SY0-701 practice questions 21–30

1. Question 21 · 607 in bank

   An organization is struggling with scaling issues on its VPN concentrator and internet circuit due to remote work. The organization is looking for a software solution that will allow it to reduce traffic on the VPN and internet circuit, while still providing encrypted tunnel access to the data center and monitoring of remote employee internet traffic. Which of the following will help achieve these objectives?

   • ADeploying a SASE solution to remote employees
   • BBuilding a load-balanced VPN solution with redundant internet
   • CPurchasing a low-cost SD-WAN solution for VPN traffic
   • DUsing a cloud provider to create additional VPN concentrators

   Show answer

   Answer: A

   Explanation

   Answer is A......SASE (Secure Access Service Edge) is a comprehensive networking and security approach that combines wide-area networking (WAN) capabilities with security features. It provides secure access to applications and data, including encrypted tunnel access to the data center, while also offering monitoring capabilities for remote employee internet traffic. By implementing a SASE solution, the organization can reduce traffic on the VPN and internet circuit by routing traffic intelligently through the cloud, closer to the users. This approach helps optimize performance and security, addressing the scaling issues effectively.

   Source: Adapted from community discussion — geocis

   Next question

2. Question 22 · 607 in bank

   Which of the following is the best reason to complete an audit in a banking environment?

   • ARegulatory requirement
   • BOrganizational change
   • CSelf-assessment requirement
   • DService-level requirement

   Show answer

   Answer: A

   Next question

3. Question 23 · 607 in bank

   Which of the following security concepts is the best reason for permissions on a human resources fileshare to follow the principle of least privilege?

   • AIntegrity
   • BAvailability
   • CConfidentiality
   • DNon-repudiation

   Show answer

   Answer: C

   Explanation

   Human resources (HR) data typically includes sensitive information such as employee records, personal data, salaries, and other confidential details. Implementing the principle of least privilege ensures that only authorized HR personnel have access to this sensitive information, maintaining its confidentiality. Access Control: By granting access only to those who require it to perform their job functions, the organization minimizes the risk of unauthorized access, data breaches, and information leaks. The primary goal of applying least privilege to HR files is to protect sensitive data from unauthorized access, aligning directly with the confidentiality aspect of information security.

   Source: Adapted from community discussion — dbrowndiver

   Next question

4. Question 24 · 607 in bank

   A company is required to use certified hardware when building networks. Which of the following best addresses the risks associated with procuring counterfeit hardware?

   • AA thorough analysis of the supply chain
   • BA legally enforceable corporate acquisition policy
   • CA right to audit clause in vendor contracts and SOWs
   • DAn in-depth penetration test of all suppliers and vendors

   Show answer

   Answer: A

   Explanation

   An analysis would safely address if their was a lack of reliability, or authenticity when procuring hardware from a supplier to protect the company.

   Source: Adapted from community discussion — Mehsotopes

   Next question

5. Question 25 · 607 in bank

   Select 2

   Which of the following are cases in which an engineer should recommend the decommissioning of a network device? (Choose two.)

   • AThe device has been moved from a production environment to a test environment.
   • BThe device is configured to use cleartext passwords.
   • CThe device is moved to an isolated segment on the enterprise network.
   • DThe device is moved to a different location in the enterprise.
   • EThe device's encryption level cannot meet organizational standards.
   • FThe device is unable to receive authorized updates.

   Show answer

   Answer: EF

   Explanation

   E. The device's encryption level cannot meet organizational standards. F. The device is unable to receive authorized updates. These two cases justify decommissioning a network device: - Encryption Level: If a device's encryption level cannot meet the organization's standards, it poses a significant security risk and should be decommissioned. - Authorized Updates: If a device is unable to receive authorized updates, it becomes vulnerable to known exploits and cannot be maintained securely, thus it should also be decommissioned. Therefore, the correct answers are: E. The device's encryption level cannot meet organizational standards. F. The device is unable to receive authorized updates.

   Source: Adapted from community discussion — Etc_Shadow28000

   Next question

6. Question 26 · 607 in bank

   A company is required to perform a risk assessment on an annual basis. Which of the following types of risk assessments does this requirement describe?

   • AContinuous
   • BAd hoc
   • CRecurring
   • DOne time

   Show answer

   Answer: C

   Explanation

   Recurring risk assessments are those that are scheduled to take place at regular intervals, such as annually, semi-annually, or quarterly. This type of assessment ensures that risks are regularly evaluated, allowing the company to stay informed about potential vulnerabilities and threats and adjust its risk management strategies accordingly. o Without the ability to receive updates, a device cannot be secured against emerging threats, making it a liability to the organization's security posture.

   Source: Adapted from community discussion — dbrowndiver

   Next question

7. Question 27 · 607 in bank

   After a recent ransomware attack on a company's system, an administrator reviewed the log files. Which of the following control types did the administrator use?

   • ACompensating
   • BDetective
   • CPreventive
   • DCorrective

   Show answer

   Answer: B

   Explanation

   Detective is the correct answer because reviewing log files after a ransomware attack is an example of a detective control. It is used to identify, analyze, and understand security incidents post-occurrence, providing valuable information for future prevention and response strategies.

   Source: Adapted from community discussion — dbrowndiver

   Next question

8. Question 28 · 607 in bank

   Which of the following exercises should an organization use to improve its incident response process?

   • ATabletop
   • BReplication
   • CFailover
   • DRecovery

   Show answer

   Answer: A

   Explanation

   Tabletop is the correct answer because tabletop exercises are specifically designed to evaluate and improve incident response processes by allowing teams to simulate responses to hypothetical incidents. This exercise provides valuable insights into the effectiveness of the current response plan and identifies areas for improvement, enhancing the organization's overall incident response capabilities.

   Source: Adapted from community discussion — dbrowndiver

   Next question

9. Question 29 · 607 in bank

   Which of the following best ensures minimal downtime and data loss for organizations with critical computing equipment located in earthquake-prone areas?

   • AGenerators and UPS
   • BOff-site replication
   • CRedundant cold sites
   • DHigh availability networking

   Show answer

   Answer: B

   Explanation

   Earthquake Protection: In earthquake-prone areas, having data and systems replicated off-site ensures that even if the primary site is compromised, the organization can recover its operations from the remote location with minimal downtime and data loss. Data and System Availability: Off-site replication provides a means to restore operations quickly, as the backup data is up-to-date and can be accessed or moved to a disaster recovery site. Off-site replication is crucial for disaster recovery planning, particularly in areas susceptible to natural disasters. It ensures business continuity by safeguarding data and systems in a secure location away from the primary site's risks.

   Source: Adapted from community discussion — dbrowndiver

   Next question

10. Question 30 · 607 in bank

    A newly identified network access vulnerability has been found in the OS of legacy IoT devices. Which of the following would best mitigate this vulnerability quickly?

    • AInsurance
    • BPatching
    • CSegmentation
    • DReplacement

    Show answer

    Answer: C

    Explanation

    Patching is a common method for addressing vulnerabilities. However, in the case of legacy devices, patches may no longer be provided, or applying new patches may be difficult. Therefore, it is not suitable as a quick mitigation method, making C. Segmentation the correct answer.

    Source: Adapted from community discussion — CyberSecurity24

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 21. 607 questions available.