SY0-601 practice questions 771–780

1. Question 771 · 856 in bank

   Which of the following, if compromised, can indirectly impact systems’ availability by imposing inadequate environmental conditions for the hardware to operate properly?

   • ASCADA
   • BTPM
   • CHSM
   • DHVAC

   Show answer

   Answer: D

   Explanation

   D. HVAC HVAC stands for Heating, Ventilation, and Air Conditioning. If compromised, HVAC systems can indirectly impact systems' availability by imposing inadequate environmental conditions for the hardware to operate properly. Data centers and server rooms often rely on proper temperature and humidity control to maintain optimal conditions for the reliable functioning of hardware components.

   Source: Adapted from community discussion — salah112

   Next question

2. Question 772 · 856 in bank

   An audit report showed that a former employee saved the following files to an external USB drive before the employee's termination date: • annual_tax_form.pdf • encrypted_passwords.db • team_picture.jpg • contact_list.db • human_resources.txt Which of the following could the former employee do to potentially compromise corporate credentials?

   • APerform an offline brute-force attack
   • BUse the files to create a rainbow table.
   • CConduct a token replay.
   • DRelease a network dictionary attack.

   Show answer

   Answer: A

   Explanation

   A. Perform an offline brute-force attack The former employee, having obtained files such as "encrypted_passwords.db" and "human_resources.txt," could potentially perform an offline brute-force attack on the encrypted passwords. In an offline brute-force attack, the attacker attempts various combinations of passwords against the encrypted file to discover the original passwords. If the encryption is weak or the passwords are not properly hashed and salted, this type of attack could be successful.

   Source: Adapted from community discussion — salah112

   Next question

3. Question 773 · 856 in bank

   Which of the following best describes a legal hold?

   • AIt occurs during litigation and requires retention of both electronic and physical documents.
   • BIt occurs during a risk assessment and requires retention of risk-related documents.
   • CIt occurs during incident recovery and requires retention of electronic documents.
   • DIt occurs during a business impact analysis and requires retention of documents categorized as personally identifiable information.

   Show answer

   Answer: A

   Explanation

   A. It occurs during litigation and requires retention of both electronic and physical documents. A legal hold is a directive or notice that requires an organization to preserve and retain certain documents and information, both electronic and physical, during the course of litigation or an investigation.

   Source: Adapted from community discussion — Hs1208

   Next question

4. Question 774 · 856 in bank

   A forensics investigator is examining a number of unauthorized payments that were reported on the company's website. Some unusual log entries show users received an email for an unwanted mailing list and clicked on a link to attempt to unsubscribe. One of the users reported the email to the phishing team, and the forwarded email revealed the link to be: <a href="https://www.company.com/payto.do?routing=00001111&acct=22223334&amount=250">Click here to unsubscribe</a> Which of the following will the forensics investigator MOST likely determine has occurred?

   • ASQL injection
   • BBroken authentication
   • CXSS
   • DXSRF

   Show answer

   Answer: D

   Explanation

   XSRF or CSRF is the correct one, let me tell you why? -> using the Process of Elimination, we eliminate A and B, there is no thing to deal with SQL injection and Broken Authentication in this case. -> Only C (XXS) and D (XSRF). Remember about XXS, Cross-site scripting occurs when attackers try to inject JavaScript into the client's website. But D (XSRF), Cross-site-request-forgery, will inject the POST request to change email, address of shipping, or transfer funds. -> Pick D because the link includes: routing=00001111&acct=22223334&amount=250

   Source: Adapted from community discussion — tannuc

   Next question

5. Question 775 · 856 in bank

   Several universities are participating in a collaborative research project and need to share compute and storage resources. Which of the following cloud deployment strategies would BEST meet this need?

   • ACommunity
   • BPrivate
   • CPublic
   • DHybrid

   Show answer

   Answer: A

   Explanation

   In a community cloud deployment model, multiple organizations or entities with common interests share computing and storage resources. It is designed for specific communities of users who have shared concerns or requirements, such as research projects, government agencies, or educational institutions. In this scenario, where several universities are participating in a collaborative research project and need to share compute and storage resources, a community cloud deployment strategy would be the best fit.

   Source: Adapted from community discussion — Protract8593

   Next question

6. Question 776 · 856 in bank

   A company wants to move one of its environments to the cloud. The biggest requirement is to have as much control as possible regarding the environment. Which of the following would most likely satisfy this requirement?

   • ASaaS
   • BIaaS
   • CPaaS
   • DMaaS

   Show answer

   Answer: B

   Explanation

   B. IaaS (Infrastructure as a Service) IaaS (Infrastructure as a Service) provides the highest level of control over the environment among the given options. With IaaS, the company gets access to virtualized computing resources, such as virtual machines, storage, and networks. The company has control over the operating system, applications, and configurations, allowing for greater customization and flexibility.

   Source: Adapted from community discussion — salah112

   Next question

7. Question 777 · 856 in bank

   A penetration test revealed that several Linux servers were misconfigured at the file level and access was granted incorrectly. A security analyst is referencing the instructions in the incident response runbook for remediation information. Which of the following is the best command to use to resolve the issue?

   • Achmod
   • Bcat
   • Cgrep
   • Ddig

   Show answer

   Answer: A

   Explanation

   chmod: "chmod" stands for "change mode" and is used in Unix and Unix-like operating systems to change the access permissions of files and directories. cat: "cat" is short for "concatenate" and is used to display the contents of files in the terminal. It can also be used to concatenate files and create new ones. grep: "grep" stands for "global regular expression print" and is used to search text or files for patterns using regular expressions. It is commonly used to extract specific lines from files that match certain criteria. dig: "dig" is a command-line tool used for querying DNS (Domain Name System) servers to retrieve DNS information such as IP addresses, domain names, and name servers. It's commonly used for troubleshooting DNS-related issues.

   Source: Adapted from community discussion — AspiringNerd

   Next question

8. Question 778 · 856 in bank

   Which of the following is the most important security concern when using legacy systems to provide production service?

   • AInstability
   • BLack of vendor support
   • CLoss of availability
   • DUse of insecure protocols

   Show answer

   Answer: B

   Explanation

   B. Lack of vendor support The most important security concern when using legacy systems to provide production services is often the lack of vendor support. Legacy systems, especially those that are no longer supported by vendors, may not receive security updates, patches, or bug fixes. This leaves them vulnerable to known security vulnerabilities that could be exploited by attackers

   Source: Adapted from community discussion — salah112

   Next question

9. Question 779 · 856 in bank

   Which of the following would best enable a systems administrator to easily determine which devices are located at a remote facility and allow policy to be pushed to only those devices?

   • ABaseline configurations
   • BNetwork diagrams
   • CStandard naming conventions
   • DHot sites

   Show answer

   Answer: C

   Next question

10. Question 780 · 856 in bank

    A company is utilizing an offshore team to help support the finance department. The company wants to keep the data secure by keeping it on a company device but does not want to provide equipment to the offshore team. Which of the following should the company implement to meet this requirement?

    • AVDI
    • BMDM
    • CVPN
    • DVPC

    Show answer

    Answer: A

    Explanation

    A. VDI (Virtual Desktop Infrastructure) To meet the requirement of keeping the data secure on company devices without providing equipment to the offshore team, the company should implement Virtual Desktop Infrastructure (VDI). VDI allows users to access virtualized desktop environments hosted on central servers. With VDI: Secure Data on Company Devices: Centralized Control: Access from Anywhere

    Source: Adapted from community discussion — Hs1208

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 771. 856 questions available.