SY0-601

SY0-601 practice questions, page 8 of 35, with answer review and explanations.

Question 36

The Chief Information Security Officer (CISO) requested a report on potential areas of improvement following a security incident. Which of the following incident response processes is the CISO requesting?

  1. Lessons learned
  2. Preparation
  3. Detection
  4. Containment
  5. Root cause analysis

Question 37

A company is providing security awareness training regarding the importance of not forwarding social media messages from unverified sources. Which of the following risks would this training help to prevent?

  1. Hoaxes
  2. SPIMs
  3. Identity fraud
  4. Credential harvesting

Question 38

A security analyst is receiving numerous alerts reporting that the response time of an internet-facing application has been degraded. However, the internal network performance was not degraded. Which of the following MOST likely explains this behavior?

  1. DNS poisoning
  2. MAC flooding
  3. DDoS attack
  4. ARP poisoning

Question 39

Which of the following will increase cryptographic security?

  1. High data entropy
  2. Algorithms that require less computing power
  3. Longer key longevity
  4. Hashing

Question 40

Which of the following statements BEST describes zero-day exploits?

  1. When a zero-day exploit is discovered, the system cannot be protected by any means.
  2. Zero-day exploits have their own scoring category in CVSS.
  3. A zero-day exploit is initially undetectable, and no patch for it exists.
  4. Discovering zero-day exploits is always performed via bug bounty programs.