SY0-601

SY0-601 practice questions, page 30 of 35, with answer review and explanations.

Question 146

Which of the following is the MOST relevant security check to be performed before embedding third-party libraries in developed code?

  1. Check to see if the third party has resources to create dedicated development and staging environments.
  2. Verify the number of companies that downloaded the third-party code and the number of contributions on the code repository.
  3. Assess existing vulnerabilities affecting the third-party code and the remediation efficiency of the libraries' developers.
  4. Read multiple penetration-testing reports for environments running software that reused the library.

Question 147

A help desk technician receives an email from the Chief Information Officer (CIO) asking for documents. The technician knows the CIO is on vacation for a few weeks. Which of the following should the technician do to validate the authenticity of the email?

  1. Check the metadata in the email header of the received path in reverse order to follow the email's path.
  2. Hover the mouse over the CIO's email address to verify the email address.
  3. Look at the metadata in the email header and verify the ג€From:ג€ line matches the CIO's email address.
  4. Forward the email to the CIO and ask if the CIO sent the email requesting the documents.

Question 148

A company needs to validate its updated incident response plan using a real-world scenario that will test decision points and relevant incident response actions without interrupting daily operations. Which of the following would BEST meet the company's requirements?

  1. Red-team exercise
  2. Capture-the-flag exercise
  3. Tabletop exercise
  4. Phishing exercise

Question 149

Security analysts are conducting an investigation of an attack that occurred inside the organization's network. An attacker was able to collect network traffic between workstations throughout the network. The analysts review the following logs: The Layer 2 address table has hundreds of entries similar to the ones above. Which of the following attacks has MOST likely occurred?

  1. SQL injection
  2. DNS spoofing
  3. MAC flooding
  4. ARP poisoning

Question 150

A security policy states that common words should not be used as passwords. A security auditor was able to perform a dictionary attack against corporate credentials. Which of the following controls was being violated?

  1. Password complexity
  2. Password history
  3. Password reuse
  4. Password length