Mid-Week Review SY0-601 22 Sept 2022

Which of the following protects an enterprise based only on source and destination addresses?

Which of the following attacks attempts to crack passwords?

Which of the following is the best defense against man in the middle attacks?

Which of the following requires an update to the baseline after installing new software on a machine?

A NIPS needs daily downloads to ensure the definition files are effective . What typ of NIPS?

This exploits the troubleshooting and developer hooks (that often circumvented normal authentication) left in a system?

A security administrator purchased a/an ________________ in order to protect against known attacks.

What type of social engineering attack involves going through the trash looking for notes on paper?

Select the type of network supported by command and control functions.

What events trigger alarms but are not really incidents?

The penetration test method that gives the tester limited documentation regarding the software application under test?

What are the three types of cloud computing implementation?

What is unsolicited and unwanted email known as?

To preserve evidence for later use in court, which of the following needs to be documented?

Which of the following can be deterred by increasing the keyspace and complexity of a password?

On a Unix system, what is the name of the account that would give a hacker complete access?

Which of the following portions of a company's network is between the Internet and an internal network?

When I try to reach the company server I am directed to a random blogging site. What is likely happening?

Where is the MOST appropriate place to host a publicly accessible server?

This occurs when a string of data is sent to a buffer that is larger than the buffer was designed to handle?

What is the port number for Post Office Protocol 3 (POP3)?

This attack forced systems loaded with the latest patches to malfunction with several random reboots?

What is it known as when you combine phishing with Voice over IP (VoIP)?

What type of IDS system uses a learning algorithm to analyze the traffic passing through the network?

Choose the most appropriate definition for a demilitarized zone.

What do intruders use most often to gain unauthorized access to a system?

What is the purpose of maintaining chain of custody after a company experiences a major security incident?

A security breach tha results in the lack of legitimate use of that system?

What is typically used to conceal the nature of a social engineering attack?

Which of the following is the most effective defense against a social engineering attack?

Someone actively captures and manipulates packets as they are passing through your network?

Which is the MOST effective way for an administrator to determine what security holes reside on a network?

What is the port number for Telnet?

Select the best option to create a network within a network.

What type of malware is almost impossible to find and obtains access to the kernel of the OS?

Another name for a zombie is

What term is used for the process of collection, analysis and preservation of evidence?

Select the best definition of a network intrusion prevention system.

What type of virus will change code in order to avoid detection?

In which of the following attacks does the attacker pretend to be a legitimate user?

Select a technique that could be used to identify misconfigurations throughout the corporate network.

An intrusion has been detected on a company's network from the Internet. What should be checked FIRST?

Which type of threat is a simple packet filtering firewall effective at protecting?

Which of the following is the primary method of performing network hardening?

An admin is interested in reviewing logs from one of his databases. Which log file might he look at?

Which tool is NOT considered a security monitoring tool?

IPv4, while widely used, has limitations. What is it being replaced with?

Select the device that actively protects an entire network from an instrusion.

What tool allows you,to determine the type, source and flags of a packet traversing your network

What are the four most common security zones you will likely encounter?

Select a solution that will reduce unwanted junk mail on your enterprise email server.

Which logs can be searched for IP addresses or domain names to ifind pc's that are talking with suspicious sites?

I click a link that goes to a rogue server intended to collect usernames and passwords. What type of attack is this?

A switch populates its CAM table with what?

What component of an IDS collects data from the data source and passes it to the analyzer for analysis?

Which service could be used to host an extranet application for a company?

What type of malware are software programs that have the ability to hide certain things from the operating system?

______ is a tool that can be used to identify a weakness within various applications without exploiting that weakness?

What type of program could be triggered to delete system logs every five days or whenever a backup is performed?

Phishing or spear phishing, but for big users instead of lower-access individuals, is known as:

What procedure will assist a security administrator in the identification of Advanced Persistent Threats (APT)?

What are the port numbers for FTP?

How can an attacker determine what network services are enabled on a target system?

What type of filtering is based on the physical ID of each workstation?

This attachments provide the greatest threat and should be filtered from e-mails to minimize the danger of viruses?

Cracks passwords if the user uses simple and meaningful things such as pet names or birthdays for their passwords?

This application that appears to perform a useful function but instead contains some sort of malicious code called?

Select the most effective option to protect end user laptops and PCs from zero day attacks.