SY0-601

SY0-601 practice questions, page 33 of 35, with answer review and explanations.

Question 161

Users are presented with a banner upon each login to a workstation. The banner mentions that users are not entitled to any reasonable expectation of privacy and access is for authorized personnel only. In order to proceed past that banner, users must click the OK button. Which of the following is this an example of?

  1. AUP
  2. NDA
  3. SLA
  4. MOU

Question 162

The Chief Information Security Officer is concerned about employees using personal email rather than company email to communicate with clients and sending sensitive business information and PII. Which of the following would be the BEST solution to install on the employees' workstations to prevent information from leaving the company's network?

  1. HIPS
  2. DLP
  3. HIDS
  4. EDR

Question 163

On the way into a secure building, an unknown individual strikes up a conversation with an employee. The employee scans the required badge at the door while the unknown individual holds the door open, seemingly out of courtesy, for the employee. Which of the following social engineering techniques is being utilized?

  1. Shoulder surfing
  2. Watering-hole attack
  3. Tailgating
  4. Impersonation

Question 164

Two hospitals merged into a single organization. The privacy officer requested a review of all records to ensure encryption was used during record storage, in compliance with regulations. During the review, the officer discovered that medical diagnosis codes and patient names were left unsecured. Which of the following types of data does this combination BEST represent?

  1. Personal health information
  2. Personally identifiable information
  3. Tokenized data
  4. Proprietary data

Question 165

A company discovered that terabytes of data have been exfiltrated over the past year after an employee clicked on an email link. The threat continued to evolve and remain undetected until a security analyst noticed an abnormal amount of external connections when the employee was not working. Which of the following is the MOST likely threat actor?

  1. Shadow IT
  2. Script kiddies
  3. APT
  4. Insider threat