SY0-601 Exam Dumps | A security analyst is reviewing a penetration-testing report from a third-party contractor. The penetration

<< Prev Question Next Question >>

Question 114/202

A security analyst is reviewing a penetration-testing report from a third-party contractor. The penetration testers used the organization's new API to bypass a driver to perform privilege escalation on the organization's web servers. Upon looking at the API, the security analyst realizes the particular API call was to a legacy system running an outdated OS. Which of the following is the MOST likely attack type?

A. Session replay

B. Request forgery

C. DLL injection

D. Shimming

Question List (202q): Question 1: A system administrator needs to implement an access control ...; Question 2: A security analyst needs to implement an MDM solution for BY...; Question 3: Which of the following would BEST identify and remediate a d...; Question 4: A security analyst Is hardening a Linux workstation and must...; Question 5: During a recent penetration test, the tester discovers large...; Question 6: Several universities are participating in a collaborative re...; Question 7: Accompany deployed a WiFi access point in a public area and ...; Question 8: An organization has implemented a two-step verification proc...; Question 9: A small business just recovered from a ransomware attack aga...; Question 10: A network engineer has been asked to investigate why several...; Question 11: An organization recently discovered that a purchasing office...; Question 12: Which of the following is MOST likely to outline the roles a...; Question 13: Administrators have allowed employee to access their company...; Question 14: A Chief Security Officer (CSO) is concerned about the volume...; Question 15: An employee has been charged with fraud and is suspected of ...; Question 16: A company recently set up an e-commerce portal to sell its p...; Question 17: Which of the following is the MOST likely reason for securin...; 1 commentQuestion 18: A company's Chief Information Office (CIO) is meeting with t...; Question 19: An organization wants to implement a third factor to an exis...; Question 20: A security analyst has received several reports of an issue ...; Question 21: The Chief Technology Officer of a local college would like v...; Question 22: A network administrator has been asked to install an IDS to ...; Question 23: A company uses specially configured workstations tor any wor...; Question 24: A security analyst has been tasked with creating a new WiFi ...; Question 25: A company recently moved sensitive videos between on-premise...; Question 26: Ann, a customer, received a notification from her mortgage c...; Question 27: Which of the following should be put in place when negotiati...; Question 28: Certain users are reporting their accounts are being used to...; Question 29: A remote user recently took a two-week vacation abroad and b...; Question 30: A company recently experienced an attack during which its ma...; Question 31: A company was compromised, and a security analyst discovered...; Question 32: Which of the following BEST reduces the security risks intro...; Question 33: A company recently transitioned to a strictly BYOD culture d...; Question 34: After reading a security bulletin, a network security manage...; Question 35: Which of the following would a European company interested i...; Question 36: An analyst Is generating a security report for the managemen...; Question 37: A security forensics analyst is examining a virtual server. ...; Question 38: In the middle of a cybersecurity, a security engineer remove...; Question 39: After installing a Windows server, a cybersecurity administr...; Question 40: A security analyst needs to perform periodic vulnerably scan...; Question 41: An engineer is setting up a VDI environment for a factory lo...; Question 42: Which of the following is MOST likely to contain ranked and ...; Question 43: Which of the following is a detective and deterrent control ...; Question 44: A security proposal was set up to track requests for remote ...; Question 45: An analyst just discovered an ongoing attack on a host that ...; Question 46: A public relations team will be taking a group of guest on a...; Question 47: To reduce costs and overhead, an organization wants to move ...; Question 48: A Chief Information Security Officer (CISO) is evaluating th...; Question 49: A company needs to centralize its logs to create a baseline ...; Question 50: An organization's corporate offices were destroyed due to a ...; Question 51: A pharmaceutical sales representative logs on to a laptop an...; Question 52: A Chief Information Security Officer (CISO) needs to create ...; Question 53: Users have been issued smart cards that provide physical acc...; Question 54: A security analyst reviews the datacenter access logs for a ...; Question 55: A smart switch has the ability to monitor electrical levels ...; Question 56: A forensics examiner is attempting to dump password cached i...; Question 57: A security administrator needs to inspect in-transit files o...; Question 58: A user enters a password to log in to a workstation and is t...; Question 59: An attacker was easily able to log in to a company's securit...; Question 60: Which of the following environments typically hosts the curr...; Question 61: An organization has hired a red team to simulate attacks on ...; Question 62: A host was infected with malware. During the incident respon...; Question 