SY0-701 practice questions 101–110

1. Question 101 · 607 in bank

   An engineer needs to find a solution that creates an added layer of security by preventing unauthorized access to internal company resources. Which of the following would be the best solution?

   • ARDP server
   • BJump server
   • CProxy server
   • DHypervisor

   Show answer

   Answer: B

   Explanation

   A Proxy Server is used to fetch Internet content requested for access by internal users, & can also be configured to cache content for a specified amount of time so that subsequent requests for content are satisfied locally instead of from the Internet. A Jump Server protects internal company resources that would have no reason to be accessed by the outside.

   Source: Adapted from community discussion — Mehsotopes

   Next question

2. Question 102 · 607 in bank

   Which of the following considerations is the most important for an organization to evaluate as it establishes and maintains a data privacy program?

   • AReporting structure for the data privacy officer
   • BRequest process for data subject access
   • CRole as controller or processor
   • DPhysical location of the company

   Show answer

   Answer: C

   Explanation

   Controller or processor: This is a fundamental distinction in data protection law. Controllers are responsible for determining the purposes and means of processing personal data, while processors process data on behalf of controllers. The organization's role as a controller or processor will significantly impact its data privacy obligations and responsibilities. Reporting structure for the data privacy officer: While this is important, it's not as crucial as understanding the organization's role as a controller or processor. The reporting structure can be adjusted as needed, but the fundamental legal obligations will remain the same. Request process for data subject access: This is a critical aspect of data privacy compliance, but it should be established based on the organization's role as a controller or processor and the applicable laws and regulations. Physical location of the company: While geographic location can be relevant, it's not the most important factor. The organization's role as a controller or processor and the applicable laws and regulations will have a greater impact on its data privacy obligations.

   Source: Adapted from community discussion — Glacier88

   Next question

3. Question 103 · 607 in bank

   A security analyst is investigating a workstation that is suspected of outbound communication to a command-and-control server. During the investigation, the analyst discovered that logs on the endpoint were deleted. Which of the following logs would the analyst most likely look at next?

   • AIPS
   • BFirewall
   • CAСL
   • DWindows security

   Show answer

   Answer: B

   Explanation

   Since the logs on the endpoint were deleted, the security analyst would likely turn to firewall logs. Firewall logs can provide information about network traffic, including outbound connections that may indicate communication with a command-and-control server. These logs can help the analyst identify suspicious traffic patterns or unauthorized communication that bypassed endpoint defenses.

   Source: Adapted from community discussion — Kingamj

   Next question

4. Question 104 · 607 in bank

   An IT manager is putting together a documented plan describing how the organization will keep operating in the event of a global incident. Which of the following plans is the IT manager creating?

   • ABusiness continuity
   • BPhysical security
   • CChange management
   • DDisaster recovery

   Show answer

   Answer: A

   Next question

5. Question 105 · 607 in bank

   A business needs a recovery site but does not require immediate failover. The business also wants to reduce the workload required to recover from an outage. Which of the following recovery sites is the best option?

   • AHot
   • BCold
   • CWarm
   • DGeographically dispersed

   Show answer

   Answer: C

   Next question

6. Question 106 · 607 in bank

   A security team is setting up a new environment for hosting the organization's on-premises software application as a cloud-based service. Which of the following should the team ensure is in place in order for the organization to follow security best practices?

   • AVirtualization and isolation of resources
   • BNetwork segmentation
   • CData encryption
   • DStrong authentication policies

   Show answer

   Answer: A

   Explanation

   The security team should ensure that all of the following are in place, but the most comprehensive answer that addresses cloud-based services is: A. Virtualization and isolation of resources In a cloud-based environment, virtualization and isolation of resources are critical to maintaining security best practices. Virtualization allows multiple workloads to run on the same physical infrastructure while keeping them isolated from each other, which is a foundational practice in cloud environments to prevent data leakage or unauthorized access between different tenants or applications.

   Source: Adapted from community discussion — nillie

   Next question

7. Question 107 · 607 in bank

   A manager receives an email that contains a link to receive a refund. After hovering over the link, the manager notices that the domain's URL points to a suspicious link. Which of the following security practices helped the manager to identify the attack?

   • AEnd user training
   • BPolicy review
   • CURL scanning
   • DPlain text email

   Show answer

   Answer: A

   Explanation

   The security practice that helped the manager identify the attack is: A. End user training End user training teaches employees how to recognize phishing attempts and other malicious activities. In this case, the manager's awareness of hovering over links to check for suspicious URLs before clicking is a direct result of effective security awareness training. This is a key aspect of preventing social engineering attacks, like phishing.

   Source: Adapted from community discussion — nillie

   Next question

8. Question 108 · 607 in bank

   A company wants to verify that the software the company is deploying came from the vendor the company purchased the software from. Which of the following is the best way for the company to confirm this information?

   • AValidate the code signature.
   • BExecute the code in a sandbox.
   • CSearch the executable for ASCII strings.
   • DGenerate a hash of the files.

   Show answer

   Answer: A

   Explanation

   A. Validate the code signature Code signing is a process where the software vendor signs the executable code with a digital certificate. This certificate verifies the identity of the software vendor and ensures that the code has not been altered with since it was signed. By validating the code signature, the company can confirm the authenticity and integrity of the software.

   Source: Adapted from community discussion — a4e15bd

   Next question

9. Question 109 · 607 in bank

   A systems administrator notices that one of the systems critical for processing customer transactions is running an end-of-life operating system. Which of the following techniques would increase enterprise security?

   • AInstalling HIDS on the system
   • BPlacing the system in an isolated VLAN
   • CDecommissioning the system
   • DEncrypting the system's hard drive

   Show answer

   Answer: B

   Explanation

   B. Placing the system in an isolated VLAN Give that the system is critical for processing customer transactions, decommissioning immediately might impact business continuity. The next best approach is to place the system in an isolated VLAN.

   Source: Adapted from community discussion — a4e15bd

   Next question

10. Question 110 · 607 in bank

    The Chief Information Security Officer (CISO) at a large company would like to gain an understanding of how the company's security policies compare to the requirements imposed by external regulators. Which of the following should the CISO use?

    • APenetration test
    • BInternal audit
    • CAttestation
    • DExternal examination

    Show answer

    Answer: B

    Explanation

    Ty13 2 weeks, 2 days ago Selected Answer: B B. Internal Audit I know people want to select D because... it sounds right. External audit to compare against external regulations. But there's a part being overlooked: 'would like to gain an understanding'. Which you don't NEED a third party to confirm, because the company already KNOWS those regulations. But you WOULD need an external audit if there was a large breach and the regulatory agencies wanted to know how it happened. What is being asked, effectively, is "Can an internal audit team verify that we meet external regulations?"

    Source: Adapted from community discussion — 01a4c2e

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 101. 607 questions available.