SY0-601

SY0-601 practice questions, page 22 of 35, with answer review and explanations.

Question 106

A systems administrator is troubleshooting a server's connection to an internal web server. The administrator needs to determine the correct ports to use. Which of the following tools BEST shows which ports on the web server are in a listening state?

  1. ipconfig
  2. ssh
  3. ping
  4. netstat

Question 107

Which of the following BEST reduces the security risks introduced when running systems that have expired vendor support and lack an immediate replacement?

  1. Implement proper network access restrictions.
  2. Initiate a bug bounty program.
  3. Classify the system as shadow IT.
  4. Increase the frequency of vulnerability scans.

Question 108

Due to unexpected circumstances, an IT company must vacate its main office, forcing all operations to alternate, off-site locations. Which of the following will the company MOST likely reference for guidance during this change?

  1. The business continuity plan
  2. The retention policy
  3. The disaster recovery plan
  4. The incident response plan

Question 109

While reviewing an alert that shows a malicious request on one web application, a cybersecurity analyst is alerted to a subsequent token reuse moments later on a different service using the same single sign-on method. Which of the following would BEST detect a malicious actor?

  1. Utilizing SIEM correlation engines
  2. Deploying Netflow at the network border
  3. Disabling session tokens for all sites
  4. Deploying a WAF for the web server

Question 110

Two organizations plan to collaborate on the evaluation of new SIEM solutions for their respective companies. A combined effort from both organizations' SOC teams would speed up the effort. Which of the following can be written to document this agreement?

  1. MOU
  2. ISA
  3. SLA
  4. NDA