SY0-601 Free Practice Test

- (Exam Topic 2)
An IT security manager requests a report on company information that is publicly available. The manager's concern is that malicious actors will be able to access the data without engaging in active reconnaissance. Which of the following is the MOST efficient approach to perform the analysis?

1. A. Provide a domain parameter to tool.
2. B. Check public DNS entries using dnsenum.
3. C. Perform a vulnerability scan targeting a public company’s IR
4. D. Execute nmap using the options: scan all ports and sneaky mode.

Correct Answer: D

- (Exam Topic 3)
An organization with a low tolerance for user inconvenience wants to protect laptop hard drives against loss or data theft. Which of the following would be the MOST acceptable?

1. A. SED
2. B. HSM
3. C. DLP
4. D. TPM

Correct Answer: A

- (Exam Topic 4)
A network administrator is concerned about users being exposed to malicious content when accessing company cloud applications. The administrator wants to be able to block access to sites based on the AUP. The users must also be protected because many of them work from home or at remote locations, providing on-site customer support. Which of the following should the administrator employ to meet these criteria?

1. A. Implement NAC.
2. B. Implement an SWG.
3. C. Implement a URL filter.
4. D. Implement an MDM.

Correct Answer: B

- (Exam Topic 2)
A news article states hackers have been selling access to IoT camera feeds. Which of the following is the Most likely reason for this issue?

1. A. Outdated software
2. B. Weak credentials
3. C. Lack of encryption
4. D. Backdoors

Correct Answer: B

- (Exam Topic 5)
During an incident a company CIRT determine it is necessary to observe the continued network-based transaction between a callback domain and the malware running on an enterprise PC. Which of the following techniques would be BEST to enable this activity while reducing the risk of lateral spread and the risk that the adversary would notice any changes?

1. A. Physical move the PC to a separate internet pint of presence
2. B. Create and apply microsegmantion rules.
3. C. Emulate the malware in a heavily monitored DM Z segment.
4. D. Apply network blacklisting rules for the adversary domain

Correct Answer: B