SY0-601

SY0-601 practice questions, page 6 of 35, with answer review and explanations.

Question 26

A security engineer is deploying a new wireless network for a company. The company shares office space with multiple tenants. Which of the following should the engineer configure on the wireless network to ensure that confidential data is not exposed to unauthorized users?

  1. EAP
  2. TLS
  3. HTTPS
  4. AES

Question 27

The Chief Compliance Officer from a bank has approved a background check policy for all new hires. Which of the following is the policy MOST likely protecting against?

  1. Preventing any current employees' siblings from working at the bank to prevent nepotism
  2. Hiring an employee who has been convicted of theft to adhere to industry compliance
  3. Filtering applicants who have added false information to resumes so they appear better qualified
  4. Ensuring no new hires have worked at other banks that may be trying to steal customer information

Question 28

An engineer recently deployed a group of 100 web servers in a cloud environment. Per the security policy, all web-server ports except 443 should be disabled. Which of the following can be used to accomplish this task?

  1. Application allow list
  2. SWG
  3. Host-based firewall
  4. VPN

Question 29

A technician was dispatched to complete repairs on a server in a data center. While locating the server, the technician entered a restricted area without authorization. Which of the following security controls would BEST prevent this in the future?

  1. Use appropriate signage to mark all areas.
  2. Utilize cameras monitored by guards.
  3. Implement access control vestibules.
  4. Enforce escorts to monitor all visitors.

Question 30

Which of the following would BEST provide a systems administrator with the ability to more efficiently identify systems and manage permissions and policies based on location, role, and service level?

  1. Standard naming conventions
  2. Domain services
  3. Baseline configurations
  4. Diagrams