SY0-501 Exam Dumps | Every morning, a systems administrator monitors failed login attempts on the company's log management

<< Prev Question Next Question >>

Question 300/301

Every morning, a systems administrator monitors failed login attempts on the company's log management server. The administrator notices the DBAdmin account has five failed username and/or password alerts during a ten-minute window. The systems administrator determines the user account is a dummy account used to attract attackers.
Which of the following techniques should the systems administrator implement?

A. Honeypot

B. Password cracker

C. Role-based access control

D. Rule-based access control

Question List (301q): Question 1: Which of the following BEST describes an attack where commun...; Question 2: While working on an incident, Joe, a technician, finished re...; Question 3: Six months into development, the core team assigned to imple...; Question 4: A company has two wireless networks utilizing captive portal...; Question 5: A mobile device user is concerned about geographic positioni...; Question 6: Which of the following is the proper order for logging a use...; Question 7: The Chief Security Officer (CISO) at a multinational banking...; Question 8: A home invasion occurred recently in which an intruder compr...; Question 9: Which of the following vulnerability types would the type of...; Question 10: Joe, an employee, wants to show his colleagues how much he k...; Question 11: Legal authorities notify a company that its network has been...; Question 12: An organization finds that most help desk calls are regardin...; Question 13: Which of the following could help detect trespassers in a se...; Question 14: After a user reports stow computer performance, a systems ad...; Question 15: The data backup window has expanded into the morning hours a...; Question 16: A remote user (User1) is unable to reach a newly provisioned...; Question 17: Which of the following should identify critical systems and ...; Question 18: A user is presented with the following items during the new-...; Question 19: Ann, a college professor, was recently reprimanded for posti...; Question 20: Due to regulatory requirements, a security analyst must impl...; Question 21: An organization wants to conduct secure transactions of larg...; Question 22: A Chief Information Officer (CIO) drafts an agreement betwee...; Question 23: An application was recently compromised after some malformed...; Question 24: Which of the following is a deployment concept that can be u...; Question 25: A systems administrator found a suspicious file in the root ...; Question 26: A user suspects someone has been accessing a home network wi...; Question 27: A company has a security policy that specifies all endpoint ...; Question 28: A company's user lockout policy is enabled after five unsucc...; Question 29: An information security analyst needs to work with an employ...; Question 30: A security analyst receives an alert from a WAF with the fol...; Question 31: A computer emergency response team is called at midnight to ...; Question 32: A network operations manager has added a second row of serve...; Question 33: A company exchanges information with a business partner. An ...; Question 34: Company XYZ has decided to make use of a cloud-based service...; Question 35: Which of the following types of cloud infrastructures would ...; Question 36: When attackers use a compromised host as a platform for laun...; Question 37: Technicians working with servers hosted at the company's dat...; Question 38: Which of the following security controls does an iris scanne...; Question 39: An administrator has concerns regarding the traveling sales ...; Question 40: Which of the following are MOST susceptible to birthday atta...; Question 41: An organization wants to utilize a common, Internet-based th...; Question 42: When configuring settings in a mandatory access control envi...; Question 43: A company has a data classification system with definitions ...; Question 44: A botnet has hit a popular website with a massive number of ...; Question 45: A technician is investigating a potentially compromised devi...; Question 46: A security administrator is trying to encrypt communication....; Question 47: An organization has implemented an IPSec VPN access for remo...; Question 48: A technician must configure a firewall to block external DNS...; Question 49: Which of the following controls allows a security guard to p...; Question 50: An organization's internal auditor discovers that large sums...; Question 51: Which of the following network vulnerability scan indicators...; Question 52: Which of the following allows an auditor to test proprietary...; Question 53: Joe a computer forensic technician responds to an active com...; Question 54: A company is performing an analysis of the corporate enterpr...; Question 55: A security analyst is working on a project that requires the...; Question 56: A company recently replaced its unsecure email server with a...; Question 57: Which of the following is an important step to take BEFORE m...; Question 58: A security engineer must install the same x.509 certificate ...; Question 59: A system administrator wants to implement an internal commun...; Question 60: A network administrator at a small office wants to simplify ...; Question 61: A security engineer is configuring a wireless network that m...; Question 62: Given the log output: Max 15 00:15:23.431 CRT: #SEC_LOGIN-5-...; Question 63: A new security administrator ran a vulnerability scanner for...; Question 64: Which of the following describes the key difference between ...; Question 65: Which of the following are methods to implement HA in a web ...; Question 66: A company has noticed multiple instances of proprietary info...; Question 67: Which of the following are used to increase the computing ti...; Question 68: Which of the following locations contain the MOST volatile d...; Question 69: A security administrator determined that users within the co...; Question 70: Ann a security