SY0-601 practice questions 791–800

1. Question 791 · 856 in bank

   A software developer would like to ensure the source code cannot be reverse engineered or debugged. Which of the following should the developer consider?

   • AVersion control
   • BObfuscation toolkit
   • CCode reuse
   • DContinuous integration
   • EStored procedures

   Show answer

   Answer: B

   Explanation

   B. Obfuscation toolkit To make the source code resistant to reverse engineering and debugging, a software developer should consider using an obfuscation toolkit. Code obfuscation involves transforming the source code in a way that makes it difficult for humans to understand while still preserving its functionality. This can deter reverse engineering efforts by making it challenging to analyze and comprehend the code logic.

   Source: Adapted from community discussion — salah112

   Next question

2. Question 792 · 856 in bank

   Which of the following is the most effective way to protect an application server running software that is no longer supported from network threats?

   • AAir gap
   • BBarricade
   • CPort security
   • DScreened subnet

   Show answer

   Answer: D

   Explanation

   One of the most effective ways to protect an application server is to use a screened subnet. A screened subnet is a network segment that is isolated from both the internet and the internal network by two firewalls. The application server is placed in the screened subnet, also known as the demilitarized zone (DMZ), and only the necessary ports are opened for communication. This way, the application server is shielded from external attacks and internal breaches, and the impact of a compromise is minimized.

   Source: Adapted from community discussion — johnabayot

   Next question

3. Question 793 · 856 in bank

   A growing company would like to enhance the ability of its security operations center to detect threats but reduce the amount of manual work required for the security analysts. Which of the following would best enable the reduction in manual work?

   • ASOAR
   • BSIEM
   • CMDM
   • DDLP

   Show answer

   Answer: A

   Explanation

   SIEM systems are related with log aggregation and correlation from various sources. SOAR provides automation tools which are going to reduce the amount of manual work for the analysts.

   Source: Adapted from community discussion — 6de42b3

   Next question

4. Question 794 · 856 in bank

   Which of the following can a security director use to prioritize vulnerability patching within a company's IT environment?

   • ASOAR
   • BCVSS
   • CSIEM
   • DCVE

   Show answer

   Answer: B

   Explanation

   B. CVSS The Common Vulnerability Scoring System (CVSS) is a framework that provides a standardized method for assessing and prioritizing vulnerabilities. It assigns a score to each vulnerability based on various factors such as the impact, exploitability, and complexity of the attack. The CVSS score helps security professionals, including a security director, to prioritize which vulnerabilities should be addressed first.

   Source: Adapted from community discussion — salah112

   Next question

5. Question 795 · 856 in bank

   The Chief Information Security Officer wants to put security measures in place to protect PH. The organization needs to use its existing labeling and classification system to accomplish this goal. Which of the following would most likely be configured to meet the requirements?

   • ATokenization
   • BS/MIME
   • CDLP
   • DMFA

   Show answer

   Answer: C

   Explanation

   I think that the PH is an error and is supposed to be PHI. DLP prevents people from sending information about PII and PHI and pretects againts data loss. i can see any of the other question fitting.

   Source: Adapted from community discussion — [Removed]

   Next question

6. Question 796 · 856 in bank

   A company wants to get alerts when others are researching and doing reconnaissance on the company. One approach would be to host a part of the infrastructure online with known vulnerabilities that would appear to be company assets. Which of the following describes this approach?

   • AWatering hole
   • BBug bounty
   • CDNS sinkhole
   • DHoneypot

   Show answer

   Answer: D

   Explanation

   A honeypot is a decoy system or network designed to attract and detect attackers. It is intentionally set up with vulnerabilities to entice attackers into engaging with it.

   Source: Adapted from community discussion — Hs1208

   Next question

7. Question 797 · 856 in bank

   Multiple business accounts were compromised a few days after a public website had its credentials database leaked on the Internet. No business emails were identified in the breach, but the security team thinks that the list of passwords exposed was later used to compromise business accounts. Which of the following would mitigate the issue?

   • AComplexity requirements
   • BPassword history
   • CAcceptable use policy
   • DShared accounts

   Show answer

   Answer: B

   Explanation

   Password reuse is an important concern in any organization. Many users want to reuse the same password for their account over a long period of time.

   Source: Adapted from community discussion — stoneface

   Next question

8. Question 798 · 856 in bank

   Which of the following is the final step of the incident response process?

   • ALessons learned
   • BEradication
   • CContainment
   • DRecovery

   Show answer

   Answer: A

   Explanation

   A. Lessons learned The final step in the incident response process is typically "Lessons learned." This phase involves a comprehensive review and analysis of the incident to identify what went well, what could be improved, and what lessons can be drawn to enhance the organization's overall security posture. The objective is to learn from the incident and use that knowledge to strengthen preventive and responsive measures for the future.

   Source: Adapted from community discussion — salah112

   Next question

9. Question 799 · 856 in bank

   A systems administrator is redesigning how devices will perform network authentication. The following requirements need to be met: • An existing internal certificate must be used. • Wired and wireless networks must be supported. • Any unapproved device should be isolated in a quarantine subnet. • Approved devices should be updated before accessing resources. Which of the following would best meet the requirements?

   • A802.1X
   • BEAP
   • CRADIUS
   • DWPA2

   Show answer

   Answer: A

   Explanation

   A. 802.1X 802.1X can provide the foundation for network authentication, allowing devices to authenticate themselves before gaining access to the network. When used in conjunction with a robust NAC solution, it can also facilitate device isolation and update mechanisms to meet the specified requirements.

   Source: Adapted from community discussion — AspiringNerd

   Next question

10. Question 800 · 856 in bank

    An IT security team is concerned about the confidentiality of documents left unattended in MFPs. Which of the following should the security team do to mitigate the situation?

    • AEducate users about the importance of paper shredder devices.
    • BDeploy an authentication factor that requires in-person action before printing.
    • CInstall a software client in every computer authorized to use the MFPs.
    • DUpdate the management software to utilize encryption.

    Show answer

    Answer: B

    Explanation

    B. Deploy an authentication factor that requires in-person action before printing. To mitigate the concern about the confidentiality of documents left unattended in Multi-Function Printers (MFPs), deploying an authentication factor that requires in-person action before printing is a recommended security measure. This can be achieved through various means, such as requiring users to physically authenticate themselves at the MFP using a smart card, PIN, or biometric authentication before the documents are printed.

    Source: Adapted from community discussion — salah112

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 791. 856 questions available.