SY0-701 practice questions 91–100

1. Question 91 · 607 in bank

   A security engineer is installing an IPS to block signature-based attacks in the environment. Which of the following modes will best accomplish this task?

   • AMonitor
   • BSensor
   • CAudit
   • DActive

   Show answer

   Answer: D

   Explanation

   D. Active In active mode, an intrusion prevention system not only monitors network traffic for suspicious activity but also take immediate action to block or mitigate detected threats based on its signatures. This proactive approach ensures that identified threats are automatically blocked or neutralized providing a real-time protection for the environment.

   Source: Adapted from community discussion — a4e15bd

   Next question

2. Question 92 · 607 in bank

   An IT manager is increasing the security capabilities of an organization after a data classification initiative determined that sensitive data could be exfiltrated from the environment. Which of the following solutions would mitigate the risk?

   • AXDR
   • BSPF
   • CDLP
   • DDMARC

   Show answer

   Answer: C

   Next question

3. Question 93 · 607 in bank

   Which of the following is used to protect a computer from viruses, malware, and Trojans being installed and moving laterally across the network?

   • AIDS
   • BACL
   • CEDR
   • DNAC

   Show answer

   Answer: C

   Explanation

   C. EDR (Endpoint Detection and Response) is used to protect a computer from viruses, malware, and Trojans being installed and moving laterally across the network. EDR solutions provide advanced threat detection, response, and mitigation capabilities for endpoints. They monitor endpoint activities for signs of malicious behavior, provide visibility into threats, and can respond to and contain security incidents.

   Source: Adapted from community discussion — baronvon

   Next question

4. Question 94 · 607 in bank

   Client files can only be accessed by employees who need to know the information and have specified roles in the company. Which of the following best describes this security concept?

   • AAvailability
   • BConfidentiality
   • CIntegrity
   • DNon-repudiation

   Show answer

   Answer: B

   Explanation

   Confidentiality. This security concept ensures that sensitive information is only accessible to those who are authorized and have a legitimate need to know.

   Source: Adapted from community discussion — RoRoRoYourBoat

   Next question

5. Question 95 · 607 in bank

   Which of the following describes the category of data that is most impacted when it is lost?

   • AConfidential
   • BPublic
   • CPrivate
   • DCritical

   Show answer

   Answer: D

   Explanation

   D. Critical Explanation: Critical data is the category of data that is most impacted when it is lost because it is essential to the organization’s operations, mission, or business continuity. Loss of critical data can lead to: Severe disruptions in business processes. Financial loss. Regulatory non-compliance. Irreparable damage to the organization’s reputation. Other Options: A. Confidential: Refers to data that must be protected from unauthorized access, but its loss may not always disrupt critical operations. B. Public: Refers to information intended to be openly shared, so its loss typically has little to no impact. C. Private: Refers to sensitive personal information (e.g., PII), where its loss could result in privacy violations but may not always have operational impact. Thus, critical data is the most impacted when lost, as it is essential for the organization's core functions.

   Source: Adapted from community discussion — jbmac

   Next question

6. Question 96 · 607 in bank

   A new employee logs in to the email system for the first time and notices a message from human resources about onboarding. The employee hovers over a few of the links within the email and discovers that the links do not correspond to links associated with the company. Which of the following attack vectors is most likely being used?

   • ABusiness email
   • BSocial engineering
   • CUnsecured network
   • DDefault credentials

   Show answer

   Answer: B

   Explanation

   Social engineering is an attack vector, while Business email is an attack surface. If it said Business Email Compromise, that would be an attack vector.

   Source: Adapted from community discussion — Twphill

   Next question

7. Question 97 · 607 in bank

   Which of the following describes the understanding between a company and a client about what will be provided and the accepted time needed to provide the company with the resources?

   • ASLA
   • BMOU
   • CMOA
   • DBPA

   Show answer

   Answer: A

   Explanation

   MOU because it "describes the understanding". The question doesn't really ask for a formal document about expected levels of service.

   Source: Adapted from community discussion — Twphill

   Next question

8. Question 98 · 607 in bank

   A company that is located in an area prone to hurricanes is developing a disaster recovery plan and looking at site considerations that allow the company to immediately continue operations. Which of the following is the best type of site for this company?

   • ACold
   • BTertiary
   • CWarm
   • DHot

   Show answer

   Answer: D

   Explanation

   D. Hot A hot site is a fully operational backup facility that mirrors the company's primary site and is ready to take over operations immediately in the event of a disaster. It includes all necessary hardware, software, and network configurations, allowing the company to quickly resume normal business activities with minimal downtime.

   Source: Adapted from community discussion — baronvon

   Next question

9. Question 99 · 607 in bank

   Which of the following security controls is most likely being used when a critical legacy server is segmented into a private network?

   • ADeterrent
   • BCorrective
   • CCompensating
   • DPreventive

   Show answer

   Answer: C

   Explanation

   Segmentation of a critical legacy server into a private network is a compensating control because it addresses security risks when the legacy system cannot be updated or secured using standard measures, like patches or modern preventive controls.

   Source: Adapted from community discussion — d06e2b4

   Next question

10. Question 100 · 607 in bank

    Which of the following best describes the practice of researching laws and regulations related to information security operations within a specific industry?

    • ACompliance reporting
    • BGDPR
    • CDue diligence
    • DAttestation

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 91. 607 questions available.