SY0-701 Practice Questions

Which of the following risk management strategies should an enterprise adopt first if a legacy application is critical to business operations and there are preventative controls that are not yet implemented?

After a series of account compromises and credential misuse, a company hires a security manager to develop a security program. Which of the following steps should the security manager take first to increase security awareness?

Which of the following concepts protects sensitive information from unauthorized disclosure?

Which of the following is an algorithm performed to verify that data has not been modified?

Which of the following is a risk of conducting a vulnerability assessment?

A security administrator needs to reduce the attack surface in the company ' s data centers. Which of the following should the security administrator do to complete this task?

Which of the following is most likely to be used as a just-in-time reference document within a security operations center?

Which of the following best describes the practice of preserving and documenting the handling of forensic evidence?

An organization has learned that its data is being exchanged on the dark web. The CIO

has requested that you investigate and implement the most secure solution to protect employee accounts.

INSTRUCTIONS

Review the data to identify weak security practices and provide the most appropriate

security solution to meet the CIO ' s requirements.

An administrator discovers a cross-site scripting vulnerability on a company website. Which of the following will most likely remediate the issue?

A systems administrator wants to prevent users from being able to access data based on their responsibilities. The administrator also wants to apply the required access structure via a simplified format. Which of the following should the administrator apply to the site recovery resource group?

Which of the following security concepts is being followed when implementing a product that offers protection against DDoS attacks?

Which of the following is used to protect a computer from viruses, malware, and Trojans being installed and moving laterally across the network?

The Chief Information Security Officer of an organization needs to ensure recovery from ransomware would likely occur within the organization ' s agreed-upon RPOs end RTOs. Which of the following backup scenarios would best ensure recovery?

An organization is developing a security program that conveys the responsibilities associated with the general operation of systems and software within the organization. Which of the following documents would most likely communicate these expectations?

During a recent log review, an analyst found evidence of successful injection attacks. Which of the following will best address this issue?

Which of the following should an internal auditor check for first when conducting an audit of the organization’s risk management program?

A security team purchases a tool for cloud security posture management. The team is quickly overwhelmed by the number of misconfigurations that the tool detects. Which of the following should the security team configure to establish workflows for cloud resource security?

Which solution is most likely used in the financial industry to mask sensitive data?

A security consultant needs secure, remote access to a client environment. Which of the following should the security consultant most likely use to gain access?