Get Latest [Oct-2021] Conduct effective penetration tests using ExamTorrent SYO-501
Penetration testers simulate SYO-501 exam PDF
NEW QUESTION 65
A Chief Information Officer (CIO) recently saw on the news that a significant security flaws exists with a specific version of a technology the company uses to support many critical application. The CIO wants to know if this reported vulnerability exists in the organization and, if so, to what extent the company could be harmed.
Which of the following would BEST provide the needed information?
- A. Penetration test
- B. Vulnerability scan
- C. Active reconnaissance
- D. Patching assessment report
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION 66
A user needs to send sensitive information to a colleague using PKI. Which of the following concepts apply when a sender encrypts the message hash with the sender's private key? (Select TWO)
- A. Transport security
- B. Steganography
- C. Message integrity
- D. Email content encryption
- E. Non-repudiation
Answer: C,E
NEW QUESTION 67
For each of the given items, select the appropriate authentication category from the dropdown choices.
Instructions: When you have completed the simulation, please select the Done button to submit.
.
Answer:
Explanation:
Explanation:
Something you are includes fingerprints, retina scans, or voice recognition.
Something you have includes smart cards, token devices, or keys.
Something you know includes a password, codes, PINs, combinations, or secret phrases. Somewhere you are including a physical location s or logical addresses, such as domain name, an IP address, or a MAC address.
Something you do includes your typing rhythm, a secret handshake, or a private knock http://en.wikipedia.org/wiki/Password_authentication_protocol#Working_cycle http://en.wikipedia.org/wiki/Smart_card#Security
NEW QUESTION 68
During a penetration test, the tester performs a preliminary scan for any responsive hosts. Which of the following BEST explains why the tester is doing this?
- A. To identify the total number of hosts and determine if the network can be victimized by a DoS attack
- B. To identify servers for subsequent scans and further investigation
- C. To determine if the network routes are improperly forwarding request packets
- D. To identify the unresponsive hosts and determine if those could be used as zombies in a follow-up scan.
Answer: B
NEW QUESTION 69
An incident response manager has started to gather all the facts related to a SIEM alert showing multiple systems may have been compromised. The manager has gathered these facts:
The breach is currently indicated on six user PCs
One service account is potentially compromised
Executive management has been notified
In which of the following phases of the IRP is the manager currently working?
- A. Containment
- B. Identification
- C. Eradication
- D. Recovery
Answer: B
NEW QUESTION 70
An attachment that was emailed to finance employees contained an embedded message. The security administrator investigates and finds the intent was to conceal the embedded information from public view.
Which of the following BEST describes this type of message?
- A. Stenography
- B. Diffusion
- C. Obfuscation
- D. BCRYPT
Answer: C
NEW QUESTION 71
Security administrators attempted corrective action after a phishing attack. Users are still experiencing trouble logging in, as well as an increase in account lockouts. Users' email contacts are complaining of an increase in spam and social networking requests. Due to the large number of affected accounts, remediation must be accomplished quickly. Which of the following actions should be taken FIRST? (Select TWO)
- A. Update WAF rules to block social networks
- B. Remove the compromised accounts with all AD groups
- C. Disable the compromised accounts
- D. Disable the open relay on the email server
- E. Change the compromised accounts' passwords
- F. Enable sender policy framework
Answer: D,F
Explanation:
Sender Policy Framework (SPF) is a simple email-validation system designed to detect email spoofing by providing a mechanism to allow receiving mail exchangers to check that incoming mail from a domain comes from a host authorized by that domain's administrators. n a Small Business Server environment, you may have to prevent your Microsoft Exchange Server-based server from being used as an open relay SMTP server for unsolicited commercial e-mail messages, or spam.
You may also have to clean up the Exchange server's SMTP queues to delete the unsolicited commercial email messages.
If your Exchange server is being used as an open SMTP relay, you may experience one or more of the following symptoms:
The Exchange server cannot deliver outbound SMTP mail to a growing list of e-mail domains.
Internet browsing is slow from the server and from local area network (LAN) clients.
Free disk space on the Exchange server in the location of the Exchange information store databases or the Exchange information store transaction logs is reduced more rapidly than you expect.
The Microsoft Exchange information store databases spontaneously dismount. You may be able to manually mount the stores by using Exchange System Manager, but the stores may dismount on their own after they run for a short time. For more information, click the following article number to view the article in the Microsoft Knowledge Base.
NEW QUESTION 72
After a user reports stow computer performance, a systems administrator detects a suspicious file, which was installed as part of a freeware software package.
The systems administrator reviews the output below:
Based on the above information, which of the following types of malware was installed on the user's computer?
- A. Worm
- B. Bot
- C. Spyware
- D. Keylogger
- E. RAT
Answer: E
Explanation:
The winserver.exe file is a remote access Trojan (RAT). All of the other executable names displayed by netstat are valid.
The RAT acronym stands for Remote Administration Tool. A RAT is a software, popularly used to control other computers remotely.
