SY0-601 Exam Dumps | A security analyst is concerned about critical vulnerabilities that have been detected on some applications

<< Prev Question Next Question >>

Question 90/217

A security analyst is concerned about critical vulnerabilities that have been detected on some applications running inside containers. Which of the following is the BEST remediation strategy?

A. Update the base container image and redeploy the environment.

B. Include the containers in the regular patching schedule for servers

C. Patch each running container individually and test the application

D. Update the host in which the containers are running

Question List (217q): Question 1: While reviewing an alert that shows a malicious request on o...; Question 2: An organization is developing an authentication service for ...; Question 3: An attacker has successfully exfiltrated several non-salted ...; Question 4: A security analyst is reviewing the following output from a ...; Question 5: An analyst needs to identify the applications a user was run...; Question 6: A security manager needs to assess the security posture of o...; Question 7: The Chief Information Security Officer wants to pilot a new ...; Question 8: The security team received a report of copyright infringemen...; Question 9: A security engineer needs to create a network segment that c...; Question 10: A security analyst generated a file named host1.pcap and sha...; Question 11: An organization is building backup sever moms in geographica...; Question 12: A nuclear plant was the victim of a recent attack, and all t...; Question 13: An organization's RPO for a critical system is two hours. Th...; Question 14: Phishing and spear-phishing attacks have been occurring more...; Question 15: An end user reports a computer has been acting slower than n...; Question 16: Which of the following refers to applications and systems th...; Question 17: A security administrator is analyzing the corporate wireless...; Question 18: All security analysts workstations at a company have network...; Question 19: Two organizations plan to collaborate on the evaluation of n...; Question 20: The website http://companywebsite.com requires users to prov...; Question 21: A security analyst has been tasked with creating a new WiFi ...; Question 22: Remote workers in an organization use company-provided lapto...; Question 23: A company recently set up an e-commerce portal to sell its p...; Question 24: A security administrator suspects there may be unnecessary s...; Question 25: An organization is planning to open other datacenters to sus...; Question 26: A external forensics investigator has been hired to investig...; Question 27: A security analyst has received an alert about being sent vi...; Question 28: Security analyst must enforce policies to harden an MOM infr...; Question 29: A security analyst is reviewing the output of a web server l...; Question 30: A cybersecurity administrator needs to add disk redundancy f...; Question 31: A security analyst is reviewing logs on a server and observe...; Question 32: Which of the following environments minimizes end user disru...; Question 33: A company is setting up a web server on the Internet that wi...; Question 34: A user downloaded an extension for a browser, and the uses d...; Question 35: An attacker is trying to gain access by installing malware o...; Question 36: The new Chief Executive Officer (CEO) of a large company has...; Question 37: Which of the following corporate policies is used to help pr...; Question 38: A security administrator has noticed unusual activity occurr...; Question 39: Several employees have noticed other bystanders can clearly ...; Question 40: A company wants to deploy PKI on its Internet-facing website...; Question 41: A website developer who is concerned about theft cf the comp...; Question 42: A web server administrator has redundant servers and needs t...; Question 43: A Chief Security Office's (CSO's) key priorities are to impr...; Question 44: A company has limited storage available and online presence ...; Question 45: The Chief Information Security Officer warns lo prevent exfi...; Question 46: Which of the following would satisfy three-factor authentica...; Question 47: A security analyst is investigating multiple hosts that are ...; Question 48: While reviewing the wireless router, the systems administrat...; Question 49: Which of the following terms should be included in a contrac...; Question 50: A security audit has revealed that a process control termina...; Question 51: A system that requires an operation availability of 99.99% a...; Question 52: During an asset inventory, several assets, supplies, and mis...; Question 53: A workwide manufacturing company has been experiencing email...; Question 54: An organization has hired a red team to simulate attacks on ...; Question 55: A company has decided to move its operations to the cloud. I...; Question 56: A new vulnerability in the SMB protocol on the Windows syste...; Question 57: A forensics investigator is examining a number of unauthoriz...; Question 58: Which of the following would be BEST to establish between or...; Question 59: A security engineer needs to Implement the following require...; Question 60: A company recently moved sensitive videos between on-premise...; Question 61: A network engineer has been asked to investigate why several...; Question 62: Which two features are available only in next-generation fir...; Question 63: A company would like to provide flexibility for employees on...; Question 64: Which of the following is a detective and deterrent control ...; Question 65: A company recently experienced an attack during which its ma...; Question 66: A cloud service provider has created an environment where cu...; Question 67: A security operations analyst is using the company's SIEM so...; Question 68: A manufacturer creates