SY0-601

SY0-601 practice questions, page 7 of 35, with answer review and explanations.

Question 31

Which of the following would detect intrusions at the perimeter of an airport?

  1. Signage
  2. Fencing
  3. Motion sensors
  4. Lighting
  5. Bollards

Question 32

A security analyst is concerned about critical vulnerabilities that have been detected on some applications running inside containers. Which of the following is the BEST remediation strategy?

  1. Update the base container Image and redeploy the environment.
  2. Include the containers in the regular patching schedule for servers.
  3. Patch each running container individually and test the application.
  4. Update the host in which the containers are running.

Question 33

An organization has decided to purchase an insurance policy because a risk assessment determined that the cost to remediate the risk is greater than the five- year cost of the insurance policy. The organization is enabling risk:

  1. avoidance.
  2. acceptance.
  3. mitigation.
  4. transference.

Question 34

A security analyst receives an alert from the company's SIEM that anomalous activity is coming from a local source IP address of 192.168.34.26. The Chief Information Security Officer asks the analyst to block the originating source. Several days later, another employee opens an internal ticket stating that vulnerability scans are no longer being performed properly. The IP address the employee provides is 192.168.34.26. Which of the following describes this type of alert?

  1. True negative
  2. True positive
  3. False positive
  4. False negative

Question 35

A security analyst wants to reference a standard to develop a risk management program. Which of the following is the BEST source for the analyst to use?

  1. SSAE SOC 2
  2. ISO 31000
  3. NIST CSF
  4. GDPR