SY0-701 practice questions 221–230

1. Question 221 · 607 in bank

   Which of the following is a common data removal option for companies that want to wipe sensitive data from hard drives in a repeatable manner but allow the hard drives to be reused?

   • ASanitization
   • BFormatting
   • CDegaussing
   • DDefragmentation

   Show answer

   Answer: A

   Explanation

   Sanitization is the process of removing sensitive data from a storage device in a manner that ensures the data cannot be recovered while allowing device to be reused. This involves methods like overwriting the data with zeros or other patterns multiple times.

   Source: Adapted from community discussion — a4e15bd

   Next question

2. Question 222 · 607 in bank

   An employee clicked a link in an email from a payment website that asked the employee to update contact information. The employee entered the log-in information but received a “page not found” error message. Which of the following types of social engineering attacks occurred?

   • ABrand impersonation
   • BPretexting
   • CTyposquatting
   • DPhishing

   Show answer

   Answer: D

   Explanation

   Phishing is the fraudulent practice of sending emails, or other messages to cause an individual to reveal personal information. This question does not specify if this email was pretexting to butter up the employee, or make email more convincing (pretexting), nor does it specify this email being a trusted brand, or waiting on employee to type incorrectly to steal information.

   Source: Adapted from community discussion — Mehsotopes

   Next question

3. Question 223 · 607 in bank

   Which of the following should a security administrator adhere to when setting up a new set of firewall rules?

   • ADisaster recovery plan
   • BIncident response procedure
   • CBusiness continuity plan
   • DChange management procedure

   Show answer

   Answer: D

   Explanation

   Want to make sure the new WF rules do not interfere or cause disruption in service and network, submit a change management request or else you be in big doo doo

   Source: Adapted from community discussion — MAKOhunter33333333

   Next question

4. Question 224 · 607 in bank

   An organization wants to improve the company's security authentication method for remote employees. Given the following requirements: • Must work across SaaS and internal network applications • Must be device manufacturer agnostic • Must have offline capabilities Which of the following would be the most appropriate authentication method?

   • AUsername and password
   • BBiometrics
   • CSMS verification
   • DTime-based tokens

   Show answer

   Answer: D

   Explanation

   D. Time-based tokens These tokens generate a unique code that changes every 30 or 60 seconds. They work across various platforms including SaaS and internal applications, are device manufacturer agnostic and can be used offline.

   Source: Adapted from community discussion — a4e15bd

   Next question

5. Question 225 · 607 in bank

   A security officer is implementing a security awareness program and has placed security-themed posters around the building and assigned online user training. Which of the following will the security officer most likely implement?

   • APassword policy
   • BAccess badges
   • CPhishing campaign
   • DRisk assessment

   Show answer

   Answer: C

   Explanation

   As part of a security awareness program, a phishing campaign is commonly used to test and improve employees' ability to recognize and respond to phishing attempts. By placing security-themed posters and assigning online training, the security officer is already focusing on educating employees about potential threats. A phishing campaign is a logical next step to assess the effectiveness of the program and reinforce awareness by simulating real-world scenarios.

   Source: Adapted from community discussion — Fourgehan

   Next question

6. Question 226 · 607 in bank

   A malicious update was distributed to a common software platform and disabled services at many organizations. Which of the following best describes this type of vulnerability?

   • ADDoS attack
   • BRogue employee
   • CInsider threat
   • DSupply chain

   Show answer

   Answer: D

   Explanation

   This type of vulnerability occurs when a malicious update affects a software platform that many organizations rely on, highlighting risks associated with third-party software and dependencies.

   Source: Adapted from community discussion — dhewa

   Next question

7. Question 227 · 607 in bank

   A company web server is initiating outbound traffic to a low-reputation, public IP on non-standard pat. The web server is used to present an unauthenticated page to clients who upload images the company. An analyst notices a suspicious process running on the server hat was not created by the company development team. Which of the following is the most likely explanation for his security incident?

   • AA web shell has been deployed to the server through the page.
   • BA vulnerability has been exploited to deploy a worm to the server.
   • CMalicious insiders are using the server to mine cryptocurrency.
   • DAttackers have deployed a rootkit Trojan to the server over an exposed RDP port.

   Show answer

   Answer: A

   Explanation

   A. A web shell has been deployed to the server through the page. The shell would allow the attacker to gain unauthorized access and control over the server.

   Source: Adapted from community discussion — a4e15bd

   Next question

8. Question 228 · 607 in bank

   An organization requests a third-party full-spectrum analysis of its supply chain. Which of the following would the analysis team use to meet this requirement?

   • AVulnerability scanner
   • BPenetration test
   • CSCAP
   • DIllumination tool

   Show answer

   Answer: D

   Explanation

   The correct answer is D. Illumination tool. An illumination tool is designed to provide a comprehensive overview and analysis of a supply chain, identifying risks, vulnerabilities, and potential points of failure across the entire spectrum. The other options are typically more focused on cybersecurity: A. Vulnerability scanner is used to identify security vulnerabilities within a network or system. B. Penetration test simulates an attack on a system to identify weaknesses. C. SCAP (Security Content Automation Protocol) is used to automate vulnerability management, policy compliance, and security measurement. For a full-spectrum analysis of a supply chain, an illumination tool would be more appropriate.

   Source: Adapted from community discussion — cri88

   Next question

9. Question 229 · 607 in bank

   A systems administrator deployed a monitoring solution that does not require installation on the endpoints that the solution is monitoring. Which of the following is described in this scenario?

   • AAgentless solution
   • BClient-based soon
   • COpen port
   • DFile-based solution

   Show answer

   Answer: A

   Explanation

   Agentless monitoring does not require the installation of software on the target device. It uses standard protocols to collect information, making it less intrusive and less resource intensive.

   Source: Adapted from community discussion — abbey0922

   Next question

10. Question 230 · 607 in bank

    A security analyst is reviewing the source code of an application in order to identify misconfigurations and vulnerabilities. Which of the following kinds of analysis best describes this review?

    • ADynamic
    • BStatic
    • CGap
    • DImpact

    Show answer

    Answer: B

    Explanation

    Static analysis refers to reviewing the source code of an application without executing it, in order to identify misconfigurations, vulnerabilities, and potential security flaws. This is the type of analysis the security analyst is performing by examining the code directly. Dynamic analysis (A) involves analyzing the application while it is running, to detect vulnerabilities that only appear during execution. Gap analysis (C) identifies discrepancies between current security measures and desired standards, but is not focused on source code review. Impact analysis (D) assesses the potential consequences of identified vulnerabilities but is not the process of reviewing source code directly.

    Source: Adapted from community discussion — cri88

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 221. 607 questions available.