SY0-601 Free Practice Test

- (Exam Topic 1)
Certain users are reporting their accounts are being used to send unauthorized emails and conduct suspicious activities After further investigation, a security analyst notices the following
• All users share workstations throughout the day
• Endpoint protection was disabled on several workstations throughout the network.
• Travel times on logins from the affected users are impossible
• Sensitive data is being uploaded to external sites
• All usee account passwords were forced lo be reset and the issue continued Which of the following attacks is being used to compromise the user accounts?

1. A. Brute-force
2. B. Keylogger
3. C. Dictionary
4. D. Rainbow

Correct Answer: C

- (Exam Topic 4)
An analyst has determined that a server was not patched and an external actor exfiltrated data on port 139. Which of the following sources should the analyst review to BEST ascertain how the incident could have been prevented?

1. A. The vulnerability scan output
2. B. The security logs
3. C. The baseline report
4. D. The correlation of events

Correct Answer: A

- (Exam Topic 6)
Which of the following is required in order for an IDS and a WAF to be effective on HTTPS traffic?

1. A. Hashing
2. B. DNS sinkhole
3. C. TLS inspection
4. D. Data masking

Correct Answer: B

- (Exam Topic 4)
An enterprise to keep cryptpgraphic keys in a sade manner.Whihc of the fikkowug network appliances can achieve this goals?

1. A. HSM
2. B. CASB
3. C. TPM
4. D. DLP

Correct Answer: A

- (Exam Topic 6)
Which of the following provides a catalog of security and privacy controls related to the United States federal information systems?

1. A. GDPR
2. B. PCI DSS
3. C. ISO 27000
4. D. NIST 800-53

Correct Answer: D