SY0-601 Exam Dumps | Certain users are reporting their accounts are being used to send unauthorized emails and conduct suspicious

<< Prev Question Next Question >>

Question 9/235

Certain users are reporting their accounts are being used to send unauthorized emails and conduct suspicious activities. After further investigation, a security analyst notices the following:
- All users share workstations throughout the day.
- Endpoint protection was disabled on several workstations throughout
the network.
- Travel times on logins from the affected users are impossible.
- Sensitive data is being uploaded to external sites.
- All user account passwords were forced to be reset and the issue
continued.
Which of the following attacks is being used to compromise the user accounts?

A. Dictionary

B. Brute-force

C. Keylogger

D. Rainbow

Question List (235q): Question 1: The facilities supervisor for a government agency is concern...; Question 2: A recent security audit revealed that a popular website with...; Question 3: A security analyst must determine if either SSH or Telnet is...; Question 4: The lessons-learned analysis from a recent incident reveals ...; Question 5: Which of the following distributes data among nodes, making ...; Question 6: A university is opening a facility in a location where there...; Question 7: A user must introduce a password and a USB key to authentica...; Question 8: Which of the following ISO standards is certified for privac...; Question 9: Certain users are reporting their accounts are being used to...; Question 10: Accompany deployed a WiFi access point in a public area and ...; Question 11: Phishing and spear-phishing attacks have been occurring more...; 1 commentQuestion 12: A security modern may have occurred on the desktop PC of an ...; Question 13: Which of the following should be put in place when negotiati...; Question 14: A new security engineer has started hardening systems. One o...; Question 15: A Chief Information Security Officer (CISO) is concerned abo...; Question 16: A security administrator checks the table of a network switc...; Question 17: A critical file server is being upgraded and the systems adm...; Question 18: A systems administrator wants to disable the use of username...; Question 19: A company needs to centralize its logs to create a baseline ...; Question 20: An attack relies on an end user visiting a website the end u...; Question 21: A security analyst receives an alert from the company's SIEM...; Question 22: During a security assessment, a security analyst finds a fil...; Question 23: Which of the following is the MOST likely motivation for a s...; Question 24: A SOC is implementing an in sider-threat-detection program. ...; Question 25: A security analyst has identified malware spreading through ...; Question 26: A routine audit of medical billing claims revealed that seve...; Question 27: The website http://companywebsite.com requires users to prov...; Question 28: A global pandemic is forcing a private organization to close...; Question 29: An organization's Chief Information Security Officer is crea...; Question 30: A systems analyst is responsible for generating a new digita...; Question 31: Which of the following employee roles is responsible for pro...; Question 32: A remote user recently took a two-week vacation abroad and b...; Question 33: A Chief Executive Officer's (CEO) personal information was s...; Question 34: A company Is concerned about is security after a red-team ex...; Question 35: Which of the following in a forensic investigation should be...; Question 36: After a phishing scam for a user's credentials, the red team...; Question 37: The IT department at a university is concerned about profess...; Question 38: A security analyst generated a file named host1.pcap and sha...; Question 39: Which of the following incident response steps involves acti...; Question 40: An analyst needs to set up a method for securely transferrin...; Question 41: An organization is concerned that is hosted web servers are ...; Question 42: A customer called a company's security team to report that a...; Question 43: All security analysts workstations at a company have network...; Question 44: In which of the following common use cases would steganograp...; Question 45: Law enforcement officials sent a company a notification that...; Question 46: After gaining access to a dual-homed (i.e.. wired and wirele...; Question 47: An information security officer at a credit card transaction...; Question 48: An auditor is performing an assessment of a security applian...; Question 49: A user recent an SMS on a mobile phone that asked for bank d...; Question 50: After entering a username and password, and administrator mu...; Question 51: An organization has hired a red team to simulate attacks on ...; Question 52: A user's PC was recently infected by malware. The user has a...; Question 53: A company is implementing a new SIEM to log and send alerts ...; Question 54: The Chief Information Security Officer (CISO) has decided to...; Question 55: A security analyst is investigating an incident to determine...; Question 56: A web server administrator has redundant servers and needs t...; Question 57: A workwide manufacturing company has been experiencing email...; Question 58: Which of the following is the MOST secure but LEAST expensiv...; Question 59: Which of the following BEST explains the difference between ...; Question 60: The new Chief Executive Officer (CEO) of a large company has...; Question 61: DDoS attacks are causing an overload on the cluster of cloud...; Question 62: An organization recently discovered that a purchasing office...; Question 63: A Chief Security Officer (CSO) was notified that a customer ...; Question 64: A security administrator has discovered that workstations on...; Question 65: An organization has implemented a policy requiring the use o...; Question 66: A security manager needs to assess the security posture of o...; Question 67: A security analyst has been asked to investigate a situation...; Question 68: A financial analyst has been accused of violating the compan...; Question 69: A network engineer has been asked to investigate why several...; Question 70: An organization is moving away from the use of client-side a...; Question 71: A company recently implemented a new security system. In the...; Question 72: Moving laterally within a network once an initial