SYO-501 Exam Dumps - Try Best SYO-501 Exam Questions from Training Expert PassCollection
Practice Examples and Dumps & Tips for 2023 Latest SYO-501 Valid Tests Dumps
NEW QUESTION # 339
A cryptographer has developed a new proprietary hash function for a company and solicited employees to test the function before recommending Its implementation. An employee takes the plaintext version of a document and hashes it, then changes the original plaintext document slightly and hashes it. and continues repeating this process until two identical hash values are produced from two different documents. Which of the following BEST describes this cryptographic attack?
- A. Replay
- B. Collision
- C. Brute force
- D. Known plaintext
Answer: B
NEW QUESTION # 340
A network technician is setting up a new branch for a company. The users at the new branch will need to access resources securely as if they were at the main location. Which of the following networking concepts would BEST accomplish this?
- A. Site-to-site VPN
- B. Virtual network segmentation
- C. Logical VLANs
- D. Physical network segmentation
- E. Out-of-band access
Answer: A
NEW QUESTION # 341
CORRECT TEXT
You have just received some room and WiFi access control recommendations from a security consulting company. Click on each building to bring up available security controls.
Please implement the following requirements:
* The Chief Executive Officer's (CEO) office had multiple redundant security measures installed on the door to the office. Remove unnecessary redundancies to deploy three- factor authentication, while retaining the expensive iris render.
* The Public Cafe has wireless available to customers. You need to secure the WAP with WPA and place a passphrase on the customer receipts.
* In the Data Center you need to include authentication from the "something you know" category and take advantage of the existing smartcard reader on the door.
* In the Help Desk Office you need to require single factor authentication through the use of physical tokens given to guests by the receptionist.
* The PII Office has redundant security measures in place. You need to eliminate the redundancy while maintaining three-factor authentication and retaining the more expensive controls.
Instructions: The original security controls for each office can be reset at anytime by selecting the Reset button. Once you have met the above requirements for each office, select the Save button.
When you have completed the entire simulation, please select the Done button to submit.
Once the simulation is submitted, please select the Next button to continue.
Answer:
Explanation:
Please refer to the Explanation part to solve this sim.
Use the following to get this sim work as :
NEW QUESTION # 342
Upon entering an incorrect password, the logon screen displays a message informing the user that the password does not match the username provided and is not the required length of 12 characters. Which of the following secure coding techniques should a security analyst address with the application developers to follow security best practices?
- A. Obfuscation
- B. Data exposure
- C. Error handling
- D. Input validation
Answer: C
NEW QUESTION # 343
For each of the given items, select the appropriate authentication category from the dropdown choices.
Instructions: When you have completed the simulation, please select the Done button to submit.
Answer:
Explanation:
Explanation
Something you are includes fingerprints, retina scans, or voice recognition.
Something you have includes smart cards, token devices, or keys.
Something you know includes a password, codes, PINs, combinations, or secret phrases. Somewhere you are including a physical location s or logical addresses, such as domain name, an IP address, or a MAC address.
Something
you do includes your typing rhythm, a secret handshake, or a private knock
http://en.wikipedia.org/wiki/Password_authentication_protocol#Working_cycle
http://en.wikipedia.org/wiki/Smart_card#Security
NEW QUESTION # 344
Which of the following is a passive method to test whether transport encryption is implemented?
- A. Black box penetration test
- B. Banner grabbing
- C. Port scan
- D. Code analysis
Answer: B
NEW QUESTION # 345
A security analyst receives the following output
Which of the following MOST likely occurred to produce this output?
- A. USB-OTG prevented a file from being uploaded to a mobile device
- B. The host DLP prevented a file from being moved off a computer
- C. The host-based firewall prevented an attack from a Trojan horse
- D. The firewall prevented an incoming malware-infected file
Answer: C
NEW QUESTION # 346
An attacker is attempting to insert malicious code into an installer file that is available on the internet. The attacker is able to gain control of the web server that houses both the installer and the web page which features information about the downloadable file. To implement the attack and delay detection, the attacker should modify both the installer file and the:
- A. The HMAC of the downloadable file available on the website
- B. MD5 hash of the file listed on the website
- C. Digital signature on the downloadable file
- D. SSL certificate on the web server
Answer: B
NEW QUESTION # 347
A security administrator is diagnosing a server where the CPU utilization is at 100% for 24 hours. The main culprit of CPU utilization is the antivirus program.
