SY0-601

SY0-601 practice questions, page 10 of 35, with answer review and explanations.

Question 46

An organization wants to participate in threat intelligence information sharing with peer groups. Which of the following would MOST likely meet the organization's requirement?

  1. Perform OSINT investigations.
  2. Subscribe to threat intelligence feeds.
  3. Submit RFCs.
  4. Implement a TAXII server.

Question 47

Which of the following is the MOST effective control against zero-day vulnerabilities?

  1. Network segmentation
  2. Patch management
  3. Intrusion prevention system
  4. Multiple vulnerability scanners

Question 48

Which of the following is the GREATEST security concern when outsourcing code development to third-party contractors for an internet-facing application?

  1. Intellectual property theft
  2. Elevated privileges
  3. Unknown backdoor
  4. Quality assurance

Question 49

An organization has hired a red team to simulate attacks on its security posture. Which of the following will the blue team do after detecting an IoC?

  1. Reimage the impacted workstations.
  2. Activate runbooks for incident response.
  3. Conduct forensics on the compromised system.
  4. Conduct passive reconnaissance to gather information.

Question 50

An amusement park is implementing a biometric system that validates customers' fingerprints to ensure they are not sharing tickets. The park's owner values customers above all and would prefer customers' convenience over security. For this reason, which of the following features should the security team prioritize FIRST?

  1. Low FAR
  2. Low efficacy
  3. Low FRR
  4. Low CER