SY0-701 practice questions 181–190

1. Question 181 · 607 in bank

   Which of the following is a common source of unintentional corporate credential leakage in cloud environments?

   • ACode repositories
   • BDark web
   • CThreat feeds
   • DState actors
   • EVulnerability databases

   Show answer

   Answer: A

   Explanation

   A. Code repositories Code repositories often contain hardcoded credentials, API keys, or other sensitive information that developers may accidentally commit without proper security measures. This can expose these credentials when the code is shared or made public, leading to unintentional leakage of corporate credentials in cloud environments.

   Source: Adapted from community discussion — pokii1992

   Next question

2. Question 182 · 607 in bank

   Which of the following is the best reason an organization should enforce a data classification policy to help protect its most sensitive information?

   • AEnd users will be required to consider the classification of data that can be used in documents.
   • BThe policy will result in the creation of access levels for each level of classification.
   • CThe organization will have the ability to create security requirements based on classification levels.
   • DSecurity analysts will be able to see the classification of data within a document before opening it.

   Show answer

   Answer: C

   Explanation

   The answer C is the best reason because it directly addresses the core benefit of data classification policies: Creating security requirements based on classification levels allows organizations to implement tailored, appropriate security measures for different types of data. This approach ensures that the most sensitive information receives the highest level of protection, while less critical data may have less stringent controls. This targeted approach optimizes security efforts and resource allocation, providing a more effective and efficient way to protect an organization's information assets.

   Source: Adapted from community discussion — pokii1992

   Next question

3. Question 183 · 607 in bank

   An analyst is performing a vulnerability scan against the web servers exposed to the internet without a system account. Which of the following is most likely being performed?

   • ANon-credentialed scan
   • BPacket capture
   • CPrivilege escalation
   • DSystem enumeration
   • EPassive scan

   Show answer

   Answer: A

   Explanation

   The correct answer is: A. Non-credentialed scan A non-credentialed scan is a vulnerability scan conducted without using login credentials. This type of scan is limited to detecting vulnerabilities that are exposed without needing privileged access. It’s commonly used to assess what an external attacker could potentially see or exploit without having any system account access, which aligns with the scenario described.

   Source: Adapted from community discussion — ViciousAkira

   Next question

4. Question 184 · 607 in bank

   A security administrator is hardening corporate systems and applying appropriate mitigations by consulting a real-world knowledge base for adversary behavior. Which of the following would be best for the administrator to reference?

   • AMITRE ATT&CK
   • BCSIRT
   • CCVSS
   • DSOAR

   Show answer

   Answer: A

   Explanation

   MITRE ATT&CK is a comprehensive and widely used framework that categorizes and describes the various tactics, techniques and procedures (TTPs) employed by adversaries, it is used for threat intelligence, defensive strategy etc.

   Source: Adapted from community discussion — a4e15bd

   Next question

5. Question 185 · 607 in bank

   An architect has a request to increase the speed of data transfer using JSON requests externally. Currently, the organization uses SFTP to transfer data files. Which of the following will most likely meet the requirements?

   • AA website-hosted solution
   • BCloud shared storage
   • CA secure email solution
   • DMicroservices using API

   Show answer

   Answer: D

   Explanation

   D. Microservices Using API By using APIs will allow for increased speed of data transfer compared to file based transfer methods liker SFTP.

   Source: Adapted from community discussion — a4e15bd

   Next question

6. Question 186 · 607 in bank

   Which of the following addresses individual rights such as the right to be informed, the right of access, and the right to be forgotten?

   • AGDPR
   • BPCI DSS
   • CNIST
   • DISO

   Show answer

   Answer: A

   Explanation

   GDPR - General Data Protection Regulation NIST - Network institute of standards and technology, so doesn't have that. PCI DSS - Payment Card Industry Data security standards ISO - International standard for Standardisation

   Source: Adapted from community discussion — Syl0

   Next question

7. Question 187 · 607 in bank

   An administrator is installing an LDAP browser tool in order to view objects in the corporate LDAP directory. Secure connections to the LDAP server are required. When the browser connects to the server, certificate errors are being displayed, and then the connection is terminated. Which of the following is the most likely solution?

   • AThe administrator should allow SAN certificates in the browser configuration.
   • BThe administrator needs to install the server certificate into the local truststore.
   • CThe administrator should request that the secure LDAP port be opened to the server.
   • DThe administrator needs to increase the TLS version on the organization's RA.

   Show answer

   Answer: B

   Explanation

   B is correct The administrator needs to the server's certificate in the local trust store of the machine where LDAP browser tool is being used. This will allow the client to trust the server's certificate and establish a secure connection.

   Source: Adapted from community discussion — a4e15bd

   Next question

8. Question 188 · 607 in bank

   Which of the following is the most important security concern when using legacy systems to provide production service?

   • AInstability
   • BLack of vendor support
   • CLoss of availability
   • DUse of insecure protocols

   Show answer

   Answer: B

   Explanation

   The most important security concern with legacy systems is the lack of vendor support. Without vendor support, there are no updates, security patches, or fixes for newly discovered vulnerabilities. This leaves the system exposed to potential attacks that cannot be easily mitigated, increasing the risk of security breaches.

   Source: Adapted from community discussion — 2fef490

   Next question

9. Question 189 · 607 in bank

   Which of the following security control types does an acceptable use policy best represent?

   • ADetective
   • BCompensating
   • CCorrective
   • DPreventive

   Show answer

   Answer: D

   Explanation

   D. Preventive AUP is pretty obviously trying to prevent things from happening. It's not A. Detective because it doesn't detect anything. It's a policy. It's not B. Compensating because it isn't making up for any other policy included in the question. It's not C. Corrective because it doesn't correct anything on it's own, it's simply a policy that is to be followed. So it could only be D. Preventive, as it prevents people from doing things that might compromise the network.

   Source: Adapted from community discussion — TheMichael

   Next question

10. Question 190 · 607 in bank

    A security investigation revealed that malicious software was installed on a server using a server administrator's credentials. During the investigation, the server administrator explained that Telnet was regularly used to log in. Which of the following most likely occurred?

    • AA spraying attack was used to determine which credentials to use.
    • BA packet capture tool was used to steal the password.
    • CA remote-access Trojan was used to install the malware.
    • DA dictionary attack was used to log in as the server administrator.

    Show answer

    Answer: B

    Explanation

    B. A packet capture tool was used to steal the password. Telnet transmits data, including credentials, in plaintext, making it vulnerable to interception. A packet capture tool could easily capture the login credentials being transmitted, allowing an attacker to gain unauthorized access to the server.

    Source: Adapted from community discussion — baronvon

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 181. 607 questions available.