SY0-701 Practice Questions

Which of the following allows a systems administrator to tune permissions for a file?

A company wants to improve the availability of its application with a solution that requires minimal effort in the event a server needs to be replaced or added. Which of the following would be the best solution to meet these objectives?

Which of the following technologies must be used in an organization that intends to automate infrastructure deployment?

Which of the following security controls is a company implementing by deploying HIPS? (Select two)

Which of the following is a primary security concern for a company setting up a BYOD program?

An attacker submits a request containing unexpected characters in an attempt to gain unauthorized access to information within the underlying systems. Which of the following best describes this attack?

A security analyst is assessing several company firewalls. Which of the following cools would The analyst most likely use to generate custom packets to use during the assessment?

Which of the following is the best way to improve the confidentiality of remote connections to an enterprise ' s infrastructure?

A company is aware of a given security risk related to a specific market segment. The business chooses not to accept responsibility and target their services to a different market segment. Which of the following describes this risk management strategy?

A company expects its provider to ensure servers and networks maintain 97% uptime. Which of the following would most likely list this expectation?

A Chief Information Security Officer (CISO) wants to explicitly raise awareness about the increase of ransomware-as-a-service in a report to the management team. Which of the following best describes the threat actor in the CISO ' s report?

A security analyst needs to propose a remediation plan ' or each item in a risk register. The item with the highest priority requires employees to have separate logins for SaaS solutions and different password complexity requirements for each solution. Which of the following implementation plans will most likely resolve this security issue?

Which of the following should a security operations center use to improve its incident response procedure?

Which of the following risk management strategies is being used when a Chief Information Security Officer ignores known vulnerabilities identified during a risk assessment?

A security analyst collects IOCs from a cybersecurity bulletin. Which of the following should the analyst do next to assess if an environment is compromised?

Which of the following vulnerabilities will input validation prevent?

Which of the following documents details how to accomplish a technical security task?

Which of the following should be used to identify vulnerabilities imported by third-party libraries in the early stages of the SDLC?

Which of the following objectives is best achieved by a tabletop exercise?

Which of the following cryptographic solutions protects data at rest?