4/1/25, 12:26 PM MOCK EXAM 2 (SY0-601)
MOCK EXAM 2 (SY0-601) ACTUAL EXAM LATEST
VERSION ACTUAL EXAM COMPLETE QUESTIONS
AND CORRECT DETAILED ANSWERS (VERIFIED
ANSWERS) |ALREADY GRADED A+
You are a security b. EAP-TLS
administrator and you wish
to implement an encrypted Concept: EAP-TLS is a secure wireless authentication
method of authentication protocol, as it uses certificates. An X509 certificate is
for your wireless network. installed on the endpoint. This is the most secure EAP
Which of the following standard.
protocols is the most secure
for your wireless network?
a. WPA2-PSK
b. EAP-TLS
c. PEAP
d. PAP
You work on the c. Run a packet sniffer to capture the network traffic to identify
cybersecurity team of a the attacker
large multinational
Concept: The first stage in any attack is to capture the volatile
corporation, and you
evidence. In this
have been alerted to an incident, you would capture the network traffic to identify the
attack on the web server source of the attack.
inside your screened subnet
that is used for selling you
products on the
internet. You can see by
running netstat that you
have an unknown active
connection. What should be
the first step you take when
investigating this incident?
a. Isolate the web server by
1/26
,4/1/25, 12:26 PM MOCK EXAM 2 (SY0-601)
disconnecting it from the
network to prevent
further
damage
b. Disconnect all
external active
connections to ensure that
any attack is stopped
c. Run a packet sniffer to
capture the network
traffic to identify the
attacker
d. Take a screenshot of the
damage done to the
website and report the
incident to the police
I need to purchase a b. Wildcard certificate
certificate that I can install
on five internet-facing mail Concept: A wildcard certificate can be used on multiple
servers. Which of the servers, normally those that are internet facing.
following is the most cost-
effective solution?
a. PEM certificate
b. Wildcard certificate
c. Subject Alternative
Name (SAN)
certificate
d. Root certificate
You are the operational c. Hot site
manager for a
financial company that has Concept: The hot site should be up and running with data that
just suffered a disaster. has been replicated.
Which of the following sites
will you choose to be fully
operational in the smallest
amount of time?
a. Cold site
b. Warm site
2/26
, 4/1/25, 12:26 PM MOCK EXAM 2 (SY0-601)
c. Hot site
d. Off site
The serious crimes agency a. Make a system image of the laptop
has just taken control of a
laptop belonging to a Concept: The first step is to create a system image or, if
well- known criminal that it is a hard drive, create a forensic copy.
they have been trying to
track down for the last 20
years. They want to ensure
that everything is done by
the book and that no
errors are made.
What is the first step in
their forensic investigation,
prior to starting the chain of
custody?
a. Make a system image of the
laptop
b. Place it in a polythene bag
and seal it
c. Has the data so that
data integrity is assured
d. Ask for proof of ownership of
the laptop
If an attacker is looking for c. Nmap
information
about the software Concept: A Network mapper (Nmap) can identify new
versions that you use on hosts on the network, identify what services are
your network, which of running, and identify what operating systems are
the following tools could installed. It can
they use? Select all that also be used for banner grabbing.
apply:
a. Netstat
b. Port scanning
c. Nmap
d. The harvester
3/26
MOCK EXAM 2 (SY0-601) ACTUAL EXAM LATEST
VERSION ACTUAL EXAM COMPLETE QUESTIONS
AND CORRECT DETAILED ANSWERS (VERIFIED
ANSWERS) |ALREADY GRADED A+
You are a security b. EAP-TLS
administrator and you wish
to implement an encrypted Concept: EAP-TLS is a secure wireless authentication
method of authentication protocol, as it uses certificates. An X509 certificate is
for your wireless network. installed on the endpoint. This is the most secure EAP
Which of the following standard.
protocols is the most secure
for your wireless network?
a. WPA2-PSK
b. EAP-TLS
c. PEAP
d. PAP
You work on the c. Run a packet sniffer to capture the network traffic to identify
cybersecurity team of a the attacker
large multinational
Concept: The first stage in any attack is to capture the volatile
corporation, and you
evidence. In this
have been alerted to an incident, you would capture the network traffic to identify the
attack on the web server source of the attack.
inside your screened subnet
that is used for selling you
products on the
internet. You can see by
running netstat that you
have an unknown active
connection. What should be
the first step you take when
investigating this incident?
a. Isolate the web server by
1/26
,4/1/25, 12:26 PM MOCK EXAM 2 (SY0-601)
disconnecting it from the
network to prevent
further
damage
b. Disconnect all
external active
connections to ensure that
any attack is stopped
c. Run a packet sniffer to
capture the network
traffic to identify the
attacker
d. Take a screenshot of the
damage done to the
website and report the
incident to the police
I need to purchase a b. Wildcard certificate
certificate that I can install
on five internet-facing mail Concept: A wildcard certificate can be used on multiple
servers. Which of the servers, normally those that are internet facing.
following is the most cost-
effective solution?
a. PEM certificate
b. Wildcard certificate
c. Subject Alternative
Name (SAN)
certificate
d. Root certificate
You are the operational c. Hot site
manager for a
financial company that has Concept: The hot site should be up and running with data that
just suffered a disaster. has been replicated.
Which of the following sites
will you choose to be fully
operational in the smallest
amount of time?
a. Cold site
b. Warm site
2/26
, 4/1/25, 12:26 PM MOCK EXAM 2 (SY0-601)
c. Hot site
d. Off site
The serious crimes agency a. Make a system image of the laptop
has just taken control of a
laptop belonging to a Concept: The first step is to create a system image or, if
well- known criminal that it is a hard drive, create a forensic copy.
they have been trying to
track down for the last 20
years. They want to ensure
that everything is done by
the book and that no
errors are made.
What is the first step in
their forensic investigation,
prior to starting the chain of
custody?
a. Make a system image of the
laptop
b. Place it in a polythene bag
and seal it
c. Has the data so that
data integrity is assured
d. Ask for proof of ownership of
the laptop
If an attacker is looking for c. Nmap
information
about the software Concept: A Network mapper (Nmap) can identify new
versions that you use on hosts on the network, identify what services are
your network, which of running, and identify what operating systems are
the following tools could installed. It can
they use? Select all that also be used for banner grabbing.
apply:
a. Netstat
b. Port scanning
c. Nmap
d. The harvester
3/26
