SY0-601 Implementation 5 — Questions and Answers
Question 1: A company requires that all employees use hardware tokens in addition to passwords when accessing the VPN. Which authentication factor do hardware tokens represent?
- Something you know
- Something you have (Correct answer)
- Something you are
- Somewhere you are
Correct answer: Something you have
Hardware tokens are physical devices representing the 'something you have' authentication factor in multi-factor authentication.
Question 2: Which implementation approach ensures that a user's browser only connects to a site using a specific certificate or public key, preventing impersonation even with a valid CA-issued cert?
- HSTS (HTTP Strict Transport Security)
- Certificate pinning (Correct answer)
- Certificate transparency logs
- OCSP stapling
Correct answer: Certificate pinning
Certificate pinning hardcodes the expected certificate or public key in the application, rejecting connections even with legitimately CA-signed alternative certificates.
Question 3: A network team is designing a DMZ. Which architecture correctly places web servers accessible to the Internet while protecting the internal network?
- Web servers inside the internal network with direct Internet access
- Web servers in a DMZ between two firewalls separating Internet and internal network (Correct answer)
- Web servers on the same VLAN as database servers
- No firewalls, relying on IDS only
Correct answer: Web servers in a DMZ between two firewalls separating Internet and internal network
A DMZ places publicly accessible servers between an external firewall (facing Internet) and an internal firewall (protecting internal systems).
Question 4: Which load balancer persistence method ensures a user's session always routes to the same backend server by tracking a session cookie?
- Round-robin scheduling
- Sticky sessions (cookie-based persistence) (Correct answer)
- Least connections method
- IP hash without cookies
Correct answer: Sticky sessions (cookie-based persistence)
Sticky sessions use a session cookie to route all requests from a specific user to the same backend server throughout their session.
Question 5: When hardening a new server, a technician should disable unnecessary services. Which principle does this practice reflect?
- Defense in depth
- Least privilege
- Reducing attack surface (Correct answer)
- Separation of duties
Correct answer: Reducing attack surface
Disabling unneeded services reduces the attack surface by eliminating potential entry points that attackers could exploit.
Question 6: Which protocol secures LDAP directory communications by wrapping them in a TLS tunnel, using port 636?
- LDAP with SASL
- LDAPS (LDAP over SSL/TLS) (Correct answer)
- Kerberos over LDAP
- SNMP v3
Correct answer: LDAPS (LDAP over SSL/TLS)
LDAPS wraps standard LDAP communications in a TLS/SSL tunnel on port 636, encrypting all directory queries and responses.
Question 7: A penetration tester discovers that a web application reflects user input back in error messages without sanitization. Which vulnerability class does this most directly represent?
- SQL injection
- Reflected Cross-Site Scripting (XSS) (Correct answer)
- CSRF
- Insecure direct object reference
Correct answer: Reflected Cross-Site Scripting (XSS)
Reflected XSS occurs when unsanitized user input is immediately echoed back in the server's response, allowing script injection into other users' browsers via crafted links.
SY0-601 Implementation 5
A company requires that all employees use hardware tokens in addition to passwords when accessing the VPN.
Which authentication factor do hardware tokens represent?