SY0-601 Exam Dumps | A security administrator receives alerts from the perimeter UTM. Upon checking the logs, the administrator

Valid SY0-601 Dumps shared by ExamDiscuss.com for Helping Passing SY0-601 Exam! ExamDiscuss.com now offer the newest SY0-601 exam dumps, the ExamDiscuss.com SY0-601 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com SY0-601 dumps with Test Engine here:

Access SY0-601 Dumps Premium Version
(1061 Q&As Dumps, 35%OFF Special Discount Code: freecram)

<< Prev Question Next Question >>

Question 198/248

A security administrator receives alerts from the perimeter UTM. Upon checking the logs, the administrator finds the following output:
Time: 12/25 0300
From Zone: Untrust
To Zone: DMZ
Attacker: externalip.com
Victim: 172.16.0.20
To Port: 80
Action: Alert
Severity: Critical
When examining the PCAP associated with the event, the security administrator finds the following information:
<script> alert ("Click here for important information regarding your
account! http://externalip.com/account.php"); </script>
Which of the following actions should the security administrator take?

A. Implement a host-based firewall rule to block future events of this type from occurring.

B. Manually copy the <script> data from the PCAP file and generate a blocking signature in the HIDS to block the traffic for future events.

C. Upload the PCAP to the IDS in order to generate a blocking signature to block the traffic.

D. Submit a change request to modify the XSS vulnerability signature to TCP reset on future attempts.

Question List (248q): Question 1: Which of the following employee roles is responsible for pro...; Question 2: A security analyst is reviewing information regarding recent...; Question 3: Which of the following is a difference between a DRP and a B...; Question 4: Which of the following would detect intrusions at the perime...; Question 5: Following a prolonged datacenter outage that affected web-ba...; Question 6: A security analyst has been tasked with creating a new WiFi ...; Question 7: The concept of connecting a user account across the systems ...; Question 8: The Chief Technology Officer of a local college would like v...; Question 9: The president of a company that specializes in military cont...; Question 10: A developer is building a new portal to deliver single-pane-...; Question 11: Several employees have noticed other bystanders can clearly ...; Question 12: An administrator is experiencing issues when trying to uploa...; Question 13: An organization has implemented a policy requiring the use o...; Question 14: A company recently experienced an attack during which its ma...; Question 15: Which of the following disaster recovery tests is The LEAST ...; Question 16: Which of the following encryption algorithms require one enc...; Question 17: Users at organization have been installing programs from the...; Question 18: An organization with a low tolerance for user inconvenience ...; Question 19: A remote user recently took a two-week vacation abroad and b...; Question 20: Ann, a customer, received a notification from her mortgage c...; Question 21: A technician needs to prevent data loss in a laboratory. The...; Question 22: An attacker was eavesdropping on a user who was shopping onl...; Question 23: While investigating a data leakage incident a security analy...; Question 24: A company is under investigation for possible fraud. As part...; Question 25: A user recent an SMS on a mobile phone that asked for bank d...; Question 26: A network manager is concerned that business may be negative...; Question 27: A security analyst is reviewing the following output from a ...; Question 28: In which of the following situations would it be BEST to use...; Question 29: An analyst is trying to identify insecure services that are ...; Question 30: A company suspects that some corporate accounts were comprom...; Question 31: A company has limited storage available and online presence ...; Question 32: Remote workers in an organization use company-provided lapto...; Question 33: Which biometric error would allow an unauthorized user to ac...; Question 34: A company is implementing MFA for all applications that stor...; Question 35: An application developer accidentally uploaded a company's c...; Question 36: An organization is concerned about video emissions from user...; Question 37: A Chief Executive Officer's (CEO) personal information was s...; Question 38: Digital signatures use asymmetric encryption. This means the...; Question 39: A network administrator has been asked to design a solution ...; Question 40: A root cause analysis reveals that a web application outage ...; Question 41: A transitive trust:; Question 42: A systems administrator is considering different backup solu...; Question 43: An analyst is generating a security report for the managemen...; Question 44: Which of the following would MOST likely be a result of impr...; Question 45: Which of the following will provide the BEST physical securi...; Question 46: An engineer wants to access sensitive data from a corporate-...; Question 47: Which of the following is a benefit of including a risk mana...; Question 48: A company recently moved into a new annex of the building. F...; Question 