SY0-701 — questions

A security engineer would like to enhance the use of automation and orchestration within the SIEM. Which of the following would be the primary benefit of this enhancement?

A systems administrator receives an alert that a company’s internal file server is very slow and is only working intermittently. The systems administrator reviews the server management software and finds the following information about the server: Which of the following indicators most likely triggered this alert?

Which of the following data states applies to data that is being actively processed by a database server?

Which of the following architectures is most suitable to provide redundancy for critical business processes?

After a security incident, a systems administrator asks the company to buy a NAC platform. Which of the following attack surfaces is the systems administrator trying to protect?

While reviewing logs, a security administrator identifies the following code: Which of the following best describes the vulnerability being exploited?

An organization issued new laptops to all employees and wants to provide web filtering both in and out of the office without configuring additional access to the network. Which of the following types of web filtering should a systems administrator configure?

Which of the following should be used to aggregate log data in order to create alerts and detect anomalous activity?

Which of the following provides the best protection against unwanted or insecure communications to and from a device?

Which of the following is the primary purpose of a service that tracks log-ins and time spent using the service?

An employee who was working remotely lost a mobile device containing company data. Which of the following provides the best solution to prevent future data loss?

An IT administrator needs to ensure data retention standards are implemented on an enterprise application. Which of the following describes the administrator’s role?

A company plans to secure its systems by: • Preventing users from sending sensitive data over corporate email • Restricting access to potentially harmful websites Which of the following features should the company set up? (Choose two.)

A company processes and stores sensitive data on its own systems. Which of the following steps should the company take first to ensure compliance with privacy regulations?

Which of the following cryptographic methods is preferred for securing communications with limited computing resources?

A network administrator wants to ensure that network traffic is highly secure while in transit. Which of the following actions best describes the actions the network administrator should take?

Which of the following definitions best describes the concept of log correlation?

An enterprise security team is researching a new security architecture to better protect the company’s networks and applications against the latest cyberthreats. The company has a fully remote workforce. The solution should be highly redundant and enable users to connect to a VPN with an integrated, software-based firewall. Which of the following solutions meets these requirements?

Which of the following is the best way to validate the integrity and availability of a disaster recovery site?

Which of the following allows an exploit to go undetected by the operating system?