exploit is...; Question 73: Administrators have allowed employee to access their company...; Question 74: A company needs to validate its updated incident response pl...; Question 75: A security analyst is concerned about critical vulnerabiliti...; Question 76: A company Is planning to install a guest wireless network so...; Question 77: A network engineer needs to build a solution that will allow...; Question 78: A researcher has been analyzing large data sets for the last...; Question 79: An organization recently acquired an ISO 27001 certification...; Question 80: A security analyst has received an alert about being sent vi...; Question 81: A security analyst discovers that a company username and pas...; Question 82: An analyst has determined that a server was not patched and ...; Question 83: A root cause analysis reveals that a web application outage ...; Question 84: A junior security analyst is conducting an analysis after pa...; Question 85: After a ransomware attack a forensics company needs to revie...; Question 86: The security team received a report of copyright infringemen...; Question 87: A backdoor was detected on the containerized application env...; Question 88: A security analyst needs to generate a server certificate to...; Question 89: A company is looking to migrate some servers to the cloud to...; Question 90: A cloud administrator is configuring five compute instances ...; Question 91: Which of the following control sets should a well-written BC...; Question 92: An organization is building backup sever moms in geographica...; Question 93: A company just developed a new web application for a governm...; Question 94: A security analyst wants to verify that a client-server (non...; Question 95: To further secure a company's email system, an administrator...; Question 96: An organization just experienced a major cyberattack modem. ...; Question 97: A security auditor is reviewing vulnerability scan data prov...; Question 98: A development team employs a practice of bringing all the co...; Question 99: The human resources department of a large online retailer ha...; Question 100: Users have been issued smart cards that provide physical acc...; Question 101: The president of a company that specializes in military cont...; Question 102: To secure an application after a large data breach, an e-com...; Question 103: A security architect at a large, multinational organization ...; Question 104: A security analyst is investigating some users who are being...; Question 105: A security engineer is installing a WAF to protect the compa...; Question 106: Which of the following control types would be BEST to use to...; Question 107: An organization's policy requires users to create passwords ...; Question 108: Which of the following would MOST likely support the integri...; Question 109: A cybersecurity department purchased o new PAM solution. The...; Question 110: An incident response technician collected a mobile device du...; Question 111: The concept of connecting a user account across the systems ...; Question 112: A cybersecurity manager has scheduled biannual meetings with...; Question 113: A news article states that a popular web browser deployed on...; Question 114: As part of a company's ongoing SOC maturation process, the c...; Question 115: When implementing automation with loT devices, which of the ...; Question 116: A security analyst notices several attacks are being blocked...; Question 117: A commercial cyber-threat intelligence organization observes...; Question 118: A company is receiving emails with links to phishing sites t...; Question 119: As part of the lessons-learned phase, the SOC is tasked with...; Question 120: Which of the following environments typically hosts the curr...; Question 121: An information security incident recently occurred at an org...; Question 122: A remote user recently took a two-week vacation abroad and b...; Question 123: An engineer needs to deploy a security measure to identify a...; Question 124: A recently discovered zero-day exploit utilizes an unknown v...; Question 125: A security analyst needs to perform periodic vulnerably scan...; Question 126: A customer service representative reported an unusual text m...; Question 127: When used at the design stage, which of the following improv...; Question 128: A hospital's administration is concerned about a potential l...; Question 129: A security analyst needs to find real-time data on the lates...; Question 130: A penetration tester gains access to the network by exploiti...; Question 131: A manufacturer creates designs for very high security produc...; Question 132: An attacked is attempting to exploit users by creating a fak...; Question 133: An attacker was eavesdropping on a user who was shopping onl...; Question 134: An employee opens a web browser and types a URL into the add...; Question 135: A company uses wireless tor all laptops and keeps a very det...; Question 136: A security monitoring company offers a service that alerts i...; 1 commentQuestion 137: Which of the following BEST describes the method a security ...; Question 138: Which of the following serves to warn users against download...; Question 139: Employees are having issues accessing the company's website....; Question 140: Which of the following will Increase cryptographic security?...; Question 141: A preventive control differs from a compensating control in ...; Question 142: A Chief Security Officer (CSO) has asked a technician to dev...; Question 143: After multiple on premises security solutions were migrated ...; Question 144: Which of the following BEST explains the reason why a server...; Question 145: A company's Chief Information Security Officer (CISO) recent...; Question 146: A recent security assessment revealed that an actor exploite...; Question 147: Which of the following BEST reduces the security risks intro...; Question 148: Ann, a customer, received a notification from her mortgage c...; Question 149: A security analyst is preparing a threat for an upcoming int...; Question 150: Which of the following encryption algorithms require one enc...; Question 151: A network technician is installing a guest wireless network ...; Question 152: A company is adopting a BYOD policy and is looking for a com...; Question 153: A cybersecurity analyst reviews the log files from a web ser...; Question 154: Which of the following would BEST identify and remediate