SY0-701 practice questions 191–200

1. Question 191 · 607 in bank

   A user is requesting Telnet access to manage a remote development web server. Insecure protocols are not allowed for use within any environment. Which of the following should be configured to allow remote access to this server?

   • AHTTPS
   • BSNMPv3
   • CSSH
   • DRDP
   • ESMTP

   Show answer

   Answer: C

   Explanation

   C. SSH SSH (Secure Shell) provides encrypted remote access to servers, making it a secure alternative to Telnet, which transmits data in plaintext. SSH is commonly used for secure management of remote systems and would be the appropriate choice given the restriction on insecure protocols.

   Source: Adapted from community discussion — baronvon

   Next question

2. Question 192 · 607 in bank

   A security administrator is working to find a cost-effective solution to implement certificates for a large number of domains and subdomains owned by the company. Which of the following types of certificates should the administrator implement?

   • AWildcard
   • BClient certificate
   • CSelf-signed
   • DCode signing

   Show answer

   Answer: A

   Explanation

   A wildcard certificate can be used to secure multiple subdomains under a single domain name. This makes it a cost-effective solution for organizations with a large number of subdomains. By purchasing a single wildcard certificate, the organization can secure all subdomains with a single certificate, reducing the need for multiple individual certificates.

   Source: Adapted from community discussion — ProudFather

   Next question

3. Question 193 · 607 in bank

   An auditor discovered multiple insecure ports on some servers. Other servers were found to have legacy protocols enabled. Which of the following tools did the auditor use to discover these issues?

   • ANessus
   • Bcurl
   • CWireshark
   • Dnetcat

   Show answer

   Answer: A

   Explanation

   A. Nessus Nessus is a vulnerability scanner that can identify insecure ports, legacy protocols, and other security issues on servers. It is designed to detect vulnerabilities and misconfigurations in systems.

   Source: Adapted from community discussion — baronvon

   Next question

4. Question 194 · 607 in bank

   A security analyst received a tip that sensitive proprietary information was leaked to the public. The analyst is reviewing the PCAP and notices traffic between an internal server and an external host that includes the following: ... 12:47:22.327233 PPPoE [ses 0x8122] IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto IPv6 (41), length 331) 10.5.1.1 > 52.165.16.154: IP6 (hlim E3, next-header TCP (6) paylcad length: 271) 2001:67c:2158:a019::ace.53104 > 2001:0:5ef5:79fd:380c:dddd:a601:24fa.13788: Flags [P.], cksum 0xd7ee (correct), seq 97:348, ack 102, win 16444, length 251 ... Which of the following was most likely used to exfiltrate the data?

   • AEncapsulation
   • BMAC address spoofing
   • CSteganography
   • DBroken encryption
   • ESniffing via on-path position

   Show answer

   Answer: A

   Explanation

   A. Encapsulation The traffic described involves IPv6 encapsulated within IPv4, which can indicate that data is being transmitted through encapsulation to obscure the content or bypass filters. This technique could be used to exfiltrate sensitive data by embedding it within legitimate traffic patterns.

   Source: Adapted from community discussion — baronvon

   Next question

5. Question 195 · 607 in bank

   A company wants to reduce the time and expense associated with code deployment. Which of the following technologies should the company utilize?

   • AServerless architecture
   • BThin clients
   • CPrivate cloud
   • DVirtual machines

   Show answer

   Answer: A

   Explanation

   A. Serverless architecture Serverless architecture allows the company to reduce the time and expense associated with code deployment by handling the underlying infrastructure management automatically. This means the company only needs to focus on the code itself, without worrying about provisioning or managing servers. This approach can also scale automatically with demand, further reducing operational overhead and costs.

   Source: Adapted from community discussion — baronvon

   Next question

6. Question 196 · 607 in bank

   A security administrator is performing an audit on a stand-alone UNIX server, and the following message is immediately displayed: (Error 13): /etc/shadow: Permission denied. Which of the following best describes the type of tool that is being used?