49: Which of the following scenarios BEST describes a risk reduc...; Question 50: A user downloaded an extension for a browser, and the uses d...; Question 51: A external forensics investigator has been hired to investig...; Question 52: A security analyst needs to be able to search and correlate ...; Question 53: A security analyst reports a company policy violation in a c...; Question 54: A company network is currently under attack. Although securi...; Question 55: Several universities are participating in a collaborative re...; Question 56: A company needs to validate its updated incident response pl...; Question 57: A company labeled some documents with the public sensitivity...; Question 58: A company moved into a new building next to a sugar mill. Cr...; Question 59: Which of the following is an example of risk avoidance?...; Question 60: Which of the following is a risk that is specifically associ...; Question 61: A global pandemic is forcing a private organization to close...; Question 62: Given the following logs: (Exhibit) Which of the following B...; Question 63: A security analyst is looking for a solution to help communi...; Question 64: A security audit has revealed that a process control termina...; Question 65: Several employees return to work the day after attending an ...; Question 66: A small business office is setting up a wireless infrastruct...; Question 67: A security analyst receives a SIEM alert that someone logged...; Question 68: A cybersecurity administrator is using iptables as an enterp...; Question 69: A network analyst is setting up a wireless access point for ...; Question 70: Local guidelines require that all information systems meet a...; Question 71: Which of the following types of controls is a CCTV camera th...; Question 72: To further secure a company's email system, an administrator...; Question 73: A company is experiencing an increasing number of systems th...; Question 74: A company has decided to move its operations to the cloud. I...; Question 75: The IT department at a university is concerned about profess...; Question 76: A systems administrator needs to install a new wireless netw...; Question 77: A network engineer notices the VPN concentrator overloaded a...; Question 78: Which of the following allows for functional test data to be...; Question 79: A security analyst is reviewing a penetration-testing report...; Question 80: An organization has been experiencing outages during holiday...; Question 81: A security analyst is concerned about critical vulnerabiliti...; Question 82: A security architect at a large, multinational organization ...; Question 83: Developers are about to release a financial application, but...; Question 84: An organization would like to remediate the risk associated ...; Question 85: A document that appears to be malicious has been discovered ...; Question 86: A junior security analyst is conducting an analysis after pa...; Question 87: A security analyst has been asked to investigate a situation...; Question 88: During a security assessment, a security analyst finds a fil...; Question 89: The process of passively gathering information poor to launc...; Question 90: The Chief Security Officer (CSO) at a major hospital wants t...; Question 91: A database administrator wants to grant access to an applica...; Question 92: An analyst visits an internet forum looking for information ...; Question 93: Moving laterally within a network once an initial exploit is...; Question 94: Which of the following describes the continuous delivery sof...; Question 95: A major political party experienced a server breach. The hac...; Question 96: An IT security manager requests a report on company informat...; Question 97: During a security audit of a company's network, unsecure pro...; Question 98: An attacker was easily able to log in to a company's securit...; Question 99: Which of the following should a data owner require all perso...; Question 100: Which of the following environments minimizes end-user disru...; Question 101: A user recently attended an exposition and received some dig...; Question 102: Which of the following is the correct order of volatility fr...; Question 103: The lessons-learned analysis from a recent incident reveals ...; Question 104: A security manager needs to assess the security posture of o...; Question 105: A security researcher has alerted an organization that its s...; Question 106: A vulnerability assessment report will include the CVSS scor...; Question 107: Which of the following holds staff accountable while escorti...; Question 108: An organization maintains several environments in which patc...; Question 109: A security incident has been resolved. Which of the followin...; Question 110: A network engineer has been asked to investigate why several...; Question 111: Security analyst must enforce policies to harden an MOM infr...; Question 112: Security analysts are conducting an investigation of an atta...; Question 113: An organization's policy requires users to create passwords ...; Question 114: A company Is planning to install a guest wireless network so...; Question 115: An organization has decided to host its web application and ...; Question 116: A user is