Which of the following issue could occur if left unresolved? (Select TWO)
- A. Buffer overflow
- B. Resource exhaustion
- C. MITM attack
- D. DoS attack
- E. DLL injection
Answer: B,D
NEW QUESTION # 348
A web server, which is configured to use TLS with AES-GCM-256, SHA-384, and ECDSA, recently suffered an information loss breach. Which of the following is MOST likely the cause?
- A. Weak cipher suite
- B. Insufficient key bit length
- C. Unauthenticated encryption method
- D. Poor implementation
Answer: D
NEW QUESTION # 349
A company recently experienced data exfiltration via the corporate network. In response to the breach, a security analyst recommends deploying an out-of-band IDS solution. The analyst says the solution can be implemented without purchasing any additional network hardware. Which of the following solutions will be used to deploy the IDS?
- A. Network proxy
- B. Honeypot
- C. Network tap
- D. Port mirroring
Answer: D
Explanation:
Explanation
Port Mirroring, also known as SPAN (Switched Port Analyzer), is a method of monitoring network traffic.
With port mirroring enabled, the switch sends a copy of all network packets seen on one port (or an entire VLAN) to another port, where the packet can be analyzed.
NEW QUESTION # 350
During a risk assessment, results show that a fire in one of the company's datacenters could cost up to $20 million in equipment damages and lost revenue. As a result, the company insures the datacenter for up to $20 million in damages for the cost of $30,000 a year. Which of the following risk response techniques has the company chosen?
- A. Mitigation
- B. Avoidance
- C. Acceptance
- D. Transference
Answer: D
NEW QUESTION # 351
An attacker has obtained the user ID and password of a datacenter's backup operator and has gained access to a production system. Which of the following would be the attacker's NEXT action?
- A. Initiate a confidential data exfiltration process.
- B. Perform a passive reconnaissance of the network.
- C. Look for known vulnerabilities to escalate privileges.
- D. Create an alternate user ID to maintain persistent access.
Answer: D
NEW QUESTION # 352
A new network administrator is establishing network circuit monitoring guidelines to catch potentially malicious traffic. The administrator begins monitoring the NetFlow statistics tor the critical Internet circuit and notes the following data after two weeks.
However, after checking the statistics from the weekend following the compiled statistics the administrator notices a spike in traffic to 250Mbps sustained for one hour The administrator is able to track the source of the spike to a server in the DMZ Which of the following is the next BEST course of action the administrator should take?
- A. Rerun the baseline data gathering for an additional four weeks and compare the results
- B. Consult the NetFlow logs on the NetFlow server to determine what data was being transferred
- C. Immediately open a Seventy 1 case with the security analysts to address potential data exfiltration
- D. Enable a packet capture on the firewall to catch the raw packets on the next occurrence
Answer: D
NEW QUESTION # 353
A security administrator is reviewing the following firewall configuration after receiving reports that users are unable to connect to remote websites:
Which of the following is the MOST secure solution the security administrator can implement to fix this issue?
- A. Remove the following rule from the firewall: 30 DENY FROM:ANY TO:ANY PORT:ANY
- B. Add the following rule to the firewall: 5 PERMIT FROM:ANY TO:ANY PORT:53
- C. Replace rule number 10 with the following rule: 10 PERMIT FROM:ANY TO:ANY PORT:22
- D. Insert the following rule in the firewall: 25 PERMIT FROM:ANY TO:ANY PORTS:ANY
Answer: C
NEW QUESTION # 354
A member of the human resources department is searching for candidate resumes and encounters the following error message when attempting to access popular job search websites:
Which of the following would resolve this issue without compromising the company's security policies?
- A. Remove the proxy settings from the employee's web browser.
- B. Renew the DNS settings and IP address on the employee's computer.
- C. Add the employee to a less restrictive group on the content filter.