   • APass-the-hash monitor
   • BFile integrity monitor
   • CForensic analysis
   • DPassword cracker

   Show answer

   Answer: D

   Explanation

   D. Password cracker: A password cracker tool is used to attempt to recover passwords from hashed password files. In the case of UNIX-based systems, the /etc/shadow file typically stores user passwords in a hashed format. If a security administrator or attacker is trying to analyze this file, they might encounter the "Permission denied" message if they do not have sufficient privileges to access it. This suggests that the tool being used is likely attempting to crack or analyze the passwords stored in the /etc/shadow file, and it's encountering permission issues. Why not B. File integrity monitor: A file integrity monitor typically checks whether critical system files have been modified. It wouldn't be used to crack passwords or access /etc/shadow in this way, and it wouldn’t typically result in a "Permission denied" error unless there’s an attempt to modify files rather than just monitor them.

   Source: Adapted from community discussion — laternak26

   Next question

7. Question 197 · 607 in bank

   A security administrator needs to create firewall rules for the following protocols: RTP, SIP, H.323. and SRTP. Which of the following does this rule set support?

   • ARTOS
   • BVoIP
   • CSoC
   • DHVAC

   Show answer

   Answer: B

   Explanation

   B. VoIP The protocols RTP (Real-time Transport Protocol), SIP (Session Initiation Protocol), H.323, and SRTP (Secure Real-time Transport Protocol) are commonly used in Voice over IP (VoIP) communications. RTP handles the transport of media streams, SIP manages call setup and control, H.323 is a standard for multimedia communication, and SRTP provides encryption for RTP. Therefore, the firewall rules for these protocols support VoIP.

   Source: Adapted from community discussion — baronvon

   Next question

8. Question 198 · 607 in bank

   Which of the following best describes a social engineering attack that uses a targeted electronic messaging campaign aimed at a Chief Executive Officer?

   • AWhaling
   • BSpear phishing
   • CImpersonation
   • DIdentity fraud

   Show answer

   Answer: A

   Explanation

   A. Whaling Whaling is a type of social engineering attack specifically targeting high-profile individuals such as CEOs or other executives. It is a form of spear phishing that focuses on these high-value targets with highly personalized and convincing messages.

   Source: Adapted from community discussion — baronvon

   Next question

9. Question 199 · 607 in bank

   During a penetration test, a flaw in the internal PKI was exploited to gain domain administrator rights using specially crafted certificates. Which of the following remediation tasks should be completed as part of the cleanup phase?

   • AUpdating the CRL
   • BPatching the CA
   • CChanging passwords
   • DImplementing SOAR

   Show answer

   Answer: B

   Explanation

   B. Patching the CA Here's why: Patching the Certificate Authorities: This involves updating the CA software to address the specific vulnerability that was exploited. Since the attack exploited a flaw in the PKI, patching the CA is crucial to fixing the vulnerability and preventing similar attacks in the future. While the other options are also important in a broader security context, they may not directly address the specific issue with the PKI flaw: -Updating the Certificate Revocation Lists (CRLs): This is important for managing revoked certificates but may not address the root cause of the PKI vulnerability. -Changing passwords: This is a good security practice but would not resolve the underlying issue with the PKI vulnerability. -Implementing SOAR (Security Orchestration, Automation, and Response): SOAR can help with automating responses and managing security operations but does not directly address the specific PKI vulnerability. -Therefore, patching the Certificate Authorities is the most effective and direct remediation task for this situatio

   Source: Adapted from community discussion — baronvon

   Next question

10. Question 200 · 607 in bank

    An IT manager informs the entire help desk staff that only the IT manager and the help desk lead will have access to the administrator console of the help desk software. Which of the following security techniques is the IT manager setting up?

    • AHardening
    • BEmployee monitoring
    • CConfiguration enforcement
    • DLeast privilege

    Show answer

    Answer: D

    Explanation

    Least privilege: Least privilege is a security principle that states that users should only be granted the minimum level of access or permissions necessary to perform their job functions. By restricting access to the administrator console of the help desk software to only the IT manager and the help desk lead, the IT manager is adhering to the principle of least privilege, ensuring that only those individuals who require administrative access have it, thereby reducing the risk of unauthorized access and potential misuse. Given the scenario described, the security technique that the IT manager is setting up by restricting access to the administrator console of the help desk software is Least privilege. This approach aligns with the principle of least privilege by granting administrative access only to individuals who need it to perform their job responsibilities.

    Source: Adapted from community discussion — metzen227

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 191. 607 questions available.