63: An enterprise needs to keep cryptographic keys in a safe man...; Question 64: DDoS attacks are causing an overload on the cluster of cloud...; Question 65: Which of the following policies would help an organization i...; Question 66: In which of the following common use cases would steganograp...; Question 67: A systems analyst determines the source of a high number of ...; Question 68: A client sent several inquiries to a project manager about t...; Question 69: Which of the following would satisfy three-factor authentica...; Question 70: A security analyst has received an alert about being sent vi...; Question 71: An attacker is exploiting a vulnerability that does not have...; Question 72: A small company that does not have security staff wants to i...; Question 73: Which of the following is the purpose of a risk register?...; Question 74: Which of the following often operates in a client-server arc...; Question 75: An organization is having difficulty correlating events from...; Question 76: A security manager runs Nessus scans of the network after ev...; Question 77: Which of the following incident response steps involves acti...; Question 78: An organization has various applications that contain sensit...; Question 79: A500 is implementing an insider threat detection program, Th...; Question 80: Which of the following algorithms has the SMALLEST key size?...; Question 81: As part of the lessons-learned phase, the SOC is tasked with...; Question 82: A security researcher has alerted an organization that its s...; Question 83: A user reports constant lag and performance issues with the ...; Question 84: A document that appears to be malicious has been discovered ...; Question 85: Which of the following will MOST likely cause machine learni...; Question 86: A systems analyst is responsible for generating a new digita...; Question 87: Which of the following will MOST likely adversely impact the...; Question 88: Which of the following are requirements that must be configu...; Question 89: A systems analyst is responsible for generating a new digita...; Question 90: A recent security breach exploited software vulnerabilities ...; Question 91: A cloud administrator is configuring five compute instances ...; Question 92: An organization hired a consultant to assist with an active ...; Question 93: The chief compliance officer from a bank has approved a back...; Question 94: Which of the following is a risk that is specifically associ...; Question 95: A company recently added a DR site and is redesigning the ne...; Question 96: A external forensics investigator has been hired to investig...; Question 97: A privileged user at a company stole several proprietary doc...; Question 98: A backdoor was detected on the containerized application env...; Question 99: Under GDPR, which of the following is MOST responsible for t...; Question 100: A recent audit uncovered a key finding regarding the use of ...; Question 101: Which of the following types of attacks is specific to the i...; Question 102: Which of the following corporate policies is used to help pr...; Question 103: While investigating a data leakage incident, a security anal...; Question 104: During an investigation, a security manager receives notific...; Question 105: During an incident response, an analyst applied rules to all...; Question 106: Which of the following control sets should a well-written BC...; Question 107: Which of the following would be the BEST resource for a soft...; Question 108: Select the appropriate attack and remediation from each drop...; Question 109: A forensics investigator is examining a number of unauthoriz...; Question 110: A security administrator is setting up a SIEM to help monito...; Question 111: A newly purchased corporate WAP needs to be configured in th...; Question 112: A penetration tester was able to compromise an internal serv...; Question 113: Which of the following BEST describes the method a security ...; Question 114: A security analyst is reviewing a penetration-testing report...; Question 115: A security analyst is investigating a vulnerability in which...; Question 116: A company is setting up a web server on the Internet that wi...; Question 117: Which of the following describes the BEST approach for deplo...; Question 118: Which of the following cloud models provides clients with se...; Question 119: A security analyst is configuring a large number of new comp...; Question 120: A company wants to deploy PKI on its Internet-facing website...; Question 121: A Chief Security Office's (CSO's) key priorities are to impr...; Question 122: A company installed several crosscut shredders as part of in...; Question 123: A new security engineer has started hardening systems. One o...; Question 124: A security analyst is performing a packet capture on a serie...; Question 125: An attacker was easily able to log in to a company's securit...; Question 126: A security manager needs to assess the security posture of o...; Question 127: A company is implementing MFA for all applications that stor...; Question 128: A retail company that is launching a new website to showcase...; Question 129: Which of the following types of controls is a CCTV camera th...; Question 130: A security analyst is reviewing the following output from a ...; Question 131: Which of the following describes the ability of code to targ...; Question 132: When implementing automation with loT devices, which of the ...; Question 133: An organization wants to integrate