SY0-601

Review 860 SY0-601 practice questions with answer explanations and community insights.

Question 1

A user is attempting to navigate to a website from inside the company network using a desktop. When the user types in the URL, https://www.site.com, the user is presented with a certificate mismatch warning from the browser. The user does not receive a warning when visiting http://www.anothersite.com. Which of the following describes this attack?

  1. On-path
  2. Domain hijacking
  3. DNS poisoning
  4. Evil twin

Question 2

Which of the following tools is effective in preventing a user from accessing unauthorized removable media?

  1. USB data blocker
  2. Faraday cage
  3. Proximity reader
  4. Cable lock

Question 3

A Chief Security Officer is looking for a solution that can provide increased scalability and flexibility for back-end infrastructure, allowing it to be updated and modified without disruption to services. The security architect would like the solution selected to reduce the back-end server resources and has highlighted that session persistence is not important for the applications running on the back-end servers. Which of the following would BEST meet the requirements?

  1. Reverse proxy
  2. Automated patch management
  3. Snapshots
  4. NIC teaming

Question 4

Which of the following describes a social engineering technique that seeks to exploit a person's sense of urgency?

  1. A phishing email stating a cash settlement has been awarded but will expire soon
  2. A smishing message stating a package is scheduled for pickup
  3. A vishing call that requests a donation be made to a local charity
  4. A SPIM notification claiming to be undercover law enforcement investigating a cybercrime

Question 5

A security analyst is reviewing application logs to determine the source of a breach and locates the following log: https://www.comptia.com/login.php?id='%20or%20'1'1='1 Which of the following has been observed?

  1. DLL Injection
  2. API attack
  3. SQLi
  4. XSS