πŸ”

SY0-701 β€” questions

Page 13 of 31 Β· 603 total questions.

Topic 1 Β· Question 243

A software development team asked a security administrator to recommend techniques that should be used to reduce the chances of the software being reverse engineered. Which of the following should the security administrator recommend?

  • ADigitally signing the software
  • BPerforming code obfuscation (correct answer)
  • CLimiting the use of third-party libraries
  • DUsing compile flags
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Performing code obfuscation This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 244

Which of the following is a possible factor for MFA?

  • ASomething you exhibit
  • BSomething you have (correct answer)
  • CSomewhere you are
  • DSomeone you know
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Something you have

Topic 1 Β· Question 245 Β· Select all that apply

Easy-to-guess passwords led to an account compromise. The current password policy requires at least 12 alphanumeric characters, one uppercase character, one lowercase character, a password history of two passwords, a minimum password age of one day, and a maximum password age of 90 days. Which of the following would reduce the risk of this incident from happening again? (Choose two.)

  • AIncreasing the minimum password length to 14 characters. (correct answer)
  • BUpgrading the password hashing algorithm from MD5 to SHA-512.
  • CIncreasing the maximum password age to 120 days.
  • DReducing the minimum password length to ten characters.
  • EReducing the minimum password age to zero days.
  • FIncluding a requirement for at least one special character. (correct answer)
Reveal answer & explanation
Correct answer: A, F

The correct answer is A, F. Option A: Increasing the minimum password length to 14 characters. Option F: Including a requirement for at least one special character.

Topic 1 Β· Question 246

A user downloaded software from an online forum. After the user installed the software, the security team observed external network traffic connecting to the user's computer on an uncommon port. Which of the following is the most likely explanation of this unauthorized connection?

  • AThe software had a hidden keylogger.
  • BThe software was ransomware.
  • CThe user's computer had a fileless virus.
  • DThe software contained a backdoor. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: The software contained a backdoor. This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 247

A utility company is designing a new platform that will host all the virtual machines used by business applications. The requirements include: β€’ A starting baseline of 50% memory utilization β€’ Storage scalability β€’ Single circuit failure resilience Which of the following best meets all of these requirements?

  • AConnecting dual PDUs to redundant power supplies
  • BTransitioning the platform to an IaaS provider (correct answer)
  • CConfiguring network load balancing for multiple paths
  • DDeploying multiple large NAS devices for each host
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Transitioning the platform to an IaaS provider

Explanation

Infrastructure as a service provides virtualized compute, storage, and networking while the customer manages the OS and applications. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 Β· Question 248

Which of the following best describes a use case for a DNS sinkhole?

  • AAttackers can see a DNS sinkhole as a highly valuable resource to identify a company's domain structure.
  • BA DNS sinkhole can be used to draw employees away from known-good websites to malicious ones owned by the attacker.
  • CA DNS sinkhole can be used to capture traffic to known-malicious domains used by attackers. (correct answer)
  • DA DNS sinkhole can be set up to attract potential attackers away from a company's network resources.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: A DNS sinkhole can be used to capture traffic to known-malicious domains used by attackers.

Explanation

DNS resolves host names to records such as IP addresses and service locations.

Topic 1 Β· Question 249

An incident analyst finds several image files on a hard disk. The image files may contain geolocation coordinates. Which of the following best describes the type of information the analyst is trying to extract from the image files?

  • ALog data
  • BMetadata (correct answer)
  • CEncrypted data
  • DSensitive data
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Metadata

Topic 1 Β· Question 250

Which of the following most likely describes why a security engineer would configure all outbound emails to use S/MIME digital signatures?

  • ATo meet compliance standards
  • BTo increase delivery rates
  • CTo block phishing attacks
  • DTo ensure non-repudiation (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: To ensure non-repudiation This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 251

During a recent company safety stand-down, the cyber-awareness team gave a presentation on the importance of cyber hygiene. One topic the team covered was best practices for printing centers. Which of the following describes an attack method that relates to printing centers?

  • AWhaling
  • BCredential harvesting
  • CPrepending
  • DDumpster diving (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Dumpster diving

Topic 1 Β· Question 252

Which of the following considerations is the most important regarding cryptography used in an IoT device?

  • AResource constraints (correct answer)
  • BAvailable bandwidth
  • CThe use of block ciphers
  • DThe compatibility of the TLS version
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Resource constraints

Topic 1 Β· Question 253

A coffee shop owner wants to restrict internet access to only paying customers by prompting them for a receipt number. Which of the following is the best method to use given this requirement?

  • AWPA3
  • BCaptive portal (correct answer)
  • CPSK
  • DIEEE 802.1X
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Captive portal

Topic 1 Β· Question 254

While performing digital forensics, which of the following is considered the most volatile and should have the contents collected first?

  • AHard drive
  • BRAM (correct answer)
  • CSSD
  • DTemporary files
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: RAM

Topic 1 Β· Question 255

A hosting provider needs to prove that its security controls have been in place over the last six months and have sufficiently protected customer data. Which of the following would provide the best proof that the hosting provider has met the requirements?

  • ANIST CSF
  • BSOC 2 Type 2 report (correct answer)
  • CCIS Top 20 compliance reports
  • DVulnerability report
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: SOC 2 Type 2 report This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 256

A city municipality lost its primary data center when a tornado hit the facility. Which of the following should the city staff use immediately after the disaster to handle essential public services?

  • ABCP (correct answer)
  • BCommunication plan
  • CDRP
  • DIRP
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: BCP

Topic 1 Β· Question 257

Which of the following is considered a preventive control?

  • AConfiguration auditing
  • BLog correlation
  • CIncident alerts
  • DSegregation of duties (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Segregation of duties

Topic 1 Β· Question 258

A systems administrator notices that a testing system is down. While investigating, the systems administrator finds that the servers are online and accessible from any device on the server network. The administrator reviews the following information from the monitoring system: Which of the following is the most likely cause of the outage?

Exhibit 1 for question 258
  • ADenial of service (correct answer)
  • BARP poisoning
  • CJamming
  • DKerberoasting
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Denial of service

Topic 1 Β· Question 259

A security team has been alerted to a flood of incoming emails that have various subject lines and are addressed to multiple email inboxes. Each email contains a URL shortener link that is redirecting to a dead domain. Which of the following is the best step for the security team to take?

  • ACreate a blocklist for all subject lines.
  • BSend the dead domain to a DNS sinkhole.
  • CQuarantine all emails received and notify all employees.
  • DBlock the URL shortener domain in the web proxy. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Block the URL shortener domain in the web proxy. This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 260

A security administrator is working to secure company data on corporate laptops in case the laptops are stolen. Which of the following solutions should the administrator consider?

  • ADisk encryption (correct answer)
  • BData loss prevention
  • COperating system hardening
  • DBoot security
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Disk encryption

Explanation

Encryption protects confidentiality by making data unreadable without the appropriate key. This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 261

A company needs to keep the fewest records possible, meet compliance needs, and ensure destruction of records that are no longer needed. Which of the following best describes the policy that meets these requirements?

  • ASecurity policy
  • BClassification policy
  • CRetention policy (correct answer)
  • DAccess control policy
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Retention policy

Topic 1 Β· Question 262

Which of the following is a common source of unintentional corporate credential leakage in cloud environments?

  • ACode repositories (correct answer)
  • BDark web
  • CThreat feeds
  • DState actors
  • EVulnerability databases
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Code repositories

Showing questions 241–260 of 603 Β· Page 13 of 31