SYO-601 END GAME DAY 3 2023

Which of the following is the correct order of volatility from most to least volatile?

What BEST describes an Access Control Vestibule at the entrance to the datacenter?

What port must I enable on my firewall to ensure users can access domain name services (DNS)?

The process of passively gathering information poor to launching a cyberattack is called?

What is the final process after we have recovered systems following a security incident?

An admin helps a compliance team with ensuring information about customer transactions is archived for the proper time

A security auditor sees the following string in a server log http:// GET ../../../etc/passwd What is the threat?

A company is adding a clause to its AUP that states employees are not to modify the operating system on mobile devices

What regulatory compliance documents the roles of Controller, Processor and Data Protection Officer?

A technician must ensure the OS configuration settings are hardened. What is the BEST way to check for this?

What type of 3rd party assessment would use RULES OF ENGAGEMENT?

Which of the following threat actors is most likely to be motivated by ideology?

Research and development users receive extensive training to ensure they understand how to best protect company data.

Which of the following technologies is MOST likely to be configured when connecting to a business Wi-Fi network?

financial advisors at acme bank recieved emails, asking for company details including passwords. What type of attack?

What type of Firmware needs to be implemented, if we want an operating system to be able to securely boot?

During a Business Impact Assesment it has been decided that a critical system must be available again within 60 minutes?

An organization determined the source of a breach to be a personal cell phone that had been reported lost. To mitigate?

What does the administrator need to do FIRST before setting up the web application sever to use HTTPS/TLS?

What command would I type to see all active network connections on my host computer?

Which of the following is required in order for an IDS and a WAF to be effective on HTTPS traffic?

Software developers must ensure code will be trusted by the customers (when they install the applications) What is BEST?

What tool can you use in a Linux environment to verify the file permissions?

What will BEST test whether a web application will be able to handle unexpected or random input without crashing?

A Red Team exercise must simulate a "real world" threat actor, what should the team consult?

Which of the following improves the efficiency, accuracy, and speed of a database?

What is the purpose of UEFI and secure boot?

Which of the following must be considered when designing a high-availability network? (Choose two.)

An incident responder has discovered crypto-malware on the CEO's laptop, what should they do next?

A lack of user awareness of cyber threats puts the company at risk, so a training program is rolled out. What is this?

A host-based firewall on a legacy (vulnerable) Linux system allows connections from ONLY specific internal IP addresses.

A company has been experiencing very brief power outages which only last for one second each time. How can we mitigate?

A company would like to protect credit card information that is stored in a database from being exposed and reused.

An attacker has inserted too much data into a data field on a web form causing it to crash. What type of attack is this?

A security analyst needs to determine if an application remains vulnerable to SQL injection attacks, what TOOL?

Which of the following agreements defines response time, escalation points, and performance metrics?

A forensics investigator must search through several text files on an employee's hard disk. What tool should they use?

A company would like for the new EAP solution to block rogue access points, they do not want to support PKI certificates

A pentest reveals a host is running a remote desktop that can be used to access the production network containing ICS's.

What could stop a data breach, caused by an employee, enabling wi-fi to connect a smart phone in a public area?

An organization wants to store customer data on a separate part of the network.This cannot be accessed by standard users

Multiple intrusions went un-detected by current defenses. What should be deployed on the company's network?

Which of the following should the administrator use to find the areas with a poor or non-existent wireless signal?

During an incident, it took 30 mins to determine a course of action allowing, multiple infections of malware, Mitigate?

What environment are software engineers using when they perform dynamic testing on a compiled code module?

Which of the following cryptographic attacks would salting of passwords render ineffective?

A dynamic application vulnerability scan identified code injection could be performed using a web form. Mitigation?

A software developer who is looking to improve secure coding practices for web applications, what should they consult?

Which of the following strategies shifts risks that are not covered in an organization’s risk strategy?

A bank believes it has been the target of hackers who may be selling customer details to crimminals. How can they check?

If you want to find information about the operating system of a remote web server, what is the best tool to use?

An incident response processes - using workflow with automated decision points & actions based on predefined playbooks?

Acme decides to purchase insurance to cover the cost of any potential loss. Which of the following is the company doing?

In which stage of the Cyber Kill chain is the adversary currently operating, when they maintain a presence/persistance?