SY0-601

SY0-601 practice questions, page 20 of 35, with answer review and explanations.

Question 96

After gaining access to a dual-homed (i.e., wired and wireless) multifunction device by exploiting a vulnerability in the device's firmware, a penetration tester then gains shell access on another networked asset. This technique is an example of:

  1. privilege escalation.
  2. footprinting.
  3. persistence.
  4. pivoting.

Question 97

Which of the following should be monitored by threat intelligence researchers who search for leaked credentials?

  1. Common Weakness Enumeration
  2. OSINT
  3. Dark web
  4. Vulnerability databases

Question 98

A security analyst needs to be able to search and correlate logs from multiple sources in a single tool. Which of the following would BEST allow a security analyst to have this ability?

  1. SOAR
  2. SIEM
  3. Log collectors
  4. Network-attached storage

Question 99

A security analyst is investigating suspicious traffic on the web server located at IP address 10.10.1.1. A search of the WAF logs reveals the following output: Which of the following is MOST likely occurring?

  1. XSS attack
  2. SQLi attack
  3. Replay attack
  4. XSRF attack

Question 100

Which of the following components can be used to consolidate and forward inbound internet traffic to multiple cloud environments though a single firewall?

  1. Transit gateway
  2. Cloud hot site
  3. Edge computing
  4. DNS sinkhole