SY0-701 practice questions 131–140

1. Question 131 · 607 in bank

   An attacker posing as the Chief Executive Officer calls an employee and instructs the employee to buy gift cards. Which of the following techniques is the attacker using?

   • ASmishing
   • BDisinformation
   • CImpersonating
   • DWhaling

   Show answer

   Answer: C

   Explanation

   Impersonating involves pretending to be someone else, in this case, the Chief Executive Officer (CEO), to deceive the employee into taking a specific action (buying gift cards). The attacker is leveraging the authority and trust associated with the CEO's position to manipulate the employee. Whaling: This phishing attack targets high-profile individuals, such as executives. An attacker is 'posing' and not 'targeting' a CEO. Therefore its C

   Source: Adapted from community discussion — BugG5

   Next question

2. Question 132 · 607 in bank

   After conducting a vulnerability scan, a systems administrator notices that one of the identified vulnerabilities is not present on the systems that were scanned. Which of the following describes this example?

   • AFalse positive
   • BFalse negative
   • CTrue positive
   • DTrue negative

   Show answer

   Answer: A

   Explanation

   The correct answer is: A. False positive Explanation: A false positive occurs when a security system incorrectly flags a vulnerability or threat that does not actually exist on the system. In this case, the vulnerability scan reported an issue, but upon further investigation, the administrator confirmed that the vulnerability is not present. Why not the other options? B. False negative – This would mean a vulnerability is present but was not detected, which is the opposite of what happened here. C. True positive – This would mean the vulnerability was correctly identified and is actually present on the system. D. True negative – This would mean the system was correctly identified as not having the vulnerability, but in this case, the scan incorrectly reported it.

   Source: Adapted from community discussion — TmNvrWts

   Next question

3. Question 133 · 607 in bank

   A recent penetration test identified that an attacker could flood the MAC address table of network switches. Which of the following would best mitigate this type of attack?

   • ALoad balancer
   • BPort security
   • CIPS
   • DNGFW

   Show answer

   Answer: B

   Explanation

   Port security is a feature on network switches that allows you to limit the number of MAC addresses that can be learned on a specific port. If the limit is exceeded, the switch can take predefined actions such as shutting down the port, restricting traffic, or generating alerts. This effectively prevents attackers from overwhelming the switch with a large number of MAC addresses, which could otherwise cause the switch to behave like a hub, sending traffic to all ports and potentially exposing sensitive data. (B)

   Source: Adapted from community discussion — Muhammad_Umair

   Next question

4. Question 134 · 607 in bank

   A company needs to provide administrative access to internal resources while minimizing the traffic allowed through the security boundary. Which of the following methods is most secure?

   • AImplementing a bastion host
   • BDeploying a perimeter network
   • CInstalling a WAF
   • DUtilizing single sign-on

   Show answer

   Answer: A

   Explanation

   Implementing a bastion host: A bastion host is a highly secured server located on a perimeter network (also known as a DMZ) that is designed to withstand attacks. It acts as a gateway between internal and external networks, allowing access only to specific services and applications. Users must authenticate themselves to the bastion host before accessing internal resources. This option provides a controlled entry point into the internal network, reducing the attack surface.

   Source: Adapted from community discussion — metzen227

   Next question

5. Question 135 · 607 in bank

   A user would like to install software and features that are not available with a smartphone's default software. Which of the following would allow the user to install unauthorized software and enable new features?

   • ASQLi
   • BCross-site scripting
   • CJailbreaking
   • DSide loading

   Show answer

   Answer: C

   Explanation

   I think the answer is C, even though I first thought D. The reason I changed my mind is because at the end they also mention enabling new features, which sideloading doesn't necessarily let you do. Jailbreaking does.

   Source: Adapted from community discussion — 2fd1029

   Next question

6. Question 136 · 607 in bank

   Which of the following phases of an incident response involves generating reports?

   • ARecovery
   • BPreparation
   • CLessons learned
   • DContainment

   Show answer

   Answer: C

   Next question

7. Question 137 · 607 in bank

   Which of the following methods would most likely be used to identify legacy systems?

   • ABug bounty program
   • BVulnerability scan
   • CPackage monitoring
   • DDynamic analysis

   Show answer

   Answer: B

   Explanation

   The method most likely used to identify legacy systems is: B. Vulnerability scan. A vulnerability scan assesses systems for known vulnerabilities, outdated software versions, and unsupported systems. This makes it an effective way to identify legacy systems that may no longer be receiving security updates or support. A. Bug bounty program: This focuses on crowdsourcing the identification of specific vulnerabilities but is not primarily aimed at identifying legacy systems. C. Package monitoring: Tracks software packages for updates, but it doesn't specifically target legacy systems. D. Dynamic analysis: Involves testing software during runtime for vulnerabilities but is not typically used to identify legacy systems. A vulnerability scan is the most effective approach for identifying legacy systems in an environment

   Source: Adapted from community discussion — Murtuza

   Next question

8. Question 138 · 607 in bank

   Employees located off-site must have access to company resources in order to complete their assigned tasks. These employees utilize a solution that allows remote access without interception concerns. Which of the following best describes this solution?

   • AProxy server
   • BNGFW
   • CVPN
   • DSecurity zone

   Show answer

   Answer: C

   Explanation

   C. VPN - provides secure remote access assuring data transmitted between remote employees and company resources is encrypted and protected from interception.

   Source: Adapted from community discussion — jafyyy

   Next question

9. Question 139 · 607 in bank

   A company allows customers to upload PDF documents to its public e-commerce website. Which of the following would a security analyst most likely recommend?

   • AUtilizing attack signatures in an IDS
   • BEnabling malware detection through a UTM
   • CLimiting the affected servers with a load balancer
   • DBlocking command injections via a WAF

   Show answer

   Answer: B

   Explanation

   B PDFs can be used to deliver malware such as embedded scripts or exploits. Enabling malware detection through a UTM helps to scan and block malicious content within uploaded files before they reach the server.

   Source: Adapted from community discussion — a4e15bd

   Next question

10. Question 140 · 607 in bank

    A security analyst developed a script to automate a trivial and repeatable task. Which of the following best describes the benefits of ensuring other team members understand how the script works?

    • ATo reduce implementation cost
    • BTo identify complexity
    • CTo remediate technical debt
    • DTo prevent a single point of failure

    Show answer

    Answer: D

    Explanation

    D. To prevent a single point of failure Other team members knowing how it works eliminates reliance on a single employee in case of script failure.

    Source: Adapted from community discussion — Sama001

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 131. 607 questions available.