SY0-601 practice questions 711–720

1. Question 711 · 856 in bank

   A company wants to reconfigure an existing wireless infrastructure. The company needs to ensure the projected WAP placement will provide proper signal strength to all workstations. Which of the following should the company use to best fulfill the requirements?

   • ANetwork diagram
   • BWPS
   • C802.1X
   • DHeat map

   Show answer

   Answer: D

   Explanation

   D. Heat map. A heat map provides a visual representation of signal strength and coverage areas within a wireless network environment. By conducting a site survey and generating a heat map, the company can identify potential dead zones or areas with weak signal strength, allowing them to adjust the placement of wireless access points (WAPs) for optimal coverage and performance. This ensures that all workstations receive adequate signal strength for reliable connectivity.

   Source: Adapted from community discussion — shady23

   Next question

2. Question 712 · 856 in bank

   A company wants to pragmatically grant access to users who have the same job. Which of the following access controls should the company most likely use?

   • ARole-based
   • BNeed-to-know
   • CMandatory
   • DDiscretionary

   Show answer

   Answer: A

   Explanation

   Role-based access control, or RBAC, is a much broader form of control that’s based on your particular role in the organization. You might be a director or a team lead or a manager, and the type of access you have to an object is going to depend on that role. With role-based access control, the administrator determines what type of access a user has. But this is also an implicit type of right. For example, if the administer provides access to the managers, and the directors happened to be in the manager group, then the directors will also gain those rights. - https://www.professormesser.com/security-plus/sy0-501/access-control-models/

   Source: Adapted from community discussion — Day0

   Next question

3. Question 713 · 856 in bank

   A security engineer is working to address the growing risks that shadow IT services are introducing to the organization. The organization has taken a cloud-first approach and does not have an on-premises IT infrastructure. Which of the following would best secure the organization?

   • AUpgrading to a next-generation firewall
   • BDeploying an appropriate in-line CASB solution
   • CConducting user training on software policies
   • DConfiguring double key encryption in SaaS platforms

   Show answer

   Answer: B

   Explanation

   B. Deploying an appropriate in-line CASB solution To address the risks associated with shadow IT services in a cloud-first environment, deploying a Cloud Access Security Broker (CASB) solution is a suitable approach. CASB solutions provide visibility and control over the use of cloud services, helping organizations monitor and manage the use of cloud applications to ensure compliance and security.

   Source: Adapted from community discussion — salah112

   Next question

4. Question 714 · 856 in bank

   An enterprise has hired an outside security firm to conduct penetration testing on its network and applications. The firm has been given all the developer’s documentation about the internal architecture. Which of the following best represents the type of testing that will occur?

   • ABug bounty
   • BWhite-box
   • CBlack-box
   • DGray-box

   Show answer

   Answer: B

   Explanation

   white box penetration testing also known as clear box testing or transparent box testing, is a security testing approach where the tester has complete knowledge of the internal workings of the system being tested. In white box testing, the tester has access to detailed information about the architecture, design, source code, and implementation of the application or system.

   Source: Adapted from community discussion — chimz2002

   Next question

5. Question 715 · 856 in bank

   Select 2

   Which of the following are the most likely vectors for the unauthorized or unintentional inclusion of vulnerable code in a software company’s final software releases? (Choose two).

   • ACertificate mismatch
   • BUse of penetration-testing utilities
   • CWeak passwords
   • DIncluded third-party libraries
   • EVendors/supply chain
   • FOutdated anti-malware software

   Show answer

   Answer: DE

   Explanation

   The most likely vectors for the unauthorized or unintentional inclusion of vulnerable code in a software company’s final software releases are D. Included third-party libraries and E. Vendors/supply chain1. Included third-party libraries: These can introduce vulnerabilities if they are not properly vetted or if they are not kept up-to-date. A third-party library might have known vulnerabilities that can be exploited by an attacker. Vendors/supply chain: If a software company includes code from vendors or other parts of the supply chain, there’s a risk that this code could introduce vulnerabilities. This is especially true if the vendors themselves do not have robust security practices.

