SY0-701 practice questions 291–300

1. Question 291 · 607 in bank

   An organization has recently decided to implement SSO. The requirements are to leverage access tokens and focus on application authorization rather than user authentication. Which of the following solutions would the engineering team most likely configure?

   • ALDAP
   • BFederation
   • CSAML
   • DOAuth

   Show answer

   Answer: D

   Explanation

   For modern web applications and APIs: OAuth is preferred for authorization SAML is preferred for authentication LDAP is often used more for internal network resources and directory services

   Source: Adapted from community discussion — 9149f41

   Next question

2. Question 292 · 607 in bank

   Which of the following would most likely be used by attackers to perform credential harvesting?

   • ASocial engineering
   • BSupply chain compromise
   • CThird-party software
   • DRainbow table

   Show answer

   Answer: A

   Next question

3. Question 293 · 607 in bank

   A security engineer would like to enhance the use of automation and orchestration within the SIEM. Which of the following would be the primary benefit of this enhancement?

   • AIt increases complexity.
   • BIt removes technical debt.
   • CIt adds additional guard rails.
   • DIt acts as a workforce multiplier.

   Show answer

   Answer: D

   Explanation

   Automation and orchestration within a SIEM system allow security teams to respond to incidents more quickly and efficiently, without requiring as much manual effort for repetitive tasks. This effectively "multiplies" the workforce's capability, enabling a smaller team to handle more incidents or data points.

   Source: Adapted from community discussion — chasingsummer

   Next question

4. Question 294 · 607 in bank

   A systems administrator receives an alert that a company’s internal file server is very slow and is only working intermittently. The systems administrator reviews the server management software and finds the following information about the server:

   

   Which of the following indicators most likely triggered this alert?

   • AConcurrent session usage
   • BNetwork saturation
   • CAccount lockout
   • DResource consumption

   Show answer

   Answer: D

   Next question

5. Question 295 · 607 in bank

   Which of the following data states applies to data that is being actively processed by a database server?

   • AIn use
   • BAt rest
   • CIn transit
   • DