SY0-701 practice questions 141–150

1. Question 141 · 607 in bank

   A company is decommissioning its physical servers and replacing them with an architecture that will reduce the number of individual operating systems. Which of the following strategies should the company use to achieve this security requirement?

   • AMicroservices
   • BContainerization
   • CVirtualization
   • DInfrastructure as code

   Show answer

   Answer: B

   Explanation

   B Containerization allows multiple applications or services to run in isolated environments on the same underlying OS. Unlike, virtualization where each VM runs its own OS, containers share the host OS kernel but keep the applications isolated from one another. This significantly reduces the number of operating systems required while maintaining security and isolation between applications.

   Source: Adapted from community discussion — a4e15bd

   Next question

2. Question 142 · 607 in bank

   Select 2

   An administrator needs to perform server hardening before deployment. Which of the following steps should the administrator take? (Choose two.)

   • ADisable default accounts.
   • BAdd the server to the asset inventory.
   • CRemove unnecessary services.
   • DDocument default passwords.
   • ESend server logs to the SIEM.
   • FJoin the server to the corporate domain.

   Show answer

   Answer: AC

   Next question

3. Question 143 · 607 in bank

   A Chief Information Security Officer would like to conduct frequent, detailed reviews of systems and procedures to track compliance objectives. Which of the following will be the best method to achieve this objective?

   • AThird-party attestation
   • BPenetration testing
   • CInternal auditing
   • DVulnerability scans

   Show answer

   Answer: C

   Next question

4. Question 144 · 607 in bank

   Which of the following security concepts is accomplished with the installation of a RADIUS server?

   • ACIA
   • BAAA
   • CACL
   • DPEM

   Show answer

   Answer: B

   Explanation

   B Other being a server, RADIUS is a networking protocol that provides centralized authentication, authorization and accounting for users who connect and use a network service.

   Source: Adapted from community discussion — a4e15bd

   Next question

5. Question 145 · 607 in bank

   A security analyst is reviewing alerts in the SIEM related to potential malicious network traffic coming from an employee’s corporate laptop. The security analyst has determined that additional data about the executable running on the machine is necessary to continue the investigation. Which of the following logs should the analyst use as a data source?

   • AApplication
   • BIPS/IDS
   • CNetwork
   • DEndpoint

   Show answer

   Answer: D

   Explanation

   Endpoint logs: Endpoint logs, also known as host logs, record events and activities that occur on individual endpoints (such as laptops, desktops, or servers). These logs can include information about processes, applications, system events, user logins, file accesses, and more. Endpoint logs are a valuable source of data for investigating security incidents on specific devices, including information about the executables running on the machine. For the investigation described in the scenario, the most appropriate data source for obtaining additional information about the executable running on the employee's corporate laptop is Endpoint logs. Endpoint logs can provide detailed insights into the processes and executables running on the machine, helping the security analyst to further analyze and respond to the potential security threat.

   Source: Adapted from community discussion — metzen227

   Next question

6. Question 146 · 607 in bank

   After creating a contract for IT contractors, the human resources department changed several clauses. The contract has gone through three revisions. Which of the following processes should the human resources department follow to track revisions?

   • AVersion validation
   • BVersion changes
   • CVersion updates
   • DVersion control

   Show answer

   Answer: D

   Explanation

   D. Version Control Version control involves maintaining a record of changes made to the document, including details such as who made the changes, when they were made, and what was modified. This process ensures that all revisions are documented, and the most current version of the contract is clearly identified.

   Source: Adapted from community discussion — Dlove

   Next question

7. Question 147 · 607 in bank

   The executive management team is mandating the company develop a disaster recovery plan. The cost must be kept to a minimum, and the money to fund additional internet connections is not available. Which of the following would be the best option?

   • AHot site
   • BCold site
   • CFailover site
   • DWarm site

   Show answer

   Answer: B

   Next question

8. Question 148 · 607 in bank

   An administrator at a small business notices an increase in support calls from employees who receive a blocked page message after trying to navigate to a spoofed website. Which of the following should the administrator do?

   • ADeploy multifactor authentication.
   • BDecrease the level of the web filter settings.
   • CImplement security awareness training.
   • DUpdate the acceptable use policy.

   Show answer

   Answer: C

   Explanation

   C. Implement security awareness training. Explanation: The increase in blocked page messages indicates employees are attempting to visit spoofed or malicious websites, possibly due to phishing attempts. Security awareness training can educate employees on recognizing phishing attempts, spoofed websites, and other social engineering tactics to reduce the likelihood of future incidents. Other Options: A. Deploy multifactor authentication: While MFA is essential for account security, it does not address the issue of employees unknowingly attempting to access spoofed websites. B. Decrease the level of the web filter settings: This would make the organization more vulnerable to threats by allowing access to malicious sites. D. Update the acceptable use policy: Updating policies is good practice but won't directly address the root cause of employees falling for spoofed sites.

   Source: Adapted from community discussion — Anyio

   Next question

9. Question 149 · 607 in bank

   Which of the following teams is best suited to determine whether a company has systems that can be exploited by a potential, identified vulnerability?

   • APurple team
   • BBlue team
   • CRed team
   • DWhite team

   Show answer

   Answer: C

   Explanation

   A red team is best suited to determine if a company has systems that can be exploited by a potential, identified vulnerability. Explanation: Red team role: Red teams simulate attacks from a malicious attacker's perspective. They actively probe systems and networks to find and exploit vulnerabilities. This allows them to identify weaknesses in an organization's security posture. Blue team role: Blue teams focus on defending the organization by monitoring for threats, identifying vulnerabilities, and implementing security measures to mitigate risks. While they may identify vulnerabilities during their monitoring process, their primary goal is to protect the system, not actively exploit them.

   Source: Adapted from community discussion — jennyka76

   Next question

10. Question 150 · 607 in bank

    A company is reviewing options to enforce user logins after several account takeovers. The following conditions must be met as part of the solution: • Allow employees to work remotely or from assigned offices around the world. • Provide a seamless login experience. • Limit the amount of equipment required. Which of the following best meets these conditions?

    • ATrusted devices
    • BGeotagging
    • CSmart cards
    • DTime-based logins

    Show answer

    Answer: A

    Explanation

    A Trusted devices allow users to log in seamlessly from devices that are already recognized and trusted by the system. It supports remove and global access as the device does not need to be in a specific location or equipped with extra hardware. It minimizes the need for additional equipment and provides for a streamlined login experience.

    Source: Adapted from community discussion — a4e15bd

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 141. 607 questions available.