SY0-701 Practice Questions

A company performs a risk assessment on the information security program each year. Which of the following best describes this risk assessment?

A company is concerned with supply chain compromise of new servers and wants to limit this risk. Which of the following should the company review first?

A security analyst is investigating a workstation that is suspected of outbound communication to a command-and-control server. During the investigation, the analyst discovered that logs on the endpoint were deleted. Which of the following logs would the analyst most likely look at next?

An unexpected and out-of-character email message from a Chief Executive Officer’s corporate account asked an employee to provide financial information and to change the recipient ' s contact number. Which of the following attack vectors is most likely being used?

An administrator needs to perform server hardening before deployment. Which of the following steps should the administrator take? (Select two).

A Chief Information Officer wants to ensure that network devices cannot connect to the public internet and the local network to directly perform firmware updates. The IT team must manually perform the update process by using a portable device. Which of the following architecture types best fits this description?

A malicious insider from the marketing team alters records and transfers company funds to a personal account. Which of the following methods would be the best way to secure company records in the future?

A user is attempting to patch a critical system, but the patch fails to transfer. Which of the following access controls is most likely inhibiting the transfer?

An organization’s internet-facing website was compromised when an attacker exploited a buffer overflow. Which of the following should the organization deploy to best protect against similar attacks in the future?

Which of the following security concepts is the best reason for permissions on a human resources fileshare to follow the principle of least privilege?

Which of the following solutions would most likely be used in the financial industry to mask sensitive data?

Which of the following is the most effective way to protect an application server running software that is no longer supported from network threats?

Various company stakeholders meet to discuss roles and responsibilities in the event of a security breach that would affect offshore offices. Which of the following is this an example of?

Which of the following describes when a user installs an unauthorized application by bypassing the authorized application store and installing a binary file?

Which of the following considerations is the most important for an organization to evaluate as it establishes and maintains a data privacy program?

Which of the following would be the best way to handle a critical business application that is running on a legacy server?

After a company was compromised, customers initiated a lawsuit. The company ' s attorneys have requested that the security team initiate a legal hold in response to the lawsuit. Which of the following describes the action the security team will most likely be required to take?

A security team receives reports about high latency and complete network unavailability throughout most of the office building. Flow logs from the campus switches show high traffic on TCP 445. Which of the following is most likely the root cause of this incident?

An administrator is installing an SSL certificate on a new system. During testing, errors indicate that the certificate is not trusted. The administrator has verified with the issuing CA and has validated the private key. Which of the following should the administrator check for next?

When trying to access an internal website, an employee reports that a prompt displays, stating that the site is insecure. Which of the following certificate types is the site most likely using?