a d...; Question 155: Which of the following should be monitored by threat intelli...; Question 156: Which of the following allows for functional test data to be...; Question 157: A security analyst is investigating multiple hosts that are ...; Question 158: A network administrator at a large organization Is reviewing...; Question 159: Drag and Drop Question Leveraging the information supplied b...; Question 160: Under GDPR, which of the following is MOST responsible for t...; Question 161: Which of the following BEST describes the MFA attribute that...; Question 162: A company suspects that some corporate accounts were comprom...; Question 163: An analyst visits an internet forum looking for information ...; Question 164: Which of the following are the MOST likely vectors for the u...; 1 commentQuestion 165: Hackers recently attacked a company's network and obtained s...; Question 166: A company recently experienced an attack in which a maliciou...; Question 167: A network administrator has been alerted that web pages are ...; Question 168: When planning to build a virtual environment, an administrat...; Question 169: An organization has decided to host its web application and ...; Question 170: Which of the following holds staff accountable while escorti...; Question 171: A vulnerability assessment report will include the CVSS scor...; Question 172: The process of passively gathering information poor to launc...; Question 173: A company has three technicians who share the same credentia...; Question 174: During an investigation, the incident response team discover...; Question 175: A bank detects fraudulent activity on user's account. The us...; Question 176: A company recently suffered a breach in which an attacker wa...; Question 177: A malicious actor recently penetration a company's network a...; Question 178: Customers reported their antivirus software flagged one of t...; Question 179: A systems administrator reports degraded performance on a vi...; Question 180: Which of the following would cause a Chief Information Secur...; Question 181: A security engineer needs to implement an MDM solution that ...; Question 182: The following is an administrative control that would be MOS...; Question 183: A security analyst needs to determine how an attacker was ab...; Question 184: A security assessment determines DES and 3DES at still being...; Question 185: An analyst is generating a security report for the managemen...; Question 186: A security analyst is looking for a solution to help communi...; Question 187: A cybersecurity administrator has a reduced team and needs t...; Question 188: The Chief Executive Officer (CEO) of an organization would l...; Question 189: An engineer wants to access sensitive data from a corporate-...; Question 190: A company has limited storage available and online presence ...; Question 191: Which of the following refers to applications and systems th...; Question 192: An application developer accidentally uploaded a company's c...; Question 193: A security researcher has alerted an organization that its s...; Question 194: An organization is concerned about hackers potentially enter...; Question 195: A security analyst has been asked by the Chief Information S...; Question 196: The SIEM at an organization has detected suspicious traffic ...; Question 197: Following a prolonged datacenter outage that affected web-ba...; Question 198: Which of the following is the correct order of volatility fr...; Question 199: A consultant is configuring a vulnerability scanner for a la...; Question 200: Which of the following environments would MOST likely be use...; Question 201: An attacker was easily able to log in to a company's securit...; Question 202: A security analyst is performing a packet capture on a serie...; Question 203: A security engineer needs to build a solution to satisfy reg...; Question 204: A user downloaded an extension for a browser, and the uses d...; Question 205: Which two features are available only in next-generation fir...; Question 206: A systems administrator is troubleshooting a server's connec...; Question 207: Which of the following threat actors is MOST likely to be mo...; Question 208: An enterprise has hired an outside security firm to facilita...; Question 209: A external forensics investigator has been hired to investig...; Question 210: After reading a security bulletin, a network security manage...; Question 211: A company recently moved sensitive videos between on-premise...; Question 212: An analyst is trying to identify insecure services that are ...; Question 213: A company uses specially configured workstations tor any wor...; Question 214: Which of the following describes the continuous delivery sof...; Question 215: A Chief Information Security Officer (CISO) is concerned abo...; Question 216: A retail company that is launching a new website to showcase...; Question 217: A systems analyst determines the source of a high number of ...; Question 218: The IT department's on-site developer has been with the team...; Question 219: A nationwide company is experiencing unauthorized logins at ...; Question 220: Which of the following components can be used to consolidate...; Question 221: A dynamic application vulnerability scan identified code inj...; Question 222: A user reports trouble using a corporate laptop. The laptop ...; Question 223: A company processes highly sensitive data and senior managem...; Question 224: An organization has implemented a two-step verification proc...; Question 225: A security operations analyst is using the company's SIEM so...; Question 226: A manufacturing company has several one-off legacy informati...; Question 227: A security analyst is investigation an incident that was fir...; Question 228: Which of the following are requirements that must be configu...; Question 229: Which of the following would satisfy three-factor authentica...; Question 230: A company reduced the area utilized in its datacenter by cre...; Question 231: A Chief Security Officer (CSO) is concerned about the amount...; Question 232: A security analyst is reviewing the following attack log out...; Question 233: Which of the following would a European company interested i...; Question 234: An organization blocks user access to command-line interpret...; Question 235: A security analyst has been reading about a newly discovered...

Question 9/235

LEAVE A REPLY

Download PDF File