SY0-601 practice questions 811–820

1. Question 811 · 856 in bank

   A security administrator needs to publish multiple application URLs that will run on different internal web servers but use only one external IP address. Which of the following is the best way for the administrator to achieve this goal?

   • AJump server
   • BReverse proxy
   • CMAC filtering
   • DSource NAT

   Show answer

   Answer: B

   Explanation

   B. Reverse Proxy My first question to this question was why would they want to do that? So I investigated and these are some of the examples I found for why: A reverse proxy can be used to protect a website because the websites IP addresses are hidden behind the reverse proxy and are not revealed to clients. This makes it much harder to target a DDoS attack against a website. A reverse proxy is also used for load balancing. A popular website handling millions of users every day is unlikely to be able to handle the traffic with a single server. A reverse proxy can balance a large amount of incoming requests by distributing the traffic to a large pool of web servers, and effectively preventing any single one of them from becoming overloaded. Services like cloudflare put reverse proxy servers in hundred of locations all around the world. This puts the reverse proxy close to the users and at the same time provides a large amount of processing capacity

   Source: Adapted from community discussion — 7308365

   Next question

2. Question 812 · 856 in bank

   Which of the following is the first step to take when creating an anomaly detection process?

   • ASelecting events
   • BBuilding a baseline
   • CSelecting logging options
   • DCreating an event log

   Show answer

   Answer: B

   Explanation

   B. Building a baseline The first step in creating an anomaly detection process is typically building a baseline. A baseline is a reference point that represents normal behavior within a system or network. By establishing what is considered normal, it becomes possible to identify deviations or anomalies when they occur.

   Source: Adapted from community discussion — salah112

   Next question

3. Question 813 · 856 in bank

   When a newly developed application was tested, a specific internal resource was unable to be accessed. Which of the following should be done to ensure the application works correctly?

   • AModify the allow/deny list for those specific resources.
   • BFollow the secure coding practices for the internal resource.
   • CConfigure the application in a sandbox environment.
   • DUtilize standard network protocols.

   Show answer

   Answer: A

   Explanation

   " was unable to be accessed" Does that imply the application was denied access? There could be a ton of other reasons the application could not access the internal resource. Terrible question.

   Source: Adapted from community discussion — fryderyk

   Next question

4. Question 814 · 856 in bank

   Which of the following best describes why the SMS OTP authentication method is more risky to implement than the TOTP method?

   • AThe SMS OTP method requires an end user to have an active mobile telephone service and SIM card.
   • BGenerally, SMS OTP codes are valid for up to 15 minutes, while the TOTP time frame is 30 to 60 seconds.
   • CThe SMS OTP is more likely to be intercepted and lead to unauthorized disclosure of the code than the TOTP method.
   • DThe algorithm used to generate an SMS OTP code is weaker than the one used to generate a TOTP code.

   Show answer

   Answer: C

   Explanation

   C. The SMS OTP is more likely to be intercepted and lead to unauthorized disclosure of the code than the TOTP method. The main reason why the SMS OTP (One-Time Password) method is considered more risky compared to the TOTP (Time-Based One-Time Password) method is that SMS messages can be intercepted more easily. SMS messages can be vulnerable to interception through various methods, such as SIM swapping, man-in-the-middle attacks, or by exploiting vulnerabilities in the mobile network.

   Source: Adapted from community discussion — salah112

   Next question

5. Question 815 · 856 in bank

   Select 2

   A security manager is implementing MFA and patch management. Which of the following would best describe the control type and category? (Choose two.)

   • APhysical
   • BManagerial
   • CDetective
   • DAdministrative
   • EPreventative
   • FTechnical

   Show answer

   Answer: EF

   Explanation

   Why its not Managerial: "Managerial controls involve policies, procedures, and guidelines established by management to guide the organization's operations and activities. While managerial controls play a role in implementing and enforcing security measures, they are not specifically related to MFA or patch management in this context."

   Source: Adapted from community discussion — cannon

   Next question

6. Question 816 · 856 in bank

   A security analyst is creating baselines for the server team to follow when hardening new devices for deployment. Which of the following best describes what the analyst is creating?

   • AChange management procedure
   • BInformation security policy
   • CCybersecurity framework
   • DSecure configuration guide

   Show answer

   Answer: D

   Explanation

   Secure configuration guide (Option D): A secure configuration guide provides detailed instructions and recommendations for configuring systems and devices in a secure manner. It typically includes settings, parameters, and best practices to follow when hardening devices. This aligns with the task of creating baselines for the server team.

   Source: Adapted from community discussion — Hs1208

   Next question

7. Question 817 · 856 in bank

   Which of the following environments utilizes a subset of customer data and is most likely to be used to assess the impacts of major system upgrades and demonstrate system features?

   • ADevelopment
   • BTest
   • CProduction
   • DStaging

   Show answer

   Answer: D

   Explanation

   D. Staging Development - Creating new code Test - Verifying the code works as specified Staging - Positioning the final code in as close to the real world as possible Production - Running the code in the real world Staging consists of non-functional testing and black-box testing and it’s done in a sandbox environment to enable aggressive testing of the application without risking any problems to the rest of the network.

   Source: Adapted from community discussion — TM78

   Next question

8. Question 818 · 856 in bank

   An external vendor recently visited a company's headquarters for a presentation. Following the visit, a member of the hosting team found a file that the external vendor left behind on a server. The file contained detailed architecture information and code snippets. Which of the following data types best describes this file?

   • AGovernment
   • BPublic
   • CProprietary
   • DCritical

   Show answer

   Answer: C

   Explanation

   C. Proprietary Proprietary information or intellectual property (IP) is information created and owned by the company, typically about the products or services that they make or perform.

   Source: Adapted from community discussion — 7308365

   Next question

9. Question 819 · 856 in bank

   A penetration tester was able to compromise an internal server and is now trying to pivot the current session in a network lateral movement. Which of the following tools, if available on the server, will provide the MOST useful information for the next assessment step?

   • AAutopsy
   • BCuckoo
   • CMemdump
   • DNmap

   Show answer

   Answer: D

   Explanation

   Autopsy is a digital forensics analysis tool - maily targetted to hard drive analysis - not very helpful for the requeriments Nmap would be the correct answer. we want to pivot to another devices on the NETWORK, so next step is to do reconnaisance, port scanning, etc

   Source: Adapted from community discussion — stoneface

   Next question

10. Question 820 · 856 in bank

    An organization has too many variations of a single operating system and needs to standardize the arrangement prior to pushing the system image to users. Which of the following should the organization implement first?

    • AStandard naming convention
    • BHashing
    • CNetwork diagrams
    • DBaseline configuration

    Show answer

    Answer: D

    Explanation

    D. Baseline configuration Establishing a baseline configuration would be the most logical first step in standardizing the arrangement of the operating system variations. A baseline configuration provides a standard set of configurations and settings that are considered secure and appropriate for the organization's needs. By defining this baseline, the organization can ensure consistency across its systems, making it easier to manage and maintain them. Once a baseline configuration is in place, it becomes more straightforward to push standardized system images to users.

    Source: Adapted from community discussion — shady23

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 811. 856 questions available.