SY0-601

SY0-601 practice questions, page 17 of 35, with answer review and explanations.

Question 81

A forensic analyst needs to prove that data has not been tampered with since it was collected. Which of the following methods will the analyst MOST likely use?

  1. Look for tampering on the evidence collection bag.
  2. Encrypt the collected data using asymmetric encryption.
  3. Ensure proper procedures for chain of custody are being followed.
  4. Calculate the checksum using a hashing algorithm.

Question 82

Multiple business accounts were compromised a few days after a public website had its credentials database leaked on the Internet. No business emails were identified in the breach, but the security team thinks that the list of passwords exposed was later used to compromise business accounts. Which of the following would mitigate the issue?

  1. Complexity requirements
  2. Password history
  3. Acceptable use policy
  4. Shared accounts

Question 83

A security analyst wants to fingerprint a web server. Which of the following tools will the security analyst MOST likely use to accomplish this task?

  1. nmap -pl-65535 192.168.0.10
  2. dig 192.168.0.10
  3. curl --head http://192.168.0.10
  4. ping 192.168.0.10

Question 84

A penetration tester was able to compromise an internal server and is now trying to pivot the current session in a network lateral movement. Which of the following tools, if available on the server, will provide the MOST useful information for the next assessment step?

  1. Autopsy
  2. Cuckoo
  3. Memdump
  4. Nmap

Question 85

Field workers in an organization are issued mobile phones on a daily basis. All the work is performed within one city, and the mobile phones are not used for any purpose other than work. The organization does not want these phones used for personal purposes. The organization would like to issue the phones to workers as permanent devices so the phones do not need to be reissued every day. Given the conditions described, which of the following technologies would BEST meet these requirements?

  1. Geofencing
  2. Mobile device management
  3. Containerization
  4. Remote wiping