SY0-601

SY0-601 practice questions, page 24 of 35, with answer review and explanations.

Question 116

Which of the following is an example of transference of risk?

  1. Purchasing insurance
  2. Patching vulnerable servers
  3. Retiring outdated applications
  4. Application owner risk sign-off

Question 117

An employee received a word processing file that was delivered as an email attachment. The subject line and email content enticed the employee to open the attachment. Which of the following attack vectors BEST matches this malware?

  1. Embedded Python code
  2. Macro-enabled file
  3. Bash scripting
  4. Credential-harvesting website

Question 118

A security proposal was set up to track requests for remote access by creating a baseline of the users' common sign-in properties. When a baseline deviation is detected, an MFA challenge will be triggered. Which of the following should be configured in order to deploy the proposal?

  1. Context-aware authentication
  2. Simultaneous authentication of equals
  3. Extensive authentication protocol
  4. Agentless network access control

Question 119

Which of the following secure coding techniques makes compromised code more difficult for hackers to use?

  1. Obfuscation
  2. Normalization
  3. Execution
  4. Reuse

Question 120

As part of a security compliance assessment, an auditor performs automated vulnerability scans. In addition, which of the following should the auditor do to complete the assessment?

  1. User behavior analysis
  2. Packet captures
  3. Configuration reviews
  4. Log analysis