πŸ”

SY0-701 β€” questions

Page 12 of 31 Β· 603 total questions.

Topic 1 Β· Question 223

Employees located off-site must have access to company resources in order to complete their assigned tasks. These employees utilize a solution that allows remote access without interception concerns. Which of the following best describes this solution?

  • AProxy server
  • BNGFW
  • CVPN (correct answer)
  • DSecurity zone
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: VPN

Explanation

A VPN creates an encrypted tunnel across an untrusted network for private remote or site connectivity.

Topic 1 Β· Question 224

A company allows customers to upload PDF documents to its public e-commerce website. Which of the following would a security analyst most likely recommend?

  • AUtilizing attack signatures in an IDS
  • BEnabling malware detection through a UTM (correct answer)
  • CLimiting the affected servers with a load balancer
  • DBlocking command injections via a WAF
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Enabling malware detection through a UTM This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 225

A security analyst developed a script to automate a trivial and repeatable task. Which of the following best describes the benefits of ensuring other team members understand how the script works?

  • ATo reduce implementation cost
  • BTo identify complexity
  • CTo remediate technical debt
  • DTo prevent a single point of failure (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: To prevent a single point of failure This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 226

A company is decommissioning its physical servers and replacing them with an architecture that will reduce the number of individual operating systems. Which of the following strategies should the company use to achieve this security requirement?

  • AMicroservices
  • BContainerization (correct answer)
  • CVirtualization
  • DInfrastructure as code
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Containerization

Explanation

A container packages an application and dependencies while sharing the host kernel for lightweight isolation. This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 227 Β· Select all that apply

An administrator needs to perform server hardening before deployment. Which of the following steps should the administrator take? (Choose two.)

  • ADisable default accounts. (correct answer)
  • BAdd the server to the asset inventory.
  • CRemove unnecessary services. (correct answer)
  • DDocument default passwords.
  • ESend server logs to the SIEM.
  • FJoin the server to the corporate domain.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: Disable default accounts. Option C: Remove unnecessary services.

Topic 1 Β· Question 228

A Chief Information Security Officer would like to conduct frequent, detailed reviews of systems and procedures to track compliance objectives. Which of the following will be the best method to achieve this objective?

  • AThird-party attestation
  • BPenetration testing
  • CInternal auditing (correct answer)
  • DVulnerability scans
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Internal auditing This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 229

Which of the following security concepts is accomplished with the installation of a RADIUS server?

  • ACIA
  • BAAA (correct answer)
  • CACL
  • DPEM
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: AAA This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 230

After creating a contract for IT contractors, the human resources department changed several clauses. The contract has gone through three revisions. Which of the following processes should the human resources department follow to track revisions?

  • AVersion validation
  • BVersion changes
  • CVersion updates
  • DVersion control (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Version control

Topic 1 Β· Question 231

The executive management team is mandating the company develop a disaster recovery plan. The cost must be kept to a minimum, and the money to fund additional internet connections is not available. Which of the following would be the best option?

  • AHot site
  • BCold site (correct answer)
  • CFailover site
  • DWarm site
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Cold site By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 Β· Question 232

An administrator at a small business notices an increase in support calls from employees who receive a blocked page message after trying to navigate to a spoofed website. Which of the following should the administrator do?

  • ADeploy multifactor authentication.
  • BDecrease the level of the web filter settings.
  • CImplement security awareness training. (correct answer)
  • DUpdate the acceptable use policy.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Implement security awareness training.

Topic 1 Β· Question 233

Which of the following teams is best suited to determine whether a company has systems that can be exploited by a potential, identified vulnerability?

  • APurple team
  • BBlue team
  • CRed team (correct answer)
  • DWhite team
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Red team

Topic 1 Β· Question 234

A company is reviewing options to enforce user logins after several account takeovers. The following conditions must be met as part of the solution: β€’ Allow employees to work remotely or from assigned offices around the world. β€’ Provide a seamless login experience. β€’ Limit the amount of equipment required. Which of the following best meets these conditions?

  • ATrusted devices (correct answer)
  • BGeotagging
  • CSmart cards
  • DTime-based logins
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Trusted devices

Topic 1 Β· Question 235 Β· Select all that apply

Which of the following methods can be used to detect attackers who have successfully infiltrated a network? (Choose two.)

  • ATokenization
  • BCI/CD
  • CHoneypots (correct answer)
  • DThreat modeling
  • EDNS sinkhole (correct answer)
  • FData obfuscation
Reveal answer & explanation
Correct answer: C, E

The correct answer is C, E. Option C: Honeypots Option E: DNS sinkhole

Explanation

DNS resolves host names to records such as IP addresses and service locations.

Topic 1 Β· Question 236

A company wants to ensure that the software it develops will not be tampered with after the final version is completed. Which of the following should the company most likely use?

  • AHashing (correct answer)
  • BEncryption
  • CBaselines
  • DTokenization
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Hashing

Explanation

Hashing produces a one-way digest used to verify integrity without exposing the original value.

Topic 1 Β· Question 237

An organization completed a project to deploy SSO across all business applications last year. Recently, the finance department selected a new cloud-based accounting software vendor. Which of the following should most likely be configured during the new software deployment?

  • ARADIUS
  • BSAML (correct answer)
  • CEAP
  • DOpenID
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: SAML

Topic 1 Β· Question 238

A user, who is waiting for a flight at an airport, logs in to the airline website using the public Wi-Fi, ignores a security warning and purchases an upgraded seat. When the flight lands, the user finds unauthorized credit card charges. Which of the following attacks most likely occurred?

  • AReplay attack
  • BMemory leak
  • CBuffer overflow attack
  • DOn-path attack (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: On-path attack This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 239

A network engineer deployed a redundant switch stack to increase system availability. However, the budget can only cover the cost of one ISP connection. Which of the following best describes the potential risk factor?

  • AThe equipment MTBF is unknown.
  • BThe ISP has no SLA.
  • CAn RPO has not been determined.
  • DThere is a single point of failure. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: There is a single point of failure.

Topic 1 Β· Question 240 Β· Select all that apply

A network team segmented a critical, end-of-life server to a VLAN that can only be reached by specific devices but cannot be reached by the perimeter network. Which of the following best describe the controls the team implemented? (Choose two.)

  • AManagerial
  • BPhysical
  • CCorrective
  • DDetective
  • ECompensating (correct answer)
  • FTechnical (correct answer)
  • GDeterrent
Reveal answer & explanation
Correct answer: E, F

The correct answer is E, F. Option E: Compensating Option F: Technical

Topic 1 Β· Question 241

A threat actor was able to use a username and password to log in to a stolen company mobile device. Which of the following provides the best solution to increase mobile data security on all employees' company mobile devices?

  • AApplication management
  • BFull disk encryption (correct answer)
  • CRemote wipe
  • DContainerization
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Full disk encryption

Explanation

Encryption protects confidentiality by making data unreadable without the appropriate key. This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 242

Which of the following best describes the risk present after controls and mitigating factors have been applied?

  • AResidual (correct answer)
  • BAvoided
  • CInherent
  • DOperational
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Residual

Showing questions 221–240 of 603 Β· Page 12 of 31