SY0-601

SY0-601 practice questions, page 25 of 35, with answer review and explanations.

Question 121

A database administrator wants to grant access to an application that will be reading and writing data to a database. The database is shared by other applications also used by the finance department. Which of the following account types is MOST appropriate for this purpose?

  1. Service
  2. Shared
  3. Generic
  4. Admin

Question 122

A security analyst generated a file named host1.pcap and shared it with a team member who is going to use it for further incident analysis. Which of the following tools will the other team member MOST likely use to open this file?

  1. Autopsy
  2. Memdump
  3. FTK imager
  4. Wireshark

Question 123

An application developer accidentally uploaded a company's code-signing certificate private key to a public web server. The company is concerned about malicious use of its certificate. Which of the following should the company do FIRST?

  1. Delete the private key from the repository.
  2. Verify the public key is not exposed as well.
  3. Update the DLP solution to check for private keys.
  4. Revoke the code-signing certificate.

Question 124

An organization implemented a process that compares the settings currently configured on systems against secure configuration guidelines in order to identify any gaps. Which of the following control types has the organization implemented?

  1. Compensating
  2. Corrective
  3. Preventive
  4. Detective

Question 125

The Chief Information Security Officer directed a risk reduction in shadow IT and created a policy requiring all unsanctioned high-risk SaaS applications to be blocked from user access. Which of the following is the BEST security solution to reduce this risk?

  1. CASB
  2. VPN concentrator
  3. MFA
  4. VPC endpoint