SY0-601 Exam Dumps | A security engineer is investigating a penetration test report that states the company website is vulnerable

<< Prev Question Next Question >>

Question 78/220

A security engineer is investigating a penetration test report that states the company website is vulnerable to a web application attack. While checking the web logs from the time of the test, the engineer notices several invalid web form submissions using an unusual address: "SELECT * FROM customername". Which of the following is most likely being attempted?

A. Directory traversal

B. SQL injection

C. Privilege escalation

D. Cross-site scripting

Question List (220q): Question 1: A security engineer learns that a non-critical application w...; Question 2: A company recently upgraded its authentication infrastructur...; Question 3: An attacker replaces a digitally signed document with anothe...; 2 commentQuestion 4: A company wants to modify its current backup strategy to mod...; Question 5: A third party asked a user to share a public key for secure ...; Question 6: During an assessment, a systems administrator found several ...; Question 7: An organization discovered a disgruntled employee exfiltrate...; Question 8: An organization needs to implement more stringent controls o...; Question 9: Which of the following would most likely include language pr...; Question 10: Which of the following involves the inclusion of code in the...; Question 11: A company is focused on reducing risks from removable media ...; Question 12: A company recently decided to allow its employees to use the...; Question 13: A security engineer obtained the following output from a thr...; Question 14: Several universities are participating in a collaborative re...; Question 15: Which of the following function as preventive, detective, an...; Question 16: The Chief Information Security Officer (CISO) has decided to...; Question 17: Which of the following controls would be the MOST cost-effec...; Question 18: An organization has expanded its operations by opening a rem...; Question 19: The compliance team requires an annual recertification of pr...; Question 20: A security analyst was deploying a new website and found a c...; Question 21: Which of the following is a primary security concern for a c...; Question 22: A company would like to set up a secure way to transfer data...; Question 23: A Chief Information Security Officer (CISO) is evaluating (h...; Question 24: Several users have been violating corporate security policy ...; Question 25: A security analyst is responding to an alert from the SIEM. ...; Question 26: Which of the following can best protect against an employee ...; Question 27: Which of the following will increase cryptographic security?...; Question 28: A security professional wants to enhance the protection of a...; Question 29: A security administrator is seeking a solution to prevent un...; Question 30: An analyst is working on an investigation with multiple aler...; Question 31: A company recently enhanced mobile device configuration by i...; Question 32: A global company is experiencing unauthorized logging due to...; Question 33: Which of the following would a security analyst use to deter...; Question 34: A systems analyst is responsible for generating a new digita...; Question 35: Which of the following terms should be included in a contrac...; Question 36: A company installed several crosscut shredders as part of in...; Question 37: A security operations center wants to implement a solution t...; Question 38: Which of the following best describes when an organization U...; Question 39: Which of the following environments can be stood up in a sho...; Question 40: Which of the following BEST describes data streams that are ...; Question 41: A security team is providing input on the design of a second...; Question 42: Which of the following is constantly scanned by internet bot...; Question 43: Which of the following BEST describes a technique that compe...; Question 44: A network engineer and a security engineer are discussing wa...; Question 45: Developers are writing code and merging it into shared repos...; Question 46: Which of the following is used to quantitatively measure the...; Question 47: A security researcher has alerted an organization that its s...; Question 48: A security administrator has discovered that workstations on...; Question 49: A data owner has been tasked with assigning proper data clas...; Question 50: A desktop computer was recently stolen from a desk located i...; Question 51: Which of the following allow access to remote computing reso...; Question 52: A systems integrator is installing a new access control syst...; Question 53: A company reduced the area utilized in its datacenter by cre...; Question 54: A security analyst reviews web server logs and notices the f...; Question 55: Which of the following security concepts should an e-commerc...; Question 56: Hackers recently attacked a company's network and obtained s...; Question 57: Which of Ihe following control types is patch management cla...; Question 58: An organization is repairing damage after an incident. Which...; Question 59: Which of the following would satisfy three-factor authentica...; Question 60: The technology department at a large global company is expan...; Question 61: Which of the following is required in order for an IDS and a...; Question 62: Which of the following incident response phases should the p...; Question 63: Which of the following can be used to calculate the total lo...; Question 64: Which of the following is the correct order of evidence from...; Question 65: A cybersecurity analyst needs to adopt controls to properly ...; Question 66: A security analyst is reviewing SIEM logs during an ongoing ...; Question 67: The SIEM at an organization has detected suspicious traffic ...; Question 68: An employee received multiple messages on a mobile device. T...; Question 69: A company is adding a clause to