SY0-601 practice questions 821–830

1. Question 821 · 856 in bank

   The Chief Information Security Officer (CISO) asks a security analyst to install an OS update to a production VM that has a 99% uptime SLA. The CISO tells the analyst the installation must be done as quickly as possible. Which of the following courses of action should the security analyst take first?

   • ALog in to the server and perform a health check on the VM.
   • BInstall the patch immediately.
   • CConfirm that the backup service is running.
   • DTake a snapshot of the VM.

   Show answer

   Answer: D

   Explanation

   D. Take a snapshot of the VM. Taking a snapshot of the VM would be the first course of action. By taking a snapshot, the security analyst creates a point-in-time backup of the VM's current state. This ensures that if any issues arise during the OS update installation process, the VM can be quickly reverted to its previous state without affecting the production environment. Once the snapshot is taken, the security analyst can proceed with confidence to install the OS update, knowing that there is a backup available in case of any unforeseen complications.

   Source: Adapted from community discussion — shady23

   Next question

2. Question 822 · 856 in bank

   The application development teams have been asked to answer the following questions: • Does this application receive patches from an external source? • Does this application contain open-source code? • Is this application accessible by external users? • Does this application meet the corporate password standard? Which of the following are these questions part of?

   • ARisk control self-assessment
   • BRisk management strategy
   • CRisk acceptance
   • DRisk matrix

   Show answer

   Answer: A

   Explanation

   These questions are part of an A. Risk Control Self-Assessment. A Risk Control Self-Assessment (RCSA) is a process through which internal control gaps are identified and assessed for their risk. The questions asked are aimed at understanding the potential risks associated with the application, such as the risk of using open-source code, the risk associated with external patches, the risk of external user access, and the risk of non-compliance with corporate password standards. The answers to these questions will help in assessing the overall risk profile of the application and determining the necessary controls to mitigate these risks.

   Source: Adapted from community discussion — Jay987654

   Next question

3. Question 823 · 856 in bank

   A website user is locked out of an account after clicking an email link and visiting a different website. Web server logs show the user’s password was changed, even though the user did not change the password. Which of the following is the most likely cause?

   • ACross-site request forgery
   • BDirectory traversal
   • CARP poisoning
   • DSQL injection

   Show answer

   Answer: A

   Explanation

   Cross-site request forgery (CSRF) (Option A): CSRF is an attack where a malicious website tricks a user's browser into making an unintended request to another site where the user is authenticated. In this case, clicking the email link and visiting a different website could have initiated a request to change the password on the target website without the user's knowledge

   Source: Adapted from community discussion — Hs1208

   Next question

4. Question 824 · 856 in bank

   Two companies are in the process of merging. The companies need to decide how to standardize their information security programs. Which of the following would best align the security programs?

   • AShared deployment of CIS baselines
   • BJoint cybersecurity best practices
   • CBoth companies following the same CSF
   • DAssessment of controls in a vulnerability report

   Show answer

   Answer: C

   Explanation

   Both companies following the same CSF (Option C): A cybersecurity framework, such as NIST Cybersecurity Framework (CSF), ISO 27001, or others, provides a structured and comprehensive approach to cybersecurity. Aligning both companies with the same framework allows for a common understanding and implementation of security controls, risk management, and overall security governance

   Source: Adapted from community discussion — Hs1208

   Next question

5. Question 825 · 856 in bank

   A company recently decided to allow employees to work remotely. The company wants to protect its data without using a VPN. Which of the following technologies should the company implement?

   • ASecure web gateway
   • BVirtual private cloud endpoint
   • CDeep packet inspection
   • DNext-generation firewall

   Show answer

   Answer: A

   Explanation

   Secure web gateway (Option A): A secure web gateway is a security solution that filters web traffic to and from user devices, providing protection against web-based threats. It allows organizations to enforce security policies and protect users from malicious websites without the need for a VPN.