To hack a computer remotely using a RAT, you have to create a server and then send this server to the victim whose computer you're trying to hack. Generally, this server is binded to any file, like a picture or song, so that whenever the victim opens the file on his computer, our server is installed. This server opens a port on the victim's computer, allowing you to remotely hack the device via the open port.
Some examples of RATs are:
Prorat
Turkojan
Yuri RAT and many other.
A worm is self-replicating malware that travels throughout a network without the assistance of a host application or user interaction.
A logic bomb is a string of code embedded into an application or script that will execute in response to an event.
Ransomware is a specific type of Trojan that typically encrypts the user's data until the user pays a ransom.
Ransomware that encrypts data is often called crypto-malware.
Because winserver.exe is known malware, the netstat output does indicate malware is running.
NEW QUESTION 73
An auditor wants to test the security posture of an organization by running a tool that will display the following:
Which of the following commands should be used?
- A. nc
- B. ipconfig
- C. nbtstat
- D. arp
Answer: C
NEW QUESTION 74
A security engineer is faced with competing requirements from the networking group and database administrators. The database administrators would like ten application servers on the same subnet for ease of administration, whereas the networking group would like to segment all applications from one another.
Which of the following should the security administrator do to rectify this issue?
- A. Recommend that only applications with minimal security features should be segmented to protect them
- B. Recommend performing a security assessment on each application, and only segment the applications with the most vulnerability
- C. Recommend segmenting each application, as it is the most secure approach
- D. Recommend classifying each application into like security groups and segmenting the groups from one another
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 75
Which of the following types of penetration test will allow the tester to have access only to password hashes prior to the penetration test?
- A. Black box
- B. White box
- C. Gray box
- D. Credentialed
Answer: C
Explanation:
Explanation
NEW QUESTION 76
A business sector is highly competitive and safeguarding trade secrets and critical information is paramount On a seasonal basis an organization employs temporary hires and contractor personnel to accomplish its mission objectives The temporary and contract personnel require access to network resources only when on the clock Which of the following account management practices are the BEST ways to manage these accounts'? (Select TWO)
- A. Employ an account expiration strategy
- B. Employ a password lockout policy
- C. Employ a random key generator strategy
- D. Employ time-of-day restrictions
- E. Employ password complexity
Answer: A,D
NEW QUESTION 77
A new firewall has been places into service at an organization. However, a configuration has not been
entered on the firewall. Employees on the network segment covered by the new firewall report they are
unable to access the network. Which of the following steps should be completed to BEST resolve the
issue?
- A. The firewall should be configured to include an explicit deny rule.
- B. The firewall should be configured to prevent user traffic form matching the implicit deny rule.
- C. The firewall should be configured with port security to allow traffic.
- D. The firewall should be configured with access lists to allow inbound and outbound traffic.
Answer: B
NEW QUESTION 78
Which of the following enables a corporation to extend local security policies to corporate resources hosted in a CSP's infrastructure?
- A. CRL
- B. PKI
- C. CASB
- D. VDI
- E. Directory services
Answer: C
NEW QUESTION 79
A security administrator is tasked with conducting an assessment made to establish the baseline security posture of the corporate IT infrastructure. The assessment must report actual flaws and weaknesses in the infrastructure. Due to the expense of hiring outside consultants, the testing must be performed using in- house or cheaply available resource. There cannot be a possibility of any requirement being damaged in the test.
Which of the following has the administrator been tasked to perform?
- A. Penetration test
- B. Vulnerability assessment
- C. Risk transference
- D. Threat assessment
Answer: B
NEW QUESTION 80
When choosing a hashing algorithm for storing passwords in a web server database, which of the following is the BEST explanation for choosing HMAC-MD5 over simple MD5?
- A. HMAC-M05 is more resistant to brute forcing
- B. HMAC provides hardware acceleration thus speeding up authentication
- C. HMAC adds a transport layer handshake which improves authentication
- D. HMAC-MD5 can be decrypted taster speeding up performance
Answer: B
NEW QUESTION 81
A tester was able to leverage a pass-the-hash attack during a recent penetration test. The tester gained a foothold and moved laterally through the network Which of the following would prevent this type of attack from reoccurring?
- A. Renaming all active service accounts and disabling all inactive service accounts
- B. Creating separate accounts for privileged access that are not used to log on to local machines
- C. Increasing the password complexity requirements and setting account expiration dates
- D. Enabling full-disk encryption on all workstations that are used by administrators and disabling RDP
Answer: C
NEW QUESTION 82
Staff members of an organization received an email message from the Chief Executive Officer (CEO) asking them for an urgent meeting in the main conference room. When the staff assembled, they learned the message received was not actually from the CEO. Which of the following BEST represents what happened?
