SY0-601 practice questions, page 3 of 35, with answer review and explanations.
Question 11
Which of the following is an effective tool to stop or prevent the exfiltration of data from a network?
DLP
NIDS
TPM
FDE
Question 12
Several attempts have been made to pick the door lock of a secure facility. As a result, the security engineer has been assigned to implement a stronger preventative access control. Which of the following would BEST complete the engineer's assignment?
Replacing the traditional key with an RFID key
Installing and monitoring a camera facing the door
Setting motion-sensing lights to illuminate the door on activity
Surrounding the property with fencing and gates
Question 13
Which of the following can be used by a monitoring tool to compare values and detect password leaks without providing the actual credentials?
Hashing
Tokenization
Masking
Encryption
Question 14
A security engineer is building a file transfer solution to send files to a business partner. The users would like to drop off the files in a specific directory and have the server send the file to the business partner. The connection to the business partner is over the internet and needs to be secure. Which of the following can be used?
S/MIME
LDAPS
SSH
SRTP
Question 15
An administrator needs to protect user passwords and has been advised to hash the passwords. Which of the following BEST describes what the administrator is being advised to do?
Perform a mathematical operation on the passwords that will convert them into unique strings.
Add extra data to the passwords so their length is increased, making them harder to brute force.
Store all passwords in the system in a rainbow table that has a centralized location.
Enforce the use of one-time passwords that are changed for every login session.