its incident response pro...; Question 134: A security modern may have occurred on the desktop PC of an ...; Question 135: Which of the following employee roles is responsible for pro...; Question 136: An application owner reports suspicious activity on an inter...; Question 137: An organization maintains several environments in which patc...; Question 138: A security analyst is running a vulnerability scan to check ...; Question 139: A large financial services firm recently released informatio...; Question 140: A user reports trouble using a corporate laptop. The laptop ...; Question 141: A security analyst is reviewing a new website that will soon...; Question 142: Which of the following would be the BEST method for creating...; Question 143: A RAT that was used to compromise an organization's banking ...; Question 144: A network analyst is setting up a wireless access point for ...; Question 145: A security engineer at an offline government facility is con...; Question 146: A company suspects that some corporate accounts were comprom...; Question 147: Multiple business accounts were compromised a few days after...; Question 148: An attacker was eavesdropping on a user who was shopping onl...; Question 149: A company has decided to move its operations to the cloud. I...; Question 150: An auditor is performing an assessment of a security applian...; Question 151: A security analyst needs to generate a server certificate to...; Question 152: A company's bank has reported that multiple corporate credit...; Question 153: Employees are having issues accessing the company's website....; Question 154: A security engineer needs to create a network segment that c...; Question 155: A network engineer needs to build a solution that will allow...; Question 156: Which of the following authentication methods sends out a un...; Question 157: During a security assessment, a security finds a file with o...; Question 158: A security analyst is using a recently released security adv...; Question 159: Several employees have noticed other bystanders can clearly ...; Question 160: Which of the following types of attacks is being attempted a...; Question 161: The security administrator has installed a new firewall whic...; Question 162: Law enforcement officials sent a company a notification that...; Question 163: A security analyst is logged into a Windows file server and ...; Question 164: A security analyst was called to Investigate a file received...; Question 165: A Chief Information Officer receives an email stating a data...; Question 166: An organization has a growing workforce that is mostly drive...; Question 167: An organization regularly scans its infrastructure for missi...; Question 168: An organization wants to implement a biometric system with t...; Question 169: The SIEM at an organization has detected suspicious traffic ...; Question 170: After entering a username and password, and administrator mu...; Question 171: Entering a secure area requires passing through two doors, b...; Question 172: A security administrator checks the table of a network switc...; Question 173: A company currently uses passwords for logging in to company...; Question 174: A company reduced the area utilized in its datacenter by cre...; Question 175: A network administrator has been asked to design a solution ...; Question 176: Which of the following BEST describes the MFA attribute that...; Question 177: A company is upgrading its wireless infrastructure to WPA2-E...; Question 178: An analyst needs to identify the applications a user was run...; Question 179: Which of the following terms should be included in a contrac...; Question 180: During an asset inventory, several assets, supplies, and mis...; Question 181: A user contacts the help desk to report the following: Two d...; Question 182: A security analyst is investigating an incident to determine...; Question 183: A user recently entered a username and password into a recru...; Question 184: A network administrator is setting up wireless access points...; Question 185: After a WiFi scan of a local office was conducted, an unknow...; Question 186: Which of the following scenarios BEST describes a risk reduc...; Question 187: The spread of misinformation surrounding the outbreak of a n...; Question 188: A nuclear plant was the victim of a recent attack, and all t...; Question 189: A forensics investigator is examining a number of unauthoriz...; Question 190: An organization is developing an authentication service for ...; Question 191: Following a prolonged datacenter outage that affected web-ba...; Question 192: Remote workers in an organization use company-provided lapto...; Question 193: A security analyst is investigating multiple hosts that are ...; Question 194: An information security policy stales that separation of dut...; Question 195: A Chief Executive Officer (CEO) is dissatisfied with the lev...; Question 196: A cyberthreat intelligence analyst is gathering data about a...; Question 197: Ann, a forensic analyst, needs to prove that the data she or...; Question 198: An organization suffered an outage and a critical system too...; Question 199: A technician needs to prevent data loss in a laboratory. The...; Question 200: A SOC is currently being outsourced. Which of the following ...; Question 201: A routine audit of medical billing claims revealed that seve...; Question 202: A user recent an SMS on a mobile phone that asked for bank d...

Question 114/202

LEAVE A REPLY

Download PDF File