concerned that a web application will not be able ...; Question 117: A Chief Security Office's (CSO's) key priorities are to impr...; Question 118: Which of the following would satisfy three-factor authentica...; 1 commentQuestion 119: Which of the following are common VoIP-associated vulnerabil...; Question 120: An organization recently discovered that a purchasing office...; Question 121: Which of the following ISO standards is certified for privac...; Question 122: A new vulnerability in the SMB protocol on the Windows syste...; Question 123: A company is implementing a new SIEM to log and send alerts ...; Question 124: The Chief Financial Officer (CFO) of an insurance company re...; Question 125: A website developer is working on a new e-commerce website a...; Question 126: DDoS attacks are causing an overload on the cluster of cloud...; Question 127: An organization is building backup sever moms in geographica...; Question 128: An enterprise needs to keep cryptographic keys in a safe man...; Question 129: While checking logs, a security engineer notices a number of...; Question 130: An organization recently acquired an ISO 27001 certification...; Question 131: Which of the following is the purpose of a risk register?...; Question 132: Which of the following BEST describes the method a security ...; Question 133: An organization just experienced a major cyberattack modem. ...; Question 134: A company was recently breached Part of the company's new cy...; Question 135: A user contacts the help desk to report the following: - Two...; Question 136: A consultant is configuring a vulnerability scanner for a la...; Question 137: A financial organization has adopted a new secure, encrypted...; Question 138: A security analyst has been reading about a newly discovered...; 1 commentQuestion 139: A security analyst was deploying a new website and found a c...; Question 140: Which of the following represents a multifactor authenticati...; Question 141: A security analyst is receiving numerous alerts reporting th...; Question 142: A security analyst is investigating a phishing email that co...; Question 143: Which of the following serves to warn users against download...; Question 144: A company reduced the area utilized in its datacenter by cre...; Question 145: A workwide manufacturing company has been experiencing email...; Question 146: An organization's corporate offices were destroyed due to a ...; Question 147: A recent audit uncovered a key finding regarding the use of ...; Question 148: Entering a secure area requires passing through two doors, b...; Question 149: Which of the following BEST describes the MFA attribute that...; Question 150: Which of the following distributes data among nodes, making ...; Question 151: After a WiFi scan of a local office was conducted, an unknow...; Question 152: A security analyst is preparing a threat for an upcoming int...; Question 153: An organization has various applications that contain sensit...; Question 154: A security operations analyst is using the company's SIEM so...; Question 155: A company's cybersecurity department is looking for a new so...; Question 156: A network technician is installing a guest wireless network ...; Question 157: An enterprise has hired an outside security firm to conduct ...; Question 158: A security analyst needs to make a recommendation for restri...; Question 159: In which of the following risk management strategies would c...; Question 160: Which of the following BEST describes a security exploit for...; Question 161: Accompany deployed a WiFi access point in a public area and ...; Question 162: A privileged user at a company stole several proprietary doc...; Question 163: A security engineer has enabled two-factor authentication on...; Question 164: During an investigation, a security manager receives notific...; Question 165: A security engineer needs to create a network segment that c...; Question 166: An attacked is attempting to exploit users by creating a fak...; Question 167: A security administrator suspects an employee has been email...; Question 168: Which of the following are requirements that must be configu...; Question 169: n organization plans to transition the intrusion detection a...; Question 170: When selecting a technical solution for identity management,...; Question 171: A financial institution would like to store its customer dat...; Question 172: An end user reports a computer has been acting slower than n...; Question 173: The IT department's on-site developer has been with the team...; Question 174: A security analyst needs to produce a document that details ...; Question 175: A security analyst needs to determine how an attacker was ab...; Question 176: Which of the following environments utilizes dummy data and ...; Question 177: A company recently moved sensitive videos between on-premise...; Question 178: A security analyst receives an alert from the company's SIEM...; Question 179: Customers reported their antivirus software flagged one of t...; Question 180: A company's Chief Information Office (CIO) is meeting with t...; Question 181: A Chief Executive Officer (CEO) is dissatisfied with the lev...; Question 182: After multiple on premises security solutions were