- D. Create an exception for the job search sites in the host-based firewall on the employee's computer.
Answer: C
NEW QUESTION # 355
A company has two wireless networks utilizing captive portals. Some employees report getting a trust error in their browsers when connecting to one of the networks. Both captive portals are using the same server certificate for authentication, but the analyst notices the following differences between the two certificate details:
Certificate 1
Certificate Path:
Geotrust Global CA
*company.com
Certificate 2
Certificate Path:
*company.com
Which of the following would resolve the problem?
- A. Use a wildcard certificate.
- B. Use an extended validation certificate.
- C. Use a trust model.
- D. Use certificate chaining.
Answer: D
NEW QUESTION # 356
A security administrator needs to address the following audit recommendations for a public-facing SFTP server:
Users should be restricted to upload and download files to their own
home directories only.
Users should not be allowed to use interactive shell login.
Which of the following configuration parameters should be implemented? (Select TWO).
- A. PermitTunnel
- B. PermitTTY
- C. AllowTcpForwarding
- D. IgnoreRhosts
- E. ChrootDirectory
Answer: B,E
NEW QUESTION # 357
Due to regulatory requirements, a security analyst must implement full drive encryption on a Windows file server. Which of the following should the analyst implement on the system to BEST meet this requirement?
(Choose two.)
- A. Ensure the hardware supports TPM, and enable it in the BIOS.
- B. Enable and configure BitLocker on the drives.
- C. Enable and configure EFS on the file system.
- D. Enable and configure DFS across the file system.
- E. Ensure the hardware supports VT-X, and enable it in the BIOS.
Answer: A,B
NEW QUESTION # 358
A new intern in the purchasing department requires read access to shared documents.
Permissions are normally controlled through a group called "Purchasing", however, the purchasing group permissions allow write access.
Which of the following would be the BEST course of action?
- A. Create a new group that has only read permissions for the files.
- B. Modify all the shared files with read only permissions for the intern.
- C. Add the intern to the "Purchasing" group.
- D. Remove all permissions for the shared files.
Answer: A
NEW QUESTION # 359
An organization requires three separate factors for authentication to sensitive systems. Which of the following would BEST satisfy the requirement?
- A. Fingerprint. PIN. and mother's maiden name
- B. Password, one-time password sent to a smartphone. and text message sent to a smartphone
- C. Fingerprint. voice recognition, and password
- D. One-time password sent to a smartphone thumbprint. and home street address
Answer: D
NEW QUESTION # 360
Joe a website administrator believes he owns the intellectual property for a company invention and has been replacing image files on the company's public facing website in the DMZ. Joe is using steganography to hide stolen data.
Which of the following controls can be implemented to mitigate this type of inside threat?
- A. Stateful inspection firewall
- B. Access controls
- C. File integrity monitoring
- D. Change management
- E. Digital signatures
Answer: C
NEW QUESTION # 361
A network administrator is trying to provide the most resilient hard drive configuration in a server. With five hard drives which of the following is the MOST fault-tolerant configuration?
- A. RAID 1
- B. RAID 6
- C. RAID 5
- D. RAID 10
Answer: B
NEW QUESTION # 362
A security analyst is hardening a server with the directory services role installed. The analyst must ensure LDAP traffic cannot be monitored or sniffed and maintains compatibility with LDAP clients. Which of the following should the analyst implement to meet these requirements? (Select two.)
- A. Install and configure an SSH tunnel on the LDAP server.
- B. Ensure port 636 is open between the clients and the servers using the communication.
- C. Generate an X.509-compliant certificate that is signed by a trusted CA.
- D. Remote the LDAP directory service role from the server.
- E. Ensure port 389 is open between the clients and the servers using the communication.
Answer: A,B
NEW QUESTION # 363
......
Latest 100% Passing Guarantee - Brilliant SYO-501 Exam Questions PDF: https://www.passcollection.com/SYO-501_real-exams.html
SYO-501 Certification – Valid Exam Dumps Questions Study Guide: https://drive.google.com/open?id=1oT92kHr2arK-pMbTGZxGW1ieh5z4LvQ-
