SY0-701 Practice Questions

A systems administrator set up a perimeter firewall but continues to notice suspicious connections between internal endpoints. Which of the following should be set up in order to mitigate the threat posed by the suspicious activity?

An IT manager informs the entire help desk staff that only the IT manager and the help desk lead will have access to the administrator console of the help desk software. Which of the following security techniques is the IT manager setting up?

Which of the following vulnerabilities is associated with installing software outside of a manufacturer’s approved software repository?

A small business initially plans to open common communications ports (21, 22, 25, 80, 443) on its firewall to allow broad access to its screened subnet. However, their security consultant advises against this action. Which of the following security principles is the consultant addressing?

A company wants to ensure that only authorized devices can enter an environment. Which of the following will the company most likely use to implement the control?

Which of the following is the best way to consistently determine on a daily basis whether security settings on servers have been modified?

Which of the following provides resilience by hosting critical VMs within different IaaS providers while being maintained by internal application owners?

Which of the following should be used to ensure a device is inaccessible to a network-connected resource?

Which of the following explains how regular patching helps mitigate risks when securing an enterprise environment?

A hacker gained access to a system via a phishing attempt that was a direct result of a user clicking a suspicious link. The link laterally deployed ransomware, which laid dormant for multiple weeks, across the network. Which of the following would have mitigated the spread?

A security administrator wants to determine if the company ' s social engineering training is effective. Which of the following should the administrator do to complete this task?

While a school district is performing state testing, a security analyst notices all internet services are unavailable. The analyst discovers that ARP poisoning is occurring on the network and then terminates access for the host. Which of the following is most likely responsible for this malicious activity?

A company receives an alert that a network device vendor, which is widely used in the enterprise, has been banned by the government.

Which of the following will the company ' s general counsel most likely be concerned with during a hardware refresh of these devices?

A software company currently secures access using a combination of traditional username/password configurations and one-time passwords for MF

A.  

Which of the following is most likely associated with introducing vulnerabilities on a corporate network by the deployment of unapproved software?

To which of the following security categories does an EDR solution belong?

A company is concerned about the theft of client data from decommissioned laptops. Which of the following is the most cost-effective method to decrease this risk?

Which of the following control types involves restricting IP connectivity to a router ' s web management interface to protect it from being exploited by a vulnerability?

A forensic engineer determines that the root cause of a compromise is a SQL injection attack. Which of the following should the engineer review to identify the command used by the threat actor?

Which of the following is required for an organization to properly manage its restore process in the event of system failure?