analyst is monitoring the IDS console and not...; Question 71: A consultant has been tasked to assess a client's network. T...; Question 72: The POODLE attack is an MITM exploit that affects:...; Question 73: An organization is using a tool to perform a source code rev...; Question 74: Recently several employees were victims of a phishing email ...; Question 75: An employee receives an email, which appears to be from the ...; Question 76: A company is planning to encrypt the files in several sensit...; Question 77: An employer requires that employees use a key-generating app...; Question 78: A security administrator needs to implement a system that de...; Question 79: Which of the following is the LEAST secure hashing algorithm...; Question 80: Joe, a user, has been trying to send Ann, a different user, ...; Question 81: A security consultant discovers that an organization is usin...; Question 82: A new firewall has been places into service at an organizati...; Question 83: Joe, a user, wants to send Ann, another user, a confidential...; Question 84: Which of the following would MOST likely appear in an uncred...; Question 85: A security administrator suspects that data on a server has ...; Question 86: A security manager is creating an account management policy ...; Question 87: A security analyst is mitigating a pass-the-hash vulnerabili...; Question 88: A third-party penetration testing company was able to succes...; Question 89: Which of the following is the appropriate network structure ...; Question 90: Which of the following delineates why it is important to per...; Question 91: A small company's Chief Executive Officer (CEO) has asked it...; Question 92: An auditor has identified an access control system that can ...; Question 93: A network administrator needs to allocate a new network for ...; Question 94: Users in a corporation currently authenticate with a usernam...; Question 95: Company policy requires the use if passphrases instead if pa...; Question 96: A security analyst is reviewing the following packet capture...; Question 97: An audit has revealed that database administrators are also ...; Question 98: When systems, hardware, or software are not supported by the...; Question 99: A user typically works remotely over the holidays using a we...; Question 100: Two users need to send each other emails over unsecured chan...; Question 101: A Chief Executive Officer (CEO) suspects someone in the lab ...; Question 102: A user receives an email from ISP indicating malicious traff...; Question 103: A security analyst notices anomalous activity coming from se...; Question 104: Which of the following threats has sufficient knowledge to c...; Question 105: An organization is trying to decide which type of access con...; Question 106: Ann, a security administrator, wants to ensure credentials a...; Question 107: An attacker captures the encrypted communication between two...; Question 108: A systems administrator wants to protect data stored on mobi...; Question 109: A systems administrator has isolated an infected system from...; Question 110: Joe notices there are several user accounts on the local net...; Question 111: An active/passive configuration has an impact on:...; Question 112: Which of the following attack types BEST describes a client-...; Question 113: A security administrator learns that PII, which was gathered...; Question 114: A company is developing a new secure technology and requires...; Question 115: Which of the following differentiates a collision attack fro...; Question 116: A security analyst is inspecting the results of a recent int...; Question 117: An external attacker can modify the ARP cache of an internal...; Question 118: A Chief Information Officer (CIO) recently saw on the news t...; Question 119: A security administrator wants to implement a logon script t...; Question 120: While performing surveillance activities, an attacker determ...; Question 121: A computer on a company network was infected with a zero-day...; Question 122: A forensic investigator has run into difficulty recovering u...; Question 123: A business sector is highly competitive, and safeguarding tr...; Question 124: During a third-party audit, it is determined that a member o...; Question 125: A database backup schedule consists of weekly full backups p...; Question 126: A server administrator needs to administer a server remotely...; Question 127: Which of the following specifically describes the exploitati...; Question 128: A security analyst is securing smartphones and laptops for a...; Question 129: A company researched the root cause of a recent vulnerabilit...; Question 130: Which of the following could occur when both strong and weak...; Question 131: An organization recently moved its custom web applications t...; Question 132: A company hires a consulting firm to crawl its Active Direct...; Question 133: A software development company needs to share information be...; Question 134: Which of the following would be considered multifactor authe...; Question 135: A web server, which is configured to use TLS with AES-GCM-25...; Question 136: A hacker has a packet capture that contains: (Exhibit) Which...; Question 137: A security analyst is hardening an authentication server. On...; Question 138: A security analyst has received the following alert snippet ...; Question 139: Which of the following should be used to implement voice enc...; Question 140: An administrator has configured a new Linux server with the ...; Question 141: The administrator installs database software to encrypt each...; Question 142: Which of the following allows an application to securely aut...; Question 143: A manager wants to distribute a report to several other mana...; Question 144: A security administrator has configured a RADIUS and a TACAC...; Question 145: New magnetic locks were ordered for an entire building. In a...; Question 146: An application team is performing a load-balancing test for ...; Question 147: Before an infection was detected, several of the infected de...; Question 148: