SY0-601

SY0-601 practice questions, page 34 of 35, with answer review and explanations.

Question 166

An untrusted SSL certificate was discovered during the most recent vulnerability scan. A security analyst determines the certificate is signed properly and is a valid wildcard. This same certificate is installed on the other company servers without issue. Which of the following is the MOST likely reason for this finding?

  1. The required intermediate certificate is not loaded as part of the certificate chain.
  2. The certificate is on the CRL and is no longer valid.
  3. The corporate CA has expired on every server, causing the certificate to fail verification.
  4. The scanner is incorrectly configured to not trust this certificate when detected on the server.

Question 167

A company wants to improve end users' experiences when they log in to a trusted partner website. The company does not want the users to be issued separate credentials for the partner website. Which of the following should be implemented to allow users to authenticate using their own credentials to log in to the trusted partner's website?

  1. Directory service
  2. AAA server
  3. Federation
  4. Multifactor authentication

Question 168

A company is under investigation for possible fraud. As part of the investigation, the authorities need to review all emails and ensure data is not deleted. Which of the following should the company implement to assist in the investigation?

  1. Legal hold
  2. Chain of custody
  3. Data loss prevention
  4. Content filter

Question 169

A user wanted to catch up on some work over the weekend but had issues logging in to the corporate network using a VPN. On Monday, the user opened a ticket for this issue but was able to log in successfully. Which of the following BEST describes the policy that is being implemented?

  1. Time-based logins
  2. Geofencing
  3. Network location
  4. Password history

Question 170

A major political party experienced a server breach. The hacker then publicly posted stolen internal communications concerning campaign strategies to give the opposition party an advantage. Which of the following BEST describes these threat actors?

  1. Semi-authorized hackers
  2. State actors
  3. Script kiddies
  4. Advanced persistent threats