SY0-601

SY0-601 practice questions, page 18 of 35, with answer review and explanations.

Question 86

Which of the following control types is focused primarily on reducing risk before an incident occurs?

  1. Preventive
  2. Deterrent
  3. Corrective
  4. Detective

Question 87

A systems administrator reports degraded performance on a virtual server. The administrator increases the virtual memory allocation, which improves conditions, but performance degrades again after a few days. The administrator runs an analysis tool and sees the following output: ==3214== timeAttend.exe analyzed ==3214== ERROR SUMMARY: ==3214== malloc/free: in use at exit: 4608 bytes in 18 blocks. ==3214== checked 82116 bytes ==3214== definitely lost: 4608 bytes in 18 blocks. The administrator terminates the timeAttend.exe, observes system performance over the next few days, and notices that the system performance does not degrade. Which of the following issues is MOST likely occurring?

  1. DLL injection
  2. API attack
  3. Buffer overflow
  4. Memory leak

Question 88

An administrator is experiencing issues when trying to upload a support file to a vendor. A pop-up message reveals that a payment card number was found in the file, and the file upload was blocked. Which of the following controls is most likely causing this issue and should be checked FIRST?

  1. DLP
  2. Firewall rule
  3. Content filter
  4. MDM
  5. Application allow list

Question 89

Which of the following risk management strategies would an organization use to maintain a legacy system with known risks for operational purposes?

  1. Acceptance
  2. Transference
  3. Avoidance
  4. Mitigation

Question 90

Which of the following is the BEST action to foster a consistent and auditable incident response process?

  1. Incent new hires to constantly update the document with external knowledge.
  2. Publish the document in a central repository that is easily accessible to the organization.
  3. Restrict eligibility to comment on the process to subject matter experts of each IT silo.
  4. Rotate CIRT members to foster a shared responsibility model in the organization.