SYO-601 SEC+ ENDGAME Day 1 NEW C Q

During a penetration test, the tester performs a preliminary scan for any responsive hosts. What is the reason for this?

A solution to allow guest access to the internet , but requires guests to sign off on the acceptable use policy (AUP)?

users have been redirected to malicious Pharming sites, the issue seems to be fake DNS responses. What is BEST to fix?

What tool will perform an un-credentialed scan, discovering ports, protocols and operating systems across a network?

Choose the regulatory frameworks that you must be compliant with, when processing customer credit card payments?

What Document would highlight the residual risks that need to be managed after mitigating controls have been implemented

Under GDPR, which of the following is MOST responsible for the protection of privacy and website user rights??

Jeff spends a large amount of time on common security tasks, what would be BEST to streamline and automate these tasks?

An organization needs to manage all aspects of BYOD & COPE mobile devices, what will be the best solution?

What will MOST likely cause machine learning and Al-enabled systems to operate with unintended consequences?

You need to support MFA, presently users are only using facial recognition? What additional factors could be used?

Which of the following will increase the compute time for an offline brute-force attack? Choose two

Bill, needs to choose a disaster recovery test that is The LEAST time-consuming for the disaster recovery team?

Acme is having difficulty correlating events from its AV, EDR, DLP, SWG, & CASB systems. What will mitigate this issue?

A disgruntled user, hides company information in .png files sent as email attachments. Choose the term to describe this?

What prevents PII and IP theft, in the cloud, & allows security professionals to view reporting dashboards?

You must use native tools to map services running on a Windows Server's listening ports

Which of the following tools should an analyst use to further review a packet capture pcap file?

What appliance will be MOST effective to PREVENT Malicious inbound network threats?

What is the best measurement to use when assessing the reliability of biometric authentication devices?

What will a company interested in implementing a technical, hands-on set of security standards MOST likely choose?

What is a good security best practice to consider when giving users authorization to access resources?

What type of network separation would be appropriate for critical SCADA/ICS networks?

Lockheed is concerned about unauthorized access to Industrial Control Systems if the staff Wi-Fi network is breached.

A data breach is attributed to an executive who was charging a phone in a public area. What would have prevented this?

An attacker is exploiting a vulnerability that does not have a patch available. What is the attacker exploiting?

A developer must ensure a web application is not vulnerable to common exploits such as XSS, XSRF & SQLi. What is best?

A Chief Risk Officer (CRO) decides to acquire cybersecurity insurance for their company. What is the strategy?

What should I do to ensure employees use individual accounts to access the company wireless network?

Which of the following authentication methods use single sign-on?

A company stores PII for EU citizens. The company must ensure they implement strong IT governance. Who will advise?

Boeing just experienced a major cyberattack against a modem. The attacker was sophisticated and highly skilled.

A SECURITY ANALYST NEEDS TO FIND REAL-TIME DATA ON THE LATEST MALWARE AND loCs, what is best?

to preserve the admissibility of the evidence, which of the following forensic techniques should be used?

What tool will perform credentialed scans, discovering unpatched systems and displaying CVE references & CVSS ratings?

What control will be MOST effective to PREVENT Exfiltration of Intellectual Property?