   Source: Adapted from community discussion — Hs1208

   Next question

6. Question 826 · 856 in bank

   Select 2

   A vendor needs to remotely and securely transfer files from one server to another using the command line. Which of the following protocols should be implemented to allow for this type of access? (Choose two.)

   • ASSH
   • BSNMP
   • CRDP
   • DS/MIME
   • ESMTP
   • FSFTP

   Show answer

   Answer: AF

   Explanation

   A. SSH (Secure Shell): SSH is a secure protocol that provides encrypted communication over a network. It is commonly used for secure command-line access and file transfer between servers. F. SFTP (Secure File Transfer Protocol): SFTP is an extension of the SSH protocol that enables secure file transfer and remote file management. It is commonly used for secure and encrypted file transfers.

   Source: Adapted from community discussion — Hs1208

   Next question

7. Question 827 · 856 in bank

   A security analyst needs to propose a remediation plan for each item in a risk register. The item with the highest priority requires employees to have separate logins for SaaS solutions and different password complexity requirements for each solution. Which of the following implementation plans will most likely resolve this security issue?

   • ACreating a unified password complexity standard
   • BIntegrating each SaaS solution with the identity provider
   • CSecuring access to each SaaS by using a single wildcard certificate
   • DConfiguring geofencing on each SaaS solution

   Show answer

   Answer: B

   Explanation

   B. Integrating each SaaS solution with the identity provider Explanation: Integrating with Identity Provider (Option B): This solution involves connecting each SaaS solution to a centralized identity provider (IdP). By doing so, employees can use a single set of credentials to access different SaaS applications. The identity provider can enforce different password complexity requirements for each application, ensuring that users meet the specific security standards for each solution.

   Source: Adapted from community discussion — Payu1994

   Next question

8. Question 828 · 856 in bank

   Callers speaking a foreign language are using company phone numbers to make unsolicited phone calls to a partner organization. A security analyst validates through phone system logs that the calls are occurring and the numbers are not being spoofed. Which of the following is the most likely explanation?

   • AThe executive team is traveling internationally and trying to avoid roaming charges.
   • BThe company’s SIP server security settings are weak.
   • CDisgruntled employees are making calls to the partner organization.
   • DThe service provider has assigned multiple companies the same numbers.

   Show answer

   Answer: B

   Explanation

   I passed my exam with a 778!!! I studied 700-849 in depth (meaning, even though each had a discussion with answers posted, I looked up the answers for myself to really understand the concepts) and all of the PBQ's in depth (PBQs: 153, 155, 156,157,725,726, 731, 733, 734) I looked over 600 to 700 the morning of the exam

   Source: Adapted from community discussion — 7308365

   Next question

9. Question 829 · 856 in bank

   Which of the following best describes a penetration test that resembles an actual external attack?

   • AKnown environment
   • BPartially known environment
   • CBug bounty
   • DUnknown environment

   Show answer

   Answer: D

   Explanation

   If you have made it this far to discussion 849, I want to congratulate you because you must have been loaded with so much confusion and confidence, I just passed my exam now. go back from question 600 and refresh it. 90% answers are here right within you nose. GOOD LUCK my kudos to this pathway.

   Source: Adapted from community discussion — wolekraft

   Next question

10. Question 830 · 856 in bank

    Field workers in an organization are issued mobile phones on a daily basis. All the work is performed within one city, and the mobile phones are not used for any purpose other than work. The organization does not want these phones used for personal purposes. The organization would like to issue the phones to workers as permanent devices so the phones do not need to be reissued every day. Given the conditions described, which of the following technologies would BEST meet these requirements?

    • AGeofencing
    • BMobile device management
    • CContainerization
    • DRemote wiping

    Show answer

    Answer: B

    Explanation

    MDM is the best solution here, Company wants to issue a COBO device therefore no containerization < - tailored to BYOD Geofencing and remote wiping are capabilites that are provided by an MDM solution

    Source: Adapted from community discussion — stoneface

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 821. 856 questions available.