SY0-701 — questions

A company web server is initiating outbound traffic to a low-reputation, public IP on non-standard pat. The web server is used to present an unauthenticated page to clients who upload images the company. An analyst notices a suspicious process running on the server hat was not created by the company development team. Which of the following is the most likely explanation for his security incident?

An organization requests a third-party full-spectrum analysis of its supply chain. Which of the following would the analysis team use to meet this requirement?

A systems administrator deployed a monitoring solution that does not require installation on the endpoints that the solution is monitoring. Which of the following is described in this scenario?

A security analyst is reviewing the source code of an application in order to identify misconfigurations and vulnerabilities. Which of the following kinds of analysis best describes this review?

Which of the following agreement types is used to limit external discussions?

A security analyst is evaluating a SaaS application that the human resources department would like to implement. The analyst requests a SOC 2 report from the SaaS vendor. Which of the following processes is the analyst most likely conducting?

Which of the following is used to conceal credit card information in a database log file?

An organization recently started hosting a new service that customers access through a web portal. A security engineer needs to add to the existing security devices a new solution to protect this new service. Which of the following is the engineer most likely to deploy?

Which of the following topics would most likely be included within an organization's SDLC?

Which of the following control types is AUP an example of?

An organization is adopting cloud services at a rapid pace and now has multiple SaaS applications in use. Each application has a separate log-in, so the security team wants to reduce the number of credentials each employee must maintain. Which of the following is the first step the security team should take?

A company's online shopping website became unusable shortly after midnight on January 30, 2023. When a security analyst reviewed the database server, the analyst noticed the following code used for backing up data: Which of the following should the analyst do next?

Which of the following would be the best way to test resiliency in the event of a primary power failure?

Which of the following would be the most appropriate way to protect data in transit?

Which of the following is a common, passive reconnaissance technique employed by penetration testers in the early phases of an engagement?

Which of the following threat actors is the most likely to seek financial gain through the use of ransomware attacks?

Which of the following would a systems administrator follow when upgrading the firmware of an organization’s router?

A systems administrator needs to ensure the secure communication of sensitive data within the organization’s private cloud. Which of the following is the best choice for the administrator to implement?

Which of the following should an internal auditor check for first when conducting an audit of the organization’s risk management program?

Which of the following activities are associated with vulnerability management? (Choose two.)