A security administrator wants to implement a company-wide p...; Question 149: A security analyst is updating a BIA document. The security ...; Question 150: Upon entering an incorrect password, the logon screen displa...; Question 151: Which of the following is the BEST choice for a security con...; Question 152: An information security specialist is reviewing the followin...; Question 153: When designing a web based client server application with si...; Question 154: Which of the following would verify that a threat does exist...; Question 155: Ann, a customer, is reporting that several important files a...; Question 156: As part of a new industry regulation, companies are required...; Question 157: A company wants to ensure confidential data from storage med...; Question 158: A security administrator suspects that a DDoS attack is affe...; Question 159: Which of the following components of printers and MFDs are M...; Question 160: A copy of a highly confidential salary report was recently f...; Question 161: A network administrator adds an ACL to allow only HTTPS conn...; Question 162: A security administrator is evaluating three different servi...; Question 163: An organization's primary datacenter is experiencing a two-d...; Question 164: A system administrator needs to implement 802.1x whereby whe...; Question 165: An incident response manager has started to gather all the f...; Question 166: A company's loss control department identifies theft as a re...; Question 167: Joe, a security administrator, needs to extend the organizat...; Question 168: During a routine vulnerability assessment, the following com...; Question 169: The help desk is receiving numerous password change alerts f...; Question 170: Which of the following types of attacks precedes the install...; Question 171: A security administrator has been tasked with improving the ...; Question 172: A technician is configuring a load balancer for the applicat...; Question 173: An analyst is reviewing a simple program for potential secur...; Question 174: A security administrator is reviewing the following PowerShe...; Question 175: Several workstations on a network are found to be on OS vers...; Question 176: A system administrator wants to provide for and enforce wire...; Question 177: A penetration tester is crawling a target website that is av...; Question 178: The availability of a system has been labeled as the highest...; Question 179: An organization needs to implement a large PKI. Network engi...; Question 180: A new intern in the purchasing department requires read acce...; Question 181: Company A agrees to provide perimeter protection, power, and...; Question 182: Which of the following would meet the requirements for multi...; Question 183: After a security incident, management is meeting with involv...; Question 184: Anne, the Chief Executive Officer (CEO), has reported that s...; Question 185: A security program manager wants to actively test the securi...; Question 186: The Chief Information Security Officer (CISO) is asking for ...; Question 187: A security administrator is diagnosing a server where the CP...; Question 188: A vulnerability scanner that uses its running service's acce...; Question 189: A workstation puts out a network request to locate another s...; Question 190: Which of the following solutions should an administrator use...; Question 191: Which of the following is the GREATEST risk to a company by ...; Question 192: A user has attempted to access data at a higher classificati...; Question 193: A security administrator needs an external vendor to correct...; Question 194: As part of a new BYOD rollout, a security analyst has been a...; Question 195: Which of the following best describes routine in which semic...; Question 196: The process of applying a salt and cryptographic hash to a p...; Question 197: An administrator is configuring access to information locate...; Question 198: A security administrator wants to configure a company's wire...; Question 199: A systems administrator is configuring a system that uses da...; Question 200: An organization has determined it can tolerate a maximum of ...; Question 201: A help desk is troubleshooting user reports that the corpora...; Question 202: Which of the following technologies would be MOST appropriat...; Question 203: An organization has several production-critical SCADA superv...; Question 204: A new hire wants to use a personally owned phone to access c...; Question 205: After a recent internal breach, a company decided to regener...; Question 206: A company wants to implement an access management solution t...; Question 207: Which of the following should a security analyst perform FIR...; Question 208: A dumpster diver recovers several hard drives from a company...; Question 209: An attacker compromises a public CA and issues unauthorized ...; Question 210: A security engineer wants to implement a site-to-site VPN th...; Question 211: A Chief Information Security Officer (CISO) has tasked a sec...; Question 212: Two users must encrypt and transmit large amounts of data be...; Question 213: A security engineer is configuring a system that requires th...; Question 214: Which of the following metrics are used to calculate the SLE...; Question 215: Which of the following cryptographic algorithms is irreversi...; Question 216: A company determines that it is prohibitively expensive to b...; Question 217: Which of the following cryptographic attacks would salting o...; Question 218: A malicious system continuously sends an extremely large num...; Question 219: A number of employees report that parts of an ERP applicatio...; Question 220: An organization has hired a penetration tester to test the s...; Question 221: The help desk received a call after hours from an employee w...; Question 222: A security technician is configuring an access management sy...; Question 223: Which of the following best describes the initial processing...; Question 224: A technician has installed new vulnerability scanner softwar...; Question 225: Which of the