SY0-601

SY0-601 practice questions, page 29 of 35, with answer review and explanations.

Question 141

A tax organization is working on a solution to validate the online submission of documents. The solution should be carried on a portable USB device that should be inserted on any computer that is transmitting a transaction securely. Which of the following is the BEST certificate for these requirements?

  1. User certificate
  2. Self-signed certificate
  3. Computer certificate
  4. Root certificate

Question 142

A routine audit of medical billing claims revealed that several claims were submitted without the subscriber's knowledge. A review of the audit logs for the medical billing company's system indicated a company employee downloaded customer records and adjusted the direct deposit information to a personal bank account. Which of the following does this action describe?

  1. Insider threat
  2. Social engineering
  3. Third-party risk
  4. Data breach

Question 143

A recent audit cited a risk involving numerous low-criticality vulnerabilities created by a web application using a third-party library. The development staff state there are still customers using the application even though it is end of life and it would be a substantial burden to update the application for compatibility with more secure libraries. Which of the following would be the MOST prudent course of action?

  1. Accept the risk if there is a clear road map for timely decommission.
  2. Deny the risk due to the end-of-life status of the application.
  3. Use containerization to segment the application from other applications to eliminate the risk.
  4. Outsource the application to a third-party developer group.

Question 144

A security analyst is evaluating solutions to deploy an additional layer of protection for a web application. The goal is to allow only encrypted communications without relying on network devices. Which of the following can be implemented?

  1. HTTP security header
  2. DNSSEC implementation
  3. SRTP
  4. S/MIME

Question 145

A company labeled some documents with the public sensitivity classification. This means the documents can be accessed by:

  1. employees of other companies and the press.
  2. all members of the department that created the documents.
  3. only the company's employees and those listed in the document.
  4. only the individuals listed in the documents.