — predsednik

   Next question

10. Question 680 · 856 in bank

    Select 2

    A company is designing the layout of a new data center so it will have an optimal environmental temperature. Which of the following must be included? (Choose two.)

    • AAn air gap
    • BA cold aisle
    • CRemovable doors
    • DA hot aisle
    • EAn IoT thermostat
    • FA humidity monitor

    Show answer

    Answer: BD

    Explanation

    B. A cold aisle: Cold aisles are typically positioned in front of equipment racks, with the racks facing into the aisle. This design ensures that cold air from the air conditioning units is drawn directly into the front of the equipment, ensuring efficient cooling. D. A hot aisle: Hot aisles are positioned behind equipment racks. Equipment is oriented so that exhaust fans blow hot air from the equipment directly into these aisles. The hot air in these aisles is then typically extracted and cooled down, often being recycled back to the cold aisles. Using a combination of cold aisles and hot aisles ensures that equipment is efficiently cooled, and hot air is effectively managed, maintaining an optimal temperature environment for the data center. The other options, while they might be relevant in some data center designs, are not as critical as the cold and hot aisle configurations for ensuring optimal environmental temperature.

    Source: Adapted from community discussion — BlackSpider

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 671. 856 questions available.