SY0-601

SY0-601 practice questions, page 19 of 35, with answer review and explanations.

Question 91

During a recent penetration test, the tester discovers large amounts of data were exfiltrated over the course of 12 months via the internet. The penetration tester stops the test to inform the client of the findings. Which of the following should be the client's NEXT step to mitigate the issue?

  1. Conduct a full vulnerability scan to identify possible vulnerabilities.
  2. Perform containment on the critical servers and resources.
  3. Review the firewall and identify the source of the active connection.
  4. Disconnect the entire infrastructure from the internet.

Question 92

A security analyst is designing the appropriate controls to limit unauthorized access to a physical site. The analyst has a directive to utilize the lowest possible budget. Which of the following would BEST meet the requirements?

  1. Preventive controls
  2. Compensating controls
  3. Deterrent controls
  4. Detective controls

Question 93

A company is looking to migrate some servers to the cloud to minimize its technology footprint. The company has 100 databases that are on premises. Which of the following solutions will require the LEAST management and support from the company?

  1. SaaS
  2. IaaS
  3. PaaS
  4. SDN

Question 94

Which of the following employee roles is responsible for protecting an organization's collected personal information?

  1. CTO
  2. DPO
  3. CEO
  4. DBA

Question 95

Against the recommendation of the IT security analyst, a company set all user passwords on a server as `P@55w0rD`. Upon review of the /etc/passwd file, an attacker found the following: alice:a8df3b6c4fd75f0617431fd248f35191df8d237f bob:2d250c5b2976b03d757f324ebd59340df96aa05e chris:ea981ec3285421d014108089f3f3f997ce0f4150 Which of the following BEST explains why the encrypted passwords do not match?

  1. Perfect forward secrecy
  2. Key stretching
  3. Salting
  4. Hashing