SY0-601 practice questions 831–840

1. Question 831 · 856 in bank

   An accounting intern receives an invoice via email from the Chief Executive Officer (CEO). In the email, the CEO demands the immediate release of funds to the bank account that is listed. Which of the following principles best describes why this attack might be successful?

   • AAuthority
   • BScarcity
   • CConsensus
   • DFamiliarity

   Show answer

   Answer: A

   Explanation

   Authority - since its coming from the CEO ps if anyone knows the answers to the newly added questions please share your input

   Source: Adapted from community discussion — ps1hacker

   Next question

2. Question 832 · 856 in bank

   A user downloaded software from an online forum. After the user installed the software, the security team observed external network traffic connecting to the user's computer on an uncommon port. Which of the following is the most likely explanation of this unauthorized connection?

   • AThe software had a hidden keylogger.
   • BThe software was ransomware.
   • CThe user’s computer had a fileless virus.
   • DThe software contained a backdoor.

   Show answer

   Answer: D

   Explanation

   Backdoor because: A: keylogger logs keys and it may use a uncommon port to report its logs, but I dont think its enough evidence to determine thats the case. B: ransomware encrypts files but doesnt connect externally. C: Fileless virus - no cause they downloaded software D: Backdoor - yes, the file downloaded contained a backdoor and its calling 'home'.

   Source: Adapted from community discussion — ps1hacker

   Next question

3. Question 833 · 856 in bank

   During a penetration test, a flaw in the internal PKI was exploited to gain domain administrator rights using specially crafted certificates. Which of the following remediation tasks should be completed as part of the cleanup phase?

   • AUpdating the CRL
   • BPatching the CA
   • CChanging passwords
   • DImplementing SOAR

   Show answer

   Answer: A

   Explanation

   Performed a search for CA patching, never came up. Going with A. Have to revoke the certificate and redo the process correctly. When a CA revokes a certificate, it updates the CRL. Then, the CRL is digitally signed by the issuer and distributed to all entities that rely on it. This process must run correctly, as errors can lead to significant security vulnerabilities. Related to Q#709.

   Source: Adapted from community discussion — mikzer

   Next question

4. Question 834 · 856 in bank

   Which of the following security program audits includes a comprehensive evaluation of the security controls in place at an organization over a six- to 12-month time period?

   • ANIST CSF
   • BSOC 2 Type II
   • CISO 27001
   • DPCI DSS

   Show answer

   Answer: B

   Explanation

   SOC 2 TYPE 1 and 2 Report • SOC 2 - Trust Services Criteria (security controls) – Firewalls, intrusion detection, and multi-factor authentication • Type I audit – Tests controls in place at a particular point in time • Type II – Tests controls over a period of at least six consecutive months

   Source: Adapted from community discussion — ekiel

   Next question

5. Question 835 · 856 in bank

   An organization recently experienced the following social engineering attacks that introduced malware into the network: • In the first attack, the sender impersonated a staff member in the legal department and sent an email stating that the employee needed to click a link to sign an NDA in order to remain employed. The link provided was to a malicious website. • In the second attack, the sender impersonated the director of finance and instructed the accounts payable department to pay an outstanding invoice. The attached invoice contained malware. Which of the following is the most likely reason these attacks were successful?

   • ABoth attacks passed the spam filters, which resulted in the end users thinking the emails were legitimate.
   • BBoth attacks concealed the delivery of malware, which led end users to trust the emails.
   • CBoth attacks appealed to authority, which made the end users feel obligated to perform the requested actions.
   • DBoth attacks relied on dumpster diving to obtain a list of valid contacts to receive the malicious emails.

   Show answer

   Answer: C

   Next question

6. Question 836 · 856 in bank

   Development team members set up multiple application environments so they can develop, test, and deploy code in a secure and reliable manner. One of the environments is configured with real data that has been obfuscated so the team can adequately assess how the code will work in production. Which of the following environments is set up?

   • AQuality assurance
   • BDevelopment
   • CSandbox
   • DProduction

   Show answer

   Answer: C

   Explanation

   C. Sandbox A sandbox environment is typically used for testing and experimentation purposes, allowing developers to safely assess how code will function in a controlled setting before deploying it to production. In this scenario, the environment configured with real data that has been obfuscated aligns with the characteristics of a sandbox environment, where developers can test their code with realistic data without risking the integrity of the production environment.

   Source: Adapted from community discussion — shady23

   Next question

7. Question 837 · 856 in bank

   Which of the following provides guidelines for the management and reduction of information security risk?

   • ACIS
   • BNIST CSF
   • CISO
   • DPCI DSS

   Show answer

   Answer: B

   Explanation

   B. The National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) provides guidelines, standards, and best practices for organizations to manage and reduce cybersecurity risk. It offers a flexible and customizable framework that helps organizations align their cybersecurity activities with business objectives, risk tolerance, and available resources.

   Source: Adapted from community discussion — CircaG

   Next question

8. Question 838 · 856 in bank

   During a wireless network scan at a data center the IT security team discovered Wi-Fi signals broadcasting from an unknown device. Which of the following best describes the cause of the incident?

   • ADomain hijacking
   • BOn-path attack
   • CRogue access point
   • DJamming

   Show answer

   Answer: C

   Next question

9. Question 839 · 856 in bank

   A security analyst is reviewing a secure website that is generating TLS certificate errors. The analyst determines that the browser is unable to receive a response from the OCSP for the certificate. Which of the following actions would most likely resolve the issue?

   • ARun a traceroute on the OCSP domain to find where the domain is failing.
   • BCreate an exclusion for the OCSP domain in the content filter
   • CUnblock the OCSP protocol in the host-based firewall
   • DAdd the root certificate to the trusted sites on the workstation with the issue.

   Show answer

   Answer: C

   Explanation

   C. OCSP (Online Certificate Status Protocol) is used to check the validity of certificates, and if the browser is unable to receive a response from the OCSP server due to firewall restrictions, it may result in TLS certificate errors. By unblocking the OCSP protocol in the host-based firewall, the browser will be able to communicate with the OCSP server and verify the certificate's validity, resolving the issue.

   Source: Adapted from community discussion — CircaG

   Next question

10. Question 840 · 856 in bank

    An organization plans to take online orders via a new website. Three web servers are available for this website. However, the organization does not want to reveal the network addresses or quantity of the individual servers to the general public. Which of the following would best fulfill these requirements?

    • AIPSec
    • BExplicit proxy
    • CPort security
    • DVirtual IP

    Show answer

    Answer: D

    Explanation

    Just passed today (May 2024) with a 782. Only like 30 of my questions were from this set. 3 of the 4 PBQs were from here. I studied for 3 weeks by watching all of Prof Messers videos once and went through this question set once. I have zero IT experience outside of a college degree in IT. It is really important to understand what the words mean. Knowing all the answers without understanding isn’t enough. The question style is exactly like here, so this is a great study source to get accustomed to the question logic and thought process behind the answer. I thought I had a chance to fail while testing but it worked out. Let me know if you have any questions. Good luck all.

    Source: Adapted from community discussion — izBot

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 831. 856 questions available.