designs for very high security produc...; Question 69: A company's help desk received several AV alerts indicating ...; Question 70: The IT department's on-site developer has been with the team...; Question 71: A company was compromised, and a security analyst discovered...; Question 72: Which of the following policies establishes rules to measure...; Question 73: A development team employs a practice of bringing all the co...; Question 74: A Chief Executive Officer (CEO) is dissatisfied with the lev...; Question 75: An administrator is experiencing issues when trying to uploa...; Question 76: A small business office is setting up a wireless infrastruct...; Question 77: A new security engineer has started hardening systems. One o...; Question 78: An analyst is generating a security report for the managemen...; Question 79: After segmenting the network, the network manager wants to c...; Question 80: An organization just experienced a major cyberattack modem. ...; Question 81: A RAT that was used to compromise an organization's banking ...; Question 82: Which of the following policies would help an organization i...; Question 83: Which of the following is the MOST relevant security check t...; Question 84: A security engineer needs to build a solution to satisfy reg...; Question 85: An organization's Chief Security Officer (CSO) wants to vali...; Question 86: A host was infected with malware. During the incident respon...; Question 87: An organization has hired a security analyst to perform a pe...; Question 88: A security analyst needs to be proactive in understand the t...; Question 89: A routine audit of medical billing claims revealed that seve...; Question 90: A security analyst is concerned about critical vulnerabiliti...; Question 91: In which of the following risk management strategies would c...; Question 92: The cost of 'movable media and the security risks of transpo...; Question 93: Which of the following is the BEST reason to maintain a func...; Question 94: After gaining access to a dual-homed (i.e.. wired and wirele...; Question 95: A Chief Security Officer (CSO) was notified that a customer ...; Question 96: A recently discovered zero-day exploit utilizes an unknown v...; Question 97: A network administrator has been asked to install an IDS to ...; Question 98: A technician needs to prevent data loss in a laboratory. The...; Question 99: Per company security policy, IT staff members are required t...; Question 100: A client sent several inquiries to a project manager about t...; Question 101: A user recent an SMS on a mobile phone that asked for bank d...; Question 102: A security monitoring company offers a service that alerts i...; Question 103: An organization regularly scans its infrastructure for missi...; Question 104: Which of the following holds staff accountable while escorti...; Question 105: A global company is experiencing unauthorized logging due to...; Question 106: A network engineer notices the VPN concentrator overloaded a...; Question 107: An information security policy stales that separation of dut...; Question 108: A security engineer needs to implement an MDM solution that ...; Question 109: A user reports trouble using a corporate laptop. The laptop ...; Question 110: A startup company is using multiple SaaS and IaaS platform t...; Question 111: The spread of misinformation surrounding the outbreak of a n...; Question 112: A commercial cyber-threat intelligence organization observes...; Question 113: A cybersecurity administrator has a reduced team and needs t...; Question 114: Which of the following would a European company interested i...; Question 115: An attacked is attempting to exploit users by creating a fak...; Question 116: After installing a Windows server, a cybersecurity administr...; Question 117: Which of the following organizational policies are MOST like...; Question 118: A user enters a password to log in to a workstation and is t...; Question 119: A security analyst discovers several .jpg photos from a cell...; Question 120: Which of the following is the MOST secure but LEAST expensiv...; Question 121: A user is concerned that a web application will not be able ...; Question 122: Which of the following technical controls is BEST suited for...; Question 123: Which of the following BEST describes the method a security ...; Question 124: Security analysts are conducting an investigation of an atta...; Question 125: An organization wants to implement a biometric system with t...; Question 126: Multiple business accounts were compromised a few days after...; Question 127: Which of the following controls would BEST identify and repo...; Question 128: As part of the lessons-learned phase, the SOC is tasked with...; Question 129: In which of the following common use cases would steganograp...; Question 130: Which of the following will provide the BEST physical securi...; Question 131: On which of the following is the live acquisition of data fo...; Question 132: An engineer is setting up a VDI environment for a factory lo...; Question 133: Users have been issued smart cards that provide physical acc...; Question 134: Joe, an employee, receives an email stating he won the lotte...; Question 135: Customers reported their antivirus software flagged one of t...; Question 136: A user recently entered a username and password into a recru...; Question 137: A user's login credentials were recently compromised During ...; Question 138: A remote user recently took a two-week vacation abroad and b...; Question 139: A security analyst needs to perform periodic vulnerably scan...; Question 140: A company is launching a new internet platform for its clien...; Question 141: A forensics investigator is examining a number of unauthoriz...; Question 142: A security analyst has identified malware spreading through ...; Question 143: A security analyst needs to make a