following penetration testing concepts is being...; Question 226: Which of the following is a document that contains detailed ...; Question 227: A cybersecurity analyst is looking into the payload of a ran...; Question 228: Audit logs from a small company's vulnerability scanning sof...; Question 229: A web developer improves client access to the company's REST...; Question 230: A security analyst reviews the following output: (Exhibit) T...; Question 231: After a merger between two companies a security analyst has ...; Question 232: An administrator discovers the following log entry on a serv...; Question 233: An analyst wants to implement a more secure wireless authent...; Question 234: A supervisor in your organization was demoted on Friday afte...; Question 235: Ann, a user, reports she is unable to access an application ...; Question 236: A security administrator has been assigned to review the sec...; Question 237: An auditor is reviewing the following output from a password...; Question 238: In a corporation where compute utilization spikes several ti...; Question 239: Ann is the IS manager for several new systems in which the c...; Question 240: An organization plans to implement multifactor authenticatio...; Question 241: During an application design, the development team specifics...; Question 242: An organization is moving its human resources system to a cl...; Question 243: An external contractor, who has not been given information a...; Question 244: When performing data acquisition on a workstation, which of ...; Question 245: When generating a request for a new x.509 certificate for se...; Question 246: Ann, a security administrator, has been instructed to perfor...; Question 247: The security administrator receives an email on a non-compan...; Question 248: A forensic expert is given a hard drive from a crime scene a...; Question 249: The Chief Executive Officer (CEO) of a major defense contrac...; Question 250: A chief Financial Officer (CFO) has asked the Chief Informat...; Question 251: A business has recently deployed laptops to all sales employ...; Question 252: The IT department needs to prevent users from installing unt...; Question 253: A security analyst is acquiring data from a potential networ...; Question 254: Which of the following is commonly used for federated identi...; Question 255: A datacenter recently experienced a breach. When access was ...; Question 256: Which of the following is the BEST explanation of why contro...; Question 257: A security administrator is tasked with implementing central...; Question 258: Joe, a technician, is working remotely with his company prov...; Question 259: A security engineer is faced with competing requirements fro...; Question 260: A member of the admins group reports being unable to modify ...; Question 261: An attacker exploited a vulnerability on a mail server using...; Question 262: Phishing emails frequently take advantage of high-profile ca...; Question 263: A company is terminating an employee for misbehavior. Which ...; Question 264: Which of the following is an asymmetric function that genera...; Question 265: A penetration testing is preparing for a client engagement i...; Question 266: A website administrator has received an alert from an applic...; Question 267: A systems administrator is attempting to recover from a cata...; Question 268: A security analyst is investigating a suspected security bre...; Question 269: A company wants to ensure that the validity of publicly trus...; Question 270: A security analyst is investigating a potential breach. Upon...; Question 271: Which of the following can affect electrostatic discharge in...; Question 272: A penetration tester finds that a company's login credential...; Question 273: A company is deploying a new VoIP phone system. They require...; Question 274: Which of the following encryption methods does PKI typically...; Question 275: Which of the following is the BEST reason to run an untested...; Question 276: Following the successful response to a data-leakage incident...; Question 277: A user needs to send sensitive information to a colleague us...; Question 278: A security analyst is diagnosing an incident in which a syst...; Question 279: A system administrator wants to provide balance between the ...; Question 280: A system's administrator has finished configuring firewall A...; Question 281: A security analyst has been asked to perform a review of an ...; Question 282: Joe is exchanging encrypted email with another party. Joe en...; Question 283: A portable data storage device has been determined to have m...; Question 284: A security analyst is reviewing the following output from an...; Question 285: A security administrator has written a script that will auto...; Question 286: Which of the following is the BEST reason for salting a pass...; Question 287: A global gaming console manufacturer is launching a new gami...; Question 288: A wireless network has the following design requirements: Au...; Question 289: The security administrator has noticed cars parking just out...; Question 290: Which of the following must be intact for evidence to be adm...; Question 291: Which of the following types of penetration test will allow ...; Question 292: An audit takes place after company-wide restricting, in whic...; Question 293: A member of a digital forensics team, Joe arrives at a crime...; Question 294: A software developer is concerned about DLL hijacking in an ...; Question 295: After an identified security breach, an analyst is tasked to...; Question 296: Which of the following precautions MINIMIZES the risk from n...; Question 297: An attacker uses a network sniffer to capture the packets of...; Question 298: Ann, a user, states that her machine has been behaving errat...; Question 299: A technician receives a device with the following anomalies:...; Question 300: Every morning, a systems administrator monitors failed login...; Question 301: A vulnerability scan is being conducted against a desktop sy...

Question 300/301

LEAVE A REPLY

Download PDF File