- A. Spear phoshing attack
- B. Phishing attack
- C. Vishing attack
- D. Whaling attack
Answer: A
NEW QUESTION 83
An analyst generates the following color-coded table shown in the exhibit to help explain the risk of potential incidents in the company. The vertical axis indicates the likelihood or an incident, while the horizontal axis indicates the impact.
Which of the following is this table an example of?
- A. Supply chain assessment
- B. Privacy impact assessment
- C. Internal threat assessment
- D. Qualitative risk assessment
Answer: D
NEW QUESTION 84
Which of the following is the proper way to quantify the total monetary damage resulting from an exploited
vulnerability?
- A. Calculate the ALE
- B. Calculate the ARO
- C. Calculate the TCO
- D. Calculate the MTBF
Answer: A
NEW QUESTION 85
Task: Determine the types of attacks below by selecting an option from the dropdown list.
Answer:
Explanation:
Explanation
A: Phishing is the act of sending an email to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information that will be used for identity theft.
Phishing email will direct the user to visit a website where they are asked to update personal information, such as a password, credit card, social security, or bank account numbers, that the legitimate organization already has. The website, however, is bogus and set up only to steal the information the user enters on the page.
B: Whaling is a specific kind of malicious hacking within the more general category of phishing, which involves hunting for data that can be used by the hacker. In general, phishing efforts are focused on collecting personal data about users. In whaling, the targets are high-ranking bankers, executives or others in powerful positions or job titles. Hackers who engage in whaling often describe these efforts as "reeling in a big fish," applying a familiar metaphor to the process of scouring technologies for loopholes and opportunities for data theft. Those who are engaged in whaling may, for example, hack into specific networks where these powerful individuals work or store sensitive data. They may also set up keylogging or other malware on a work station associated with one of these executives. There are many ways that hackers can pursue whaling, leading C-level or top-level executives in business and government to stay vigilant about the possibility of cyber threats.
C: Vishing is the act of using the telephone in an attempt to scam the user into surrendering private information that will be used for identity theft. The scammer usually pretends to be a legitimate business, and fools the victim into thinking he or she will profit.
D: SPIM is a term sometimes used to refer to spam over IM (Instant Messaging). It's also called just spam, instant spam, or IM marketing. No matter what the name, it consists of unwanted messages transmitted through some form of instant messaging service, which can include Short Message Service (SMS) E: Social engineering is a non-technical method of intrusion hackers use that relies heavily on human interaction and often involves tricking people into breaking normal security procedures. It is one of the greatest threats that organizations today encounter. A social engineer runs what used to be called a "con game." For example, a person using social engineering to break into a computer network might try to gain the confidence of an authorized user and get them to reveal information that compromises the network's security.
Social engineers often rely on the natural helpfulness of people as well as on their weaknesses. They might, for example, call the authorized employee with some kind of urgent problem that requires immediate network access. Appealing to vanity, appealing to authority, appealing to greed, and old-fashioned eavesdropping are other typical social engineering techniques.
http://www.webopedia.com/TERM/P/phishing.html
http://www.techopedia.com/definition/28643/whaling
http://www.webopedia.com/TERM/V/vishing.html
http://searchsecurity.techtarget.com/definition/social-engineering
NEW QUESTION 86
Which of the following command line tools would be BEST to identify the services running in a server?
- A. Traceroute
- B. Nslookup
- C. Ipconfig
- D. Netstat
Answer: D
NEW QUESTION 87
Drag and Drop Question
You have been tasked with designing a security plan for your company.
Drag and drop the appropriate security controls on the floor plan.
Instructions:
All objects must be used and all place holders must be filled Order does not matter When you have completed the simulation, please select the Done button to submit.
Answer:
Explanation:
Explanation:
Cable locks - Adding a cable lock between a laptop and a desk prevents someone from picking it up and walking away Proximity badge + reader Safe is a hardware/physical security measure Mantrap can be used to control access to sensitive areas.
CCTV can be used as video surveillance.
Biometric reader can be used to control and prevent unauthorized access. Locking cabinets can be used to protect backup media, documentation and other physical artefacts.
NEW QUESTION 88
A security analyst wishes to increase the security of an FTP server. Currently, all traffic to the FTP server is unencrypted. Users connecting to the FTP server use a variety of modern FTP client software.
The security analyst wants to keep the same port and protocol, while also still allowing unencrypted connections. Which of the following would BEST accomplish these goals?
- A. Require the SFTP protocol to connect to the file server.
- B. Use SSH tunneling to encrypt the FTP traffic.
- C. Use explicit FTPS for connections.
- D. Use implicit TLS on the FTP server.
Answer: C
NEW QUESTION 89
A network administrator is trying to provide the most resilient hard drive configuration in a server. With five hard drives, which of the following is the MOST fault-tolerant configuration?
- A. RAID 5
- B. RAID 1
- C. RAID 10
- D. RAID 6
Answer: A
NEW QUESTION 90
......
Tested Material Used To SYO-501 Test Engine: https://www.examtorrent.com/SYO-501-valid-vce-dumps.html