recommendation for restri...; Question 144: A company recently added a DR site and is redesigning the ne...; Question 145: A root cause analysis reveals that a web application outage ...; Question 146: A security researcher is attempting to gather data on the wi...; Question 147: The Chief Security Officer (CSO) at a major hospital wants t...; Question 148: An analyst needs to set up a method for securely transferrin...; Question 149: A company's cybersecurity department is looking for a new so...; Question 150: Which of the following cloud models provides clients with se...; Question 151: An attack relies on an end user visiting a website the end u...; Question 152: A systems administrator is considering different backup solu...; Question 153: A new vulnerability in the SMB protocol on the Windows syste...; Question 154: A security engineer at an offline government facility is con...; Question 155: A company just implemented a new telework policy that allows...; Question 156: Joe, a user at a company, clicked an email link led to a web...; Question 157: An analyst is trying to identify insecure services that are ...; Question 158: A security forensics analyst is examining a virtual server. ...; Question 159: Which of the following ISO standards is certified for privac...; Question 160: A cybersecurity analyst reviews the log files from a web ser...; Question 161: A dynamic application vulnerability scan identified code inj...; Question 162: Given the following logs: (Exhibit) Which of the following B...; Question 163: An organization is moving away from the use of client-side a...; Question 164: An organization has been experiencing outages during holiday...; Question 165: A company wants to modify its current backup strategy to min...; Question 166: A retail executive recently accepted a job with a major comp...; Question 167: An organization is concerned that its hosted web servers are...; Question 168: A security analyst receives an alert from the company's SIEM...; Question 169: Which of the following control types is focused primarily on...; Question 170: A penetration tester was able to compromise an internal serv...; Question 171: The following are the logs of a successful attack. (Exhibit)...; Question 172: A company is designing the layout of a new datacenter so it ...; Question 173: A security an alyst needs to implement security features acr...; Question 174: A systems administrator is troubleshooting a server's connec...; Question 175: Which of the following types of controls is a turnstile?...; Question 176: Several universities are participating in a collaborative re...; Question 177: Which of the following control sets should a well-written BC...; Question 178: A security analyst is investigating an incident to determine...; Question 179: A university is opening a facility in a location where there...; Question 180: A SOC is implementing an in sider-threat-detection program. ...; Question 181: A large industrial system's smart generator monitors the sys...; Question 182: A user must introduce a password and a USB key to authentica...; Question 183: An.. that has a large number of mobile devices is exploring ...; Question 184: A systems analyst is responsible for generating a new digita...; Question 185: A manufacturing company has several one-off legacy informati...; Question 186: The Chief Information Security Officer (CISO) has decided to...; Question 187: A user recently attended an exposition and received some dig...; Question 188: An organization's help desk is flooded with phone calls from...; Question 189: A company was compromised, and a security analyst discovered...; Question 190: A company is implementing a new SIEM to log and send alerts ...; Question 191: A recent audit uncovered a key finding regarding the use of ...; Question 192: A security analyst reports a company policy violation in a c...; Question 193: The IT department at a university is concerned about profess...; Question 194: When implementing automation with loT devices, which of the ...; Question 195: Which of the following is the purpose of a risk register?...; Question 196: Which of the following is the MOST likely reason for securin...; Question 197: A security analyst is performing a packet capture on a serie...; Question 198: A user's PC was recently infected by malware. The user has a...; Question 199: A researcher has been analyzing large data sets for the last...; Question 200: A security analyst is reviewing the following command-line o...; Question 201: Which of the following authentication methods sends out a un...; Question 202: Which of the following is a reason why an organization would...; Question 203: A network engineer is troubleshooting wireless network conne...; Question 204: A company is providing security awareness training regarding...; Question 205: A Chief Security Officer (CSO) is concerned about the volume...; Question 206: A Chief Executive Officer's (CEO) personal information was s...; Question 207: A smart retail business has a local store and a newly establ...; Question 208: An organization hired a consultant to assist with an active ...; Question 209: Which of the following would be BEST to establish between or...; Question 210: An attacker is exploiting a vulnerability that does not have...; Question 211: An enterprise needs to keep cryptographic keys in a safe man...; Question 212: Which of the following environments utilizes dummy data and ...; Question 213: To secure an application after a large data breach, an e-com...; Question 214: A security analyst has been asked by the Chief Information S...; Question 215: A security analyst was called to Investigate a file received...; Question 216: An incident response technician collected a mobile device du...; Question 217: An auditor is performing an assessment of a security applian...

Question 90/217

LEAVE A REPLY

Download PDF File