its AUP that states employee...; Question 70: A newly purchased corporate WAP needs to be configured in th...; Question 71: A security researcher is using an adversary's infrastructure...; Question 72: A security engineer needs to create a network segment that c...; Question 73: An enterprise needs to keep cryptographic keys in a safe man...; Question 74: A company purchased cyber insurance to address items listed ...; Question 75: During the onboarding process, an employee needs to create a...; Question 76: A security analyst reviews a company's authentication logs a...; Question 77: A company has hired an assessment team to test the security ...; Question 78: A security engineer is investigating a penetration test repo...; Question 79: An organization's corporate offices were destroyed due to a ...; Question 80: A company is required to continue using legacy software to s...; Question 81: A security analyst is running a vulnerability scan to check ...; Question 82: A security team discovered a large number of company-issued ...; Question 83: Which of the following describes business units that purchas...; Question 84: A security engineer is building a file transfer solution to ...; Question 85: A company wants to deploy PKI on its internet-facing website...; Question 86: A Chief Information Security Officer (CISO) wants to impleme...; Question 87: A company's help desk received several AV alerts indicating ...; Question 88: A systems analyst determines the source of a high number of ...; Question 89: An attacker is using a method to hide data inside of benign ...; Question 90: A security analyst is investigating multiple hosts that are ...; Question 91: A security administrator would like to ensure all cloud serv...; Question 92: A security administrator is setting up a SIEM to help monito...; Question 93: A customer has reported that an organization's website displ...; Question 94: A security engineer is setting up passwordless authenticatio...; Question 95: A software company is analyzing a process that detects softw...; Question 96: Certain users are reporting their accounts are being used to...; Question 97: A Chief Information Security Officer (CISO) wants to explici...; Question 98: A security architect at a large, multinational organization ...; Question 99: A security analyst needs an overview of vulnerabilities for ...; Question 100: A network security manager wants to implement periodic event...; Question 101: A company recently suffered a breach in which an attacker wa...; Question 102: A security analyst is assisting a team of developers with be...; Question 103: Which of the following environments would MOST likely be use...; Question 104: Which of the following procedures would be performed after t...; Question 105: To reduce and limit software and infrastructure costs the Ch...; Question 106: An information security manager for an organization is compl...; Question 107: Which of the following secure application development concep...; Question 108: A company is auditing the manner in which its European custo...; Question 109: A network-connected magnetic resonance imaging (MRI) scanner...; Question 110: A security engineer is reviewing the logs from a SAML applic...; Question 111: An engineer recently deployed a group of 100 web servers in ...; Question 112: A security administrator needs to inspect in-transit files o...; Question 113: A junior human resources administrator was gathering data ab...; Question 114: Which of the following best describes configuring devices to...; Question 115: An attacker was eavesdropping on a user who was shopping onl...; Question 116: Which of the following BEST describes the team that acts as ...; Question 117: Which of the following roles is responsible for defining the...; Question 118: You received the output of a recent vulnerability assessment...; Question 119: An organization has hired a security analyst to perform a pe...; Question 120: An organization is concerned about hackers potentially enter...; Question 121: An account was disabled atter several failed and successful ...; Question 122: Which of the following should a technician consider when sel...; Question 123: Which of the following would be the best resource for a soft...; Question 124: Developers are writing code and merging it into shared repos...; Question 125: Which of the following describes software on network hardwar...; Question 126: A new security engineer has started hardening systems. One o...; Question 127: A security analyst wants to verify that a client-server (non...; Question 128: A company a "right to forgotten" request To legally comply, ...; Question 129: A company completed a vulnerability scan. The scan found mal...; Question 130: Multiple beaconing activities to a malicious domain have bee...; Question 131: A penetration tester was able to compromise a host using pre...; Question 132: A network administrator has been alerted that web pages are ...; Question 133: A security analyst receives alerts about an internal system ...; Question 134: During a security assessment, a security finds a file with o...; Question 135: Which of the following describes a maintenance metric that m...; Question 136: If a current private key is compromised, which of the follow...; Question 137: The application development team is in the final stages of d...; 2 commentQuestion 138: A security administrator examines the ARP table of an access...; Question 139: A company is implementing MFA for all applications that stor...; Question 140: A cyber security administrator is using iptables as an enter...; Question 141: A security administrator is integrating several segments ont...; Question 142: A company wants the ability to restrict web access and monit...; Question 143: A network analyst is setting up a wireless access point for ...; Question 144: A desktop support technician recently installed a new docume...; Question 145: Which of the following best describes the situation where