migrated ...; Question 183: An application owner reports suspicious activity on an inter...; Question 184: An information security officer at a credit card transaction...; Question 185: An analyst is generating a security report for the managemen...; Question 186: An organization is concerned about hackers potentially enter...; Question 187: A security analyst generated a file named host1.pcap and sha...; Question 188: Which of the following would be BEST to establish between or...; Question 189: The new Chief Executive Officer (CEO) of a large company has...; Question 190: A cloud service provider has created an environment where cu...; Question 191: A security engineer is installing a WAF to protect the compa...; Question 192: A security administrator checks the table of a network switc...; Question 193: Joe, an employee, is transferring departments and is providi...; Question 194: An employee received a word processing file that was deliver...; Question 195: A security administrator has generated an SSH key pair to au...; Question 196: A security engineer needs to implement an MDM solution that ...; Question 197: A company has been experiencing very brief power outages fro...; Question 198: A security administrator receives alerts from the perimeter ...; Question 199: A systems analyst is responsible for generating a new digita...; Question 200: Which of the following is the BEST use of a WAF?...; Question 201: A cloud administrator is configuring five compute instances ...; Question 202: The website http://companywebsite.com requires users to prov...; Question 203: An analyst has determined that a server was not patched and ...; Question 204: Which of the following is the MOST likely reason for securin...; Question 205: A Chief Information Security Officer (CISO) needs to create ...; Question 206: A bank detects fraudulent activity on user's account. The us...; Question 207: A development team employs a practice of bringing all the co...; Question 208: Which of the following is a reason why an organization would...; Question 209: After entering a username and password, and administrator mu...; Question 210: An organization's help desk is flooded with phone calls from...; Question 211: Which of the following would be MOST effective to contain a ...; Question 212: A security monitoring company offers a service that alerts i...; Question 213: A Chief Information Officer receives an email stating a data...; Question 214: After a ransomware attack a forensics company needs to revie...; Question 215: A security analyst reviews the datacenter access logs for a ...; Question 216: An attack relies on an end user visiting a website the end u...; Question 217: A security analyst needs to find real-time data on the lates...; Question 218: The security team received a report of copyright infringemen...; Question 219: A security analyst is investigating some users who are being...; Question 220: A financial analyst has been accused of violating the compan...; Question 221: After consulting with the Chief Risk Officer (CRO). A manage...; Question 222: An organization has hired a security analyst to perform a pe...; Question 223: A healthcare company is revamping its IT strategy in light o...; Question 224: An employee has been charged with fraud and is suspected of ...; Question 225: A company provides mobile devices to its users to permit acc...; Question 226: When planning to build a virtual environment, an administrat...; Question 227: Which of the following is the BEST example of a cost-effecti...; Question 228: A network engineer needs to create a plan for upgrading the ...; Question 229: A systems administrator needs to install the same X.509 cert...; Question 230: Company engineers regularly participate in a public Internet...; Question 231: A routine audit of medical billing claims revealed that seve...; Question 232: A cybersecurity analyst reviews the log files from a web ser...; Question 233: A Chief Security Officer (CSO) has asked a technician to dev...; Question 234: A security analyst Is hardening a Linux workstation and must...; Question 235: Which of the following policies would help an organization i...; Question 236: Which of the following provides the BEST protection for sens...; Question 237: Due to unexpected circumstances, an IT company must vacate i...; Question 238: Which of the following would cause a Chief Information Secur...; Question 239: Which of the following is MOST likely to outline the roles a...; Question 240: Certain users are reporting their accounts are being used to...; Question 241: A security forensics analyst is examining a virtual server. ...; Question 242: An incident, which is affecting dozens of systems, involves ...; Question 243: A user recently entered a username and password into a recru...; Question 244: A major clothing company recently lost a large amount of pro...; Question 245: A security analyst is concerned about traffic initiated to t...; Question 246: A security administrator has received multiple calls from th...; Question 247: An organization suffered an outage and a critical system too...; Question 248: To mitigate the impact of a single VM being compromised by a...

Question 198/248

LEAVE A REPLY

Download PDF File