SYO-601

A user recently got an SMS on their phone that ask for bank information, Which social eng attack is this?

What is the most approriate way to store credit card numbers in a server? This will be used to reorder things easily.

The guidelines require that all info systems meet a minimum security baseline . What should be used to assess?

What should be used to authenticate an ENTIRE packet?

A user enters a password and is prompted to enter an authentication code. Which of the following MFA factors are used?

What is another requirement that must be configured for PCI DSS compliance?

What is the BEST way to implement secure authentication to third party websites without users' passwords?

The following administrative control would be MOST effective to reduce the occurence of malware execution?

New apps get released on a daily basis, and the security team identify multiple flaws. Before release what should happen

A file appear to be malicious, What will allow you to gather info on this, and confirm if it is without executing it?

Employees like to participate in a public forum with others in the industry. Which one will an attacker most likely use?

What would be another method that would BEST prevent Data Loss (same situation, no external networks)

What could've impacted unpatched controllers that are accessible over the internet via a web interface?

A major cyberattack just happened, it was well coordinated, and highly skilled. Which of the following targeted the org?

Which of the following refers to apps and systems that are used within an organization without consent or approval?

A tech needs to prevent data loss on a job site. There are no external networks. Which method would BEST prevent loss?

What wifi solution would most likely be used with highest level of sec, but with the least amount of overhead for a shop

Which of these would BEST identify and remediate a data-loss event in an enterprise using third-party web services.

A private organization closed some business units and reduce staffing. What would BEST help determine course of action?

A company needs to have functionality back to its plant in x < 12 hours if the power ever fails. What must this be?

Which of the incident response steps involves actions to protect critical systems while maintaining business operations

A RAID is needed for high speeds and fault tolerance, it's unlikely that multi drives will fail at once. What fits this?

A company implements MFA for all apps. It needs to be non-disruptive and user friendly. Which technology should be used?

A tech noticed there was a change in IP address for a vendor website earlier, the change lasted 8 hours. What happened?

What technical control is best suited for detection and prevention of buffer overflows on hosts?

Which of the following describes the ability of code to target a hypervisor from the inside?

An auditor reviews vulnerability scan data provided by an internal team. Which BEST indicates valid credentials are used

What is BEST used to move from an on-premise email solution to a cloud- based email solution.

A company wants to protect sensitive data by using classification labels. Which access control schemes BEST fits this?

To prepare a threat for test. We need to find a method for tactics & techniques for this test, what should we use?

Which of the following algorithms has the SMALLEST key size?

Which job roles would sponsor data quality and data entry initiatives in order to meet all bus/regulatory requirements.

An auditor noticed that a security appliance with an embedded OS was vulnerable for the past two assesments. Why?

An organization has a concern with the malware being created and sent via email/USB. What's the best defense for this?

A log shows the following output: attempted login with password rich, richard,richie, richyrich

Which would best establish between two org. to define responsibilites of each party and outline tasks, and manage risk.

Which backup methods implements the slowest restore time in an event of a failure?

A server is being upgraded and you need find which RAID it should use. It must have parity and handle two disc failures.

Which of the following are requirements that must be configured for PCI DSS compliance?

A computer needs to be not accessible by corporate networks or even the internet. What is the BEST solution for this?

In which of the following situations would it be BEST to use a detective control type for mitigation

There is a concern that a web app will not handle any unexpected/ random inputs without crashing. What test can be used?

Security is enhancing MFA access. A key card and fingerprint scan are used already. What will add another factor to this

Which of these would the BEST resource for a dev who is looking to improve secure coding practices for web apps?

A business needs what solution to build a guest wifi at the company's headquarter. It has an AUP for the guest to sign.

A executive left a job, The analyst reviews and sees successful logons to access the account. What should they done?

What does company need to purchase one SSL certificate that will work with name conventions such as store.company.com

An examiner is trying to dump password cached in the memory, but recieves an error. What would most likely cause this?

What file is needed to check what is in the memory of a server?

A method for securely moving files between systems needs to auth the IP header and payload. What's BEST way to do this?

Which of these is MOST likely a vector for unauthorized inclusion of vulnerable code in a company's final release?

Which of the following risk management strategies would cybersecurity insurance be used?

What would help prevent unauthorized access to other networks, if in an event one of the networks gets breached.

Which of the following types of controls is a turnstile?

An incident occured, and after 30 mins the hosts was isolated. Malware spread across the site. What could been improved?

An admin wants to ensure all passwords are secure by adding random data to each password before the string. What is this

Which of the following standards is certified for privacy?

What provides the best protection for sensitve info on the cloud but still allows full functionality and access to it

When choosing a solution for identity mgmt, a guy suggests to go from inhouse to cloud provider. What strat is this?

A solution would help communicate to others the multiple levels of the org's vulnerabilities. What would best meet this?

A company needs to centralize its logs to create a baseline and have visibility on its security events. What is this?

A CEO personal information was stolen in a social eng attack. What source would reveal if the personal info is for sale?

An enterprise has experienced all email accounts hacked It was logged on at France and Brazil What could've prevent this

Why would an admin place a doc named password.txt on the desktop of an admin account's server? (BEST possible answer)

A company transitioned to BYOD culture. Which of these technologies would be best to balance BYOD and protect the data?

A user needs a tool thats inline with network, block known malicious traffic, & stop network based attacks. What is it?

A symmetric encryption algorithm is BEST suited for:

A org was a victim of an attack and all networks were airgapped Upon investigation a worm was the source. What happened?

Someone won the LOTTERY?! The email request the name, phone number, address, DOB, and SSN. What type of email is this?

An engineer needs a plan for fixing the wireless infrastructure. There are latency/connect issues. What would help BEST?