SY0-601 practice questions 751–760

1. Question 751 · 856 in bank

   A company needs to keep the fewest records possible, meet compliance needs, and ensure destruction of records that are no longer needed. Which of the following best describes the policy that meets these requirements?

   • ASecurity policy
   • BClassification policy
   • CRetention policy
   • DAccess control policy

   Show answer

   Answer: C

   Explanation

   C. Retention policy A retention policy is designed to specify the duration for which records or data should be retained and the procedures for their disposal when they are no longer needed.

   Source: Adapted from community discussion — Hs1208

   Next question

2. Question 752 · 856 in bank

   After a recent security breach, a security analyst reports that several administrative usernames and passwords are being sent via cleartext across the network to access network devices over port 23. Which of the following should be implemented so all credentials sent over the network are encrypted when remotely accessing and configuring network devices?

   • ASSH
   • BSNMPv3
   • CSFTP
   • DTelnet
   • EFTP

   Show answer

   Answer: A

   Explanation

   Answer: SSH (22) Port 23 (Telnet) and Port 22 (SSH) are network protocols used to remotely access and manage systems however telnet does not encrypt the connection so captured traffic appears in cleartext whereas an ssh connection would be encrypted. ========================= SNMP (Simple Network Management Protocol) - is a protocol for collecting and organizing information about managed devices on networks. Devices that typically support SNMP include servers/desktops, routers, switches, etc. SFTP (Secure File Transfer Protocol) is a secure file transfer protocol that uses SSH encryption to securely sending and receiving file transfers. FTP (File Transfer Protocol) - For file transfers

   Source: Adapted from community discussion — rodwave

   Next question

3. Question 753 · 856 in bank

   A systems administrator is considering switching from tape backup to an alternative backup solution that would allow data to be readily available in the event of a disaster. Which of the following backup types should the administrator implement?

   • ACopy
   • BIncremental
   • CCloud
   • DDisk
   • EStorage area network

   Show answer

   Answer: C

   Explanation

   Guys, just a suggestion by someone is working on that. If the question state "Tape", you must know that they mentions as a "secondary" copy because tape are used at 99% for this kind of job. Disk is the first method and where the first copy of the backup goes. Cloud is the right one.

   Source: Adapted from community discussion — qwes333

   Next question

4. Question 754 · 856 in bank

   A web application for a bank displays the following output when showing details about a customer's bank account:

   

   Which of the following techniques is most likely implemented in this web application?

   • AData minimization
   • BData scrambling
   • CData masking
   • DAnonymization

   Show answer

   Answer: C

   Explanation

   You literary mixed it up. Masking replaces actual letters with asterisk (e.g. John Smith Doe becomes J*** S**** D**). Data Anonymization totally removes PII from data sets, so the subject of the data remains anonymous (e.g. John Smith Doe, in a record, would be replaced with something totally unrelated, like Buster Crow Applegate).

   Source: Adapted from community discussion — Yomzie

   Next question

5. Question 755 · 856 in bank

   Select 2

   The security team installed video cameras in a prominent location in the building lobby. Which of the following best describe this type of control? (Choose two.)

   • ATechnical
   • BDetective
   • CDeterrent
   • DManagerial
   • ECompensating
   • FCorrective

   Show answer

   Answer: BC

   Explanation

   C. Deterrent B. Detective Explanation: -Deterrent controls are designed to discourage potential intruders or wrongdoers from committing unlawful acts by creating a visible deterrent. In this case, the presence of video cameras in a prominent location serves as a deterrent to discourage unauthorized behavior. -Detective controls are designed to identify and detect security incidents or violations after they have occurred. Video cameras serve as detective controls by recording footage that can be reviewed in case of security incidents or suspicious activities.

   Source: Adapted from community discussion — russian

   Next question

6. Question 756 · 856 in bank

   Which of the following is best to use when determining the severity of a vulnerability?

   • ACVE
   • BOSINT
   • CSOAR
   • DCVSS

   Show answer

   Answer: D

   Explanation

   23 APR 2024 I took my exam and passed this question was on my exam this website was very helpful, study it and understood the answer. GL.

   Source: Adapted from community discussion — Abdulaa

   Next question

7. Question 757 · 856 in bank

   Which of the following best describes an environment where a business owns the application and operating system but requires the resources to host them in the cloud?

   • AIaaS
   • BXaaS
   • CPaaS
   • DSaaS

   Show answer

   Answer: A

   Explanation

   A. IaaS The scenario described, where a business owns the application and operating system but requires the resources to host them in the cloud, is best represented by Infrastructure as a Service (IaaS). IaaS provides virtualized computing resources over the internet, including virtual machines, storage, and networking. In this model, the business retains control over the applications, operating systems, and data while outsourcing the underlying infrastructure to a cloud service provider.

   Source: Adapted from community discussion — salah112

   Next question

8. Question 758 · 856 in bank

   An organization wants to minimize the recovery time from backups in case of a disaster. Backups must be retained for one month, while minimizing the storage space used for backups. Which of the following is the best approach for a backup strategy?

   • AFull monthly, incremental daily, and differential weekly
   • BFull weekly and incremental daily
   • CFull weekly and differential daily
   • DFull daily

   Show answer

   Answer: C

   Explanation

   The best approach for a backup strategy is C. Full weekly and differential daily. This option will minimize the recovery time, as you only need to restore the latest the latest full backup and latest differential backup to get the most recent data. It will also minimize the storage space, as differential backups only store the changes made since the last full backup, unlike incremental backups that store the changes made since the last backup of any type.

   Source: Adapted from community discussion — johnabayot

   Next question

9. Question 759 · 856 in bank

   An incident analyst finds several image files on a hard disk. The image files may contain geolocation coordinates. Which of the following best describes the type of information the analyst is trying to extract from the image files?

   • ALog data
   • BMetadata
   • CEncrypted data
   • DSensitive data

   Show answer

   Answer: B

   Explanation

   B. Metadata In the case of image files, metadata may include various details such as the camera model, date and time the photo was taken, and geolocation coordinates (latitude and longitude) if the camera supports GPS.

   Source: Adapted from community discussion — Hs1208

   Next question

10. Question 760 · 856 in bank

    A company uses a SaaS vendor to host its customer database. The company would like to reduce the risk of customer data exposure if the systems are breached. Which of the following risks should the company focus on to achieve this objective?

    • AAccess auditing
    • BOutsourced code development
    • CSupply chain
    • DOpen ports and services

    Show answer

    Answer: A

    Explanation

    Access auditing involves monitoring and recording user activities for abnormal access patterns or policy violations. Regular audits can help identify unauthorized access attempts, ensure users only have appropriate permissions, and verify compliance with company policies. This is particularly important when dealing with a SaaS vendor, as the vendor has direct access to the company’s customer database. Regular access audits can help ensure that the vendor is following proper security protocols and not exposing sensitive customer data.

    Source: Adapted from community discussion — Jay987654

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 751. 856 questions available.