SYO-601 Domain 1 Practice Questions 1-30

A Chief Security Officer (CSO) is concerned that cloud-based services are not adequately

protected from advanced threats and malware The CSO believes there is a high risk that

a data breach could occur in the near future due to the lack of detective and preventive

controls Which of the following should be implemented to BEST address the CSO's

concerns? {Select TWO)

• AWAF

• Containerization

• An NG-SWG

• Segmentation

• ACASB

Which of the following is a targeted attack aimed at compromising users within a

specific industry or group?

• Watering hole

• Typosquatting

• Hoax

• Impersonation

A global pandemic is forcing a private organization to close some business units and reduce staffing at others. Which of the following would be BEST to help the

organization’s executives determine the next course of action?

• An incident response plan

• A communication’s plan

• A disaster recovery plan

• A business continuity plan

A major political party experienced a server breach. The hacker then publicly posted stolen intimal communications concerning campaign strategies to give the opposition party an advantage. Which of the following BEST describes these threat actors?

• Semi-authorized hackers

• State actors

• Script kiddies

• Advanced persistent threats

A security analyst is reviewing application logs to determine the source of a breach and locates the following log:

https://www.comptia.com/login.php?id=’%20or%20’1’1=’1

Which Of the following has been observed?

• DLL Injection

• API attack

• SQLI

• XSS

A security Analyst was asked to investigate a situation after SOC started to receive alerts from the SIEM. The analyst first looks at the domain controller and finds the following events at the left:

Based on the analyst findings, which of the following attacks is being executed?

• credential harvesting

• keylogger

• brute-force

• spraying

A security analyst is performing a forensic investigation compromised account

credentials. Using the Event Viewer, the analyst able to detect the following message, ‘’Special privileges assigned to new login.’’ Several of these messages did not have a valid logon associated with the user before these privileges were assigned. Which of the following attacks is MOST likely being detected?

• Pass-the-hash

• Buffer overflow

• Cross-site scripting

• Session replay

Administrators have allowed employees to access their company email from personal computers. However, the administrators are concerned that these computers are another attack Surface and can result in user accounts being breached by foreign actors. Which of the following actions would provide the MOST secure solution?

• Enable an option in the administration center so accounts can be locked if they

  are accessed from different geographical areas.

• Implement a 16-character minimum length and 30-day expiration password

  policy.

• Set up a global mail rule to disallow the forwarding of any company email to

  email addresses outside the organization,

• Enforce a policy that allows employees to be able to access their email only while

  they are connected to the Internet via VPN.

A security administrator checks the table of a network switch, which shows the following output. Which of the following is happening to this switch?

• MAC flooding

• DMS poisoning

• MAC cloning

• ARP poisoing

After a phishing scam for 9 user's credentials, the red team was able to craft a payload to deploy on @ server. The attack allowed the installation of malicious software that initiates @ new remote session. Which of the following types of attacks has occurred?

• Privilege escalation

• Session replay

• Application programming interface

• Directory traversal