Get Certified Get Ahead SY0-601 Chapter 4-6 Questions

A HIDS reported a vulnerability on a system based on a known attack. After researching the alert from the HIDS, you identify the recommended solution and begin applying it. What type of HIDS is in use?

• Network-based

• Signature-based

• Heuristic-based

• Anomaly-based

You are preparing to deploy a heuristic-based detection system to monitor network activity. Which of the following would you create first?

• BPDU guard

• Signatures

• Baseline

• Honeypot

Lenny noticed a significant number of logon failures for administrator accounts on the organization's public website. After investigating it further, he notices that most of these attempts are from IP addresses assigned to foreign countries. He wants to implement a solution that will detect and prevent similar attacks. Which of the following is the BEST choice?

• Implement a passive NIDS

• Block all traffic from foreign countries

• Implement an inline NIPS

• Disable the administrator accounts

Lisa created a document called password.txt and put the usernames of two accounts with elevated privileges. She then placed the file on her administrator account desktop on several servers. Which of the following BEST explains her actions?

• She can use this file to retrieve the passwords if she forgets them

• This file will divert attackers from the live network

• The document is a honeyfile

• The file is needed by an application to run when the system starts.

Your organization is planning to upgrade the wireless network used by employees. It will provide encrypted authentication of wireless users over TLS. Which of the following protocols are they MOST likely implementing?

• EAP

• PEAP

• WPA2

• WPA3

Lisa is creating a detailed diagram of wireless access points and hotspots within your organization. What is another name for this?

• Remote access VPN

• Wireless footprinting

• Channel overlap map

• Architectural diagram

You are assisting a small business owner in setting up a public wireless hotspot for her customers. She wants to allow customers to access the hotspot without entering a password. Which of the following is MOST appropriate for this hotspot?

• Use Open mode

• Use a PSK

• Use Enterprise mode

• Disable SSID broadcast

A network administrator routinely tests the network looking for vulnerabilities. He recently discovered a new access point set to open. After connecting to it, he found he was able to access network resources. What is the BEST explanation for this device?

• Evil twin

• A Raspberry Pi device

• Rogue AP

• APT

Mobile users in your network report that they frequently lose connectivity with the wireless network on some days, but they don't have any problems on other days. You suspect this is due to an attack. Which of the following attacks is MOST likely to cause these symptoms?

• Wireless jamming attacks

• IV attack

• Replay attack

• Bluesnarfing attack

An attacker can access email contact lists on your smartphone. What type of attack is this?

• Bluesnarfing

• Bluejacking

• Captive portal

• WPS