SY0-701 — questions

Which of the following is an example of a treatment strategy for a continuous risk?

An organization wants to deploy software in a container environment to increase security. Which of the following would limit the organization's ability to achieve this goal?

Prior to implementing a design change, the change must go through multiple steps to ensure that it does not cause any security issues. Which of the following is most likely to be one of those steps?

The internal audit team determines a software application is no longer in scope for external reporting requirements. Which of the following will confirm that the application is no longer applicable?

Which of the following are the first steps an analyst should perform when developing a heat map? (Choose two.)

Which of the following is used to improve security and overall functionality without losing critical application data?

An organization is preparing to export proprietary software to a customer. Which of the following would be the best way to prevent the loss of intellectual property?

Which of the following should be used to ensure a device is inaccessible to a network-connected resource?

In which of the following will unencrypted network traffic most likely be found?

Which of the following is the best reason to perform a tabletop exercise?

Which of the following is a use of CVSS?

For an upcoming product launch, a company hires a marketing agency whose owner is a close relative of the Chief Executive Officer. Which of the following did the company violate?

An organization designs an inbound firewall with a fail-open configuration while implementing a website. Which of the following would the organization consider to be the highest priority?

An engineer needs to ensure that a script has not been modified before it is launched. Which of the following best provides this functionality?

Which of the following is the most important element when defining effective security governance?

A contractor is required to visually inspect the motherboards of all new servers that are purchased to determine whether the servers were tampered with. Which of the following risks is the contractor attempting to mitigate?

Which of the following could potentially be introduced at the time of side loading?

While a school district is performing state testing, a security analyst notices all internet services are unavailable. The analyst discovers that ARP poisoning is occurring on the network and then terminates access for the host. Which of the following is most likely responsible for this malicious activity?

A user needs to complete training at https://comptiatraining.com. After manually entering the URL, the user sees that the accessed website is noticeably different from the standard company website. Which of the following is the most likely explanation for the difference?

A company has yearly engagements with a service provider. The general terms and conditions are the same for all engagements. The company wants to simplify the process and revisit the general terms every three years. Which of the following documents would provide the best way to set the general terms?