SY0-601

SY0-601 practice questions, page 28 of 35, with answer review and explanations.

Question 136

A company is considering transitioning to the cloud. The company employs individuals from various locations around the world. The company does not want to increase its on premises infrastructure blueprint and only wants to pay for additional compute power required. Which of the following solutions would BEST meet the needs of the company?

  1. Private cloud
  2. Hybrid environment
  3. Managed security service provider
  4. Hot backup site

Question 137

After multiple on premises security solutions were migrated to the cloud, the incident response time increased. The analysts are spending a long time trying to trace information on different cloud consoles and correlating data in different formats. Which of the following can be used to optimize the incident response time?

  1. CASB
  2. VPC
  3. SWG
  4. CMS

Question 138

Which of the following control types would be BEST to use in an accounting department to reduce losses from fraudulent transactions?

  1. Recovery
  2. Deterrent
  3. Corrective
  4. Detective

Question 139

A company is receiving emails with links to phishing sites that look very similar to the company's own website address and content. Which of the following is the BEST way for the company to mitigate this attack?

  1. Create a honeynet to trap attackers who access the VPN with credentials obtained by phishing.
  2. Generate a list of domains similar to the company's own and implement a DNS sinkhole for each.
  3. Disable POP and IMAP on all Internet-facing email servers and implement SMTPS.
  4. Use an automated tool to flood the phishing websites with fake usernames and passwords.

Question 140

A SOC operator is receiving continuous alerts from multiple Linux systems indicating that unsuccessful SSH attempts to a functional user ID have been attempted on each one of them in a short period of time. Which of the following BEST explains this behavior?

  1. Rainbow table attack
  2. Password spraying
  3. Logic bomb
  4. Malware bot