SY0-701 Practice Questions

In which of the following will unencrypted PLC management traffic most likely be found?

A systems administrator is redesigning now devices will perform network authentication. The following requirements need to be met:

• An existing Internal certificate must be used.

• Wired and wireless networks must be supported

• Any unapproved device should be Isolated in a quarantine subnet

• Approved devices should be updated before accessing resources

Which of the following would best meet the requirements?

Which of the following would help ensure a security analyst is able to accurately measure the overall risk to an organization when a new vulnerability is disclosed?

A user sends an email that includes a digital signature for validation. Which of the following security concepts would ensure that a user cannot deny that they sent the email?

A new employee accessed an unauthorized website. An investigation found that the employee violated the company ' s rules. Which of the following did the employee violate?

An administrator must implement a solution that provides security and network connectivity between two companies. Which of the following infrastructure solutions is the best for this purpose?

A security analyst estimates that a small security incident will cost $10,000 and will occur twice per year. The analyst recommends a budget of $20,000 for next year. Which of the following does the $10,000 represent?

An administrator finds that all user workstations and servers are displaying a message that is associated with files containing an extension of .ryk. Which of the following types of infections is present on the systems?

An MSSP manages firewalls for hundreds of clients. Which of the following tools would be most helpful to create a standard configuration template in order to improve the efficiency of firewall changes?

Which of the following Is a common, passive reconnaissance technique employed by penetration testers in the early phases of an engagement?

A company is planning a disaster recovery site and needs to ensure that a single natural disaster would not result in the complete loss of regulated backup data. Which of the following should the company consider?

Which of the following is the best way to validate the integrity and availability of a disaster recovery site?

While conducting a business continuity tabletop exercise, the security team becomes concerned by potential impacts if a generator fails during failover. Which of the following is the team most likely to consider in regard to risk management activities?

An organization is required to provide assurance that its controls are properly designed and operating effectively. Which of the following reports will best achieve this objective?

Which of the following is the most likely to be included as an element of communication in a security awareness program?

A nation-state attacker gains access to the email accounts of several journalists by compromising a website that the journalists frequently use. Which of the following types of attacks describes this example?

A company deploys a new server that a client must be able to access it at all times. Which of the following will support this availability requirement?

Which of the following are the best security controls for controlling on-premises access? (Select two.)

A company performs a vulnerability assessment and gets the following results:

Vulnerability | Server location | CVSS score

1 | Internet | 9.8

2 | Internal | 4.0

3 | Internet | 4.0

4 | Internal | 9.8

Which of the following vulnerabilities should the company patch first?

The Chief Information Security Officer (CISO) has determined the company is non-compliant with local data privacy regulations. The CISO needs to justify the budget request for more resources. Which of the following should the CISO present to the board as the direct consequence of non-compliance?