   Source: Adapted from community discussion — Petercx

   Next question

6. Question 716 · 856 in bank

   A hosting provider needs to prove that its security controls have been in place over the last six months and have sufficiently protected customer data. Which of the following would provide the best proof that the hosting provider has met the requirements?

   • ANIST CSF
   • BSOC 2 Type 2 report
   • CCIS Top 20 compliance reports
   • DVulnerability report

   Show answer

   Answer: B

   Explanation

   • SOC 2 - Trust Services Criteria (security controls) – Firewalls, intrusion detection, and multi-factor authentication • Type I audit – Tests controls in place at a particular point in time • Type II – Tests controls over a period of at least six consecutive months

   Source: Adapted from community discussion — Gary_986

   Next question

7. Question 717 · 856 in bank

   Select 2

   Which of the following are common VoIP-associated vulnerabilities? (Choose two).

   • ASPIM
   • BVishing
   • CVLAN hopping
   • DPhishing
   • EDHCP snooping
   • FTailgating

   Show answer

   Answer: AB

   Explanation

   Vishing SPIM (Spam over Internet Messaging) poses a threat to VoIP systems by consuming bandwidth, diverting resources, and potentially causing denial of service attacks. The influx of SPIM messages can degrade the quality of VoIP calls, overload servers, and serve as a platform for social engineering attacks, jeopardizing the security of VoIP users. To mitigate these risks, organizations should implement spam filters, intrusion detection systems, and regular software updates while also educating users to recognize and avoid potential threats associated with SPIM.

   Source: Adapted from community discussion — wakkaking14

   Next question

8. Question 718 · 856 in bank

   A security administrator received an alert for a user account with the following log activity:

   

   Which of the following best describes the trigger for the alert the administrator received?

   • ANumber of failed log-in attempts
   • BGeolocation
   • CImpossible travel time
   • DTime-based log-in attempt

   Show answer

   Answer: C

   Explanation

   I think it should be impossible travel time. If you look at time column, it shows that user accessed the system from the US and 4 min later they accessed it from Austria which is impossible. Impossible Travel Time: This is a security feature used by cloud providers such as Microsof with their Ofce 365 package to prevent fraud. If a person is located in Toronto and then 30 minutes later is deemed to be in Las Vegas, their attempt to log in will be blocked.

   Source: Adapted from community discussion — ProdamGarazh

   Next question

9. Question 719 · 856 in bank

   Certain users are reporting their accounts are being used to send unauthorized emails and conduct suspicious activities. After further investigation, a security analyst notices the following: ✑ All users share workstations throughout the day. ✑ Endpoint protection was disabled on several workstations throughout the network. ✑ Travel times on logins from the affected users are impossible. ✑ Sensitive data is being uploaded to external sites. All user account passwords were forced to be reset and the issue continued.

   

   Which of the following attacks is being used to compromise the user accounts?

   • ABrute-force
   • BKeylogger
   • CDictionary
   • DRainbow

   Show answer

   Answer: B

   Explanation

   A Keylogger would be the reason of why even after resetting the passwords the issue persisted. There is no information about the password itself that would allows to determine if any brute force attack method is being used

   Source: Adapted from community discussion — stoneface

   Next question

10. Question 720 · 856 in bank

    Which of the following is a reason why a forensic specialist would create a plan to preserve data after an incident and prioritize the sequence for performing forensic analysis?

    • AOrder of volatility
    • BPreservation of event logs
    • CChain of custody
    • DCompliance with legal hold

    Show answer

    Answer: A

    Explanation

    The reason why a forensic specialist would create a plan to preserve data after an incident and prioritize the sequence for performing forensic analysis is A. Order of volatility. The order of volatility refers to the sequence in which data should be collected in a digital forensic investigation, starting with the most volatile (i.e., data that changes quickly or gets lost easily, like system memory) and moving to the least volatile (i.e., data that persists longer, like hard drive data). This is crucial because some evidence might be lost if not collected in a timely manner.

    Source: Adapted from community discussion — Petercx

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 711. 856 questions available.