SYO-601 Day 3 Endgame + E + Ports (MARCH2022)

An analyst sees the following in a log file </script>http://site1.com/cookiestealer.js</script> what is the attack?

What when installed in host based systems will BEST help to prevent zero day exploits?

Access logs for a fingerprint scanner show many errors that correlate users' reports of issues accessing the facility?

A pen test when you have all information (including the source code) for a web based application?

What ports need to be open on a web server to support secure and un-secure traffic?

What controls access to a switch or wireless access point?

When I use cloud and want the least responsibility, I just need to pay for my users to access software?

What port does TELNET use?

Windows servers are targeted by hackers, they are able to access file and print services. Which firewall ports=blocked?

What is it when I see hundreds of MAC addresses registered against a single switch port?

An external attacker exfiltrated data on port 443. What should an analyst review to BEST prevent future attacks?

Under GDPR, which of the following is MOST responsible for the protection of privacy and website user rights?

A NEWLY installed guest wireless network at a restaurant uses a password that is printed on the customer order receipt?

What can be used to disconnect a mobile device from the hotel WiFi network?

Technicians connect across a zero trust network to configure a firewall ruleset on 10.10.0.4 Command should be used?

When my developers use the cloud, they are coding and need an application stack to host & test the applications?

A red team will test the effectiveness of the SOC staff by emulating APT hackers, what is BEST source of information?

What web based attack causes the victim to run a transaction when they have authenticated to a trusted web site?

What will prevent un-authorized applications from loading on my laptop computer?

What EAP type should be used to authenticate a user using account name and password on to the enterprise WiFi?

What would be most appropriate to perform BULK encryption on sensitive files?

Organizations define the responsibilities of each party, but do not want to establish a contractually binding agreement?

You are utilizing IPSec. The tunnel must be established with data integrity encryption, authentication and anti-replay?

What cloud security service will prevent users from sending sensitive company data to their personal e-mail account?

A worm was able to spread unhindered throughout the networks & infect many computers and servers. Best Mitigation?

How can I correlate events from multiple network devices to present a real-time reporting dashboard ?

What port does SSH use?

What keys would be used to APPLY a digital signature and allow the VALIDATION a signature for legal documents?

a security engineer contains a malware incident and disables all compromised accounts. what step is NEXT?

What type of data may be exfiltrated by APT actors using metadata from apps that use location services?

What allows me to assess the security posture of a laptop when connecting to 802.1x network devices?

An attack when you are unexpectedly prompted to download NEW ssh keys for a long-term trusted host?

When would best support Integrity on a voting machine located at a voting station?

DES encryption is being used on recently deployed production servers. Which of the following did an assessment identify?

When I use cloud services and need to protect company intellectual property from data leakage and risky behaviours?

What will I need to open on the firewall for secure and unsecure web based traffic?

The following string is seen in a log http://Form submission user='foo' or '1=1' & pass=mypass or "1=1" what is it?

An analyst sees the following in a log file ../../../etc/shadow what is the attack?

Chief Financial Officer receives e-mail with instructions to update company banking password, what attack is this?

A Business is developing a plan to mitigate the event of a complete loss of critical systems & data. What is it?

Alice is called to an incident, the CEOs laptop is displaying messages that files are being encrypted, what is next step

An insider threat where a manager kept sensitive data on their laptop, when data should be encrypted in cloud storage?

What can we do to mitigate the risk of data spillage on a COPE tablet computer, storing personal and company data?

What control/rules prevent the exfiltration of the companys Intellectual Property?

what BEST identifies & remediates data-loss in an enterprise using 3rd party, web services & file-sharing platforms?

What framework will reject email that does not match SPF records stored in DNS ?

What is the RADIUS Port?

What would be most appropriate to ensure integrity of operating system files?

A SIEM alert reveals an attack against a network switch (see exhibit), what is the threat?

How can a user ensure confidentiality & non-repudiation of e-mail messages sent to a contact at another company?