a ...; Question 146: A security analyst reports a company policy violation in a c...; Question 147: During a recent security assessment, a vulnerability was fou...; Question 148: An organization decided not to put controls in place because...; Question 149: An employee's company account was used in a data breach Inte...; Question 150: A digital forensics team at a large company is investigating...; Question 151: An incident has occurred in the production environment. Anal...; Question 152: A security incident has been resolved Which of the following...; Question 153: A security administrator is using UDP port 514 to send a sys...; Question 154: A company is implementing a new SIEM to log and send alerts ...; Question 155: A local server recently crashed, and the team is attempting ...; Question 156: A security analyst needs to implement an MDM solution for BY...; Question 157: An organization wants to ensure that proprietary information...; Question 158: An engineer is using scripting to deploy a network in a clou...; Question 159: A company would like to protect credit card information that...; Question 160: A retail store has a business requirement to deploy a kiosk ...; Question 161: Select the appropriate attack and remediation from each drop...; Question 162: A security engineer is installing a WAF to protect the compa...; Question 163: Cloud security engineers are planning to allow and deny acce...; Question 164: A company recently experienced an attack during which 5 main...; Question 165: A company is moving its retail website to a public cloud pro...; Question 166: Which of the following are common VoIP-associated vulnerabil...; Question 167: A network manager is concerned that business may be negative...; Question 168: A company that provides an online streaming service made its...; Question 169: A security engineer needs to build @ solution to satisfy reg...; Question 170: An organization recently completed a security control assess...; Question 171: A Chief Information Security Officer (CISO) is evaluating th...; Question 172: A network administrator needs to determine the sequence of a...; Question 173: The application development teams have been asked to answer ...; Question 174: An analyst is concerned about data leaks and wants to restri...; Question 175: Which of the following would help ensure a security analyst ...; Question 176: A company is concerned about individuals dnvmg a car into th...; Question 177: A user attempts to load a web-based application, but the exp...; Question 178: A manufacturing company has several one-off legacy informati...; Question 179: A company would like to move to the cloud. The company wants...; Question 180: Which of the following BEST describes the method a security ...; Question 181: A security administrator needs to provide secure access to i...; Question 182: A global pandemic is forcing a private organization to close...; Question 183: An upcoming project focuses on secure communications and tru...; Question 184: An organization is building a new headquarters and has place...; Question 185: A software development manager wants to ensure the authentic...; Question 186: A new vulnerability in the SMB protocol on the Windows syste...; Question 187: During a Chief Information Security Officer (CISO) conventio...; Question 188: Physical access to the organization's servers in the data ce...; Question 189: A customer called a company's security team to report that a...; Question 190: Which of the following Is the BEST reason to maintain a func...; 1 commentQuestion 191: Users report access to an application from an internal works...; Question 192: Which of the following should be addressed first on security...; Question 193: Which of the following is most likely to contain ranked and ...; Question 194: A major manufacturing company updated its internal infrastru...; Question 195: While reviewing pcap data, a network security analyst is abl...; Question 196: A corporate security team needs to secure the wireless perim...; Question 197: A security analyst is reviewing the output of a web server l...; Question 198: A company wants to build a new website to sell products onli...; Question 199: An email security vendor recently added a retroactive alert ...; Question 200: A business is looking for a cloud service provider that offe...; Question 201: The following are the logs of a successful attack. (Exhibit)...; Question 202: The help desk has received calls from users in multiple loca...; Question 203: Which of the following is a solution that can be used to sto...; Question 204: Which of the following in a forensic investigation should be...; Question 205: Which of the following would produce the closet experience o...; Question 206: A security analyst receives an alert from the company's S1EM...; Question 207: A new security engineer has started hardening systems. One o...; Question 208: A small, local company experienced a ransomware attack. The ...; Question 209: Unauthorized devices have been detected on the internal netw...; Question 210: An internet company has created a new collaboration applicat...; Question 211: A large enterprise has moved all its data to the cloud behin...; 1 commentQuestion 212: Two organizations are discussing a possible merger Both Orga...; Question 213: A user is trying to upload a tax document, which the corpora...; Question 214: Which of the following would be most effective to contain a ...; Question 215: A network analyst is investigating compromised corporate inf...; Question 216: Which of the following BEST describes a social-engineering a...; Question 217: A security analyst is investigating a report from a penetrat...; Question 218: An organization is concerned that ils hosted web servers are...; Question 219: A company recently experienced a significant data loss when ...; 1 commentQuestion 220: An organization's Chief Information Security Officer is crea...

Question 78/220

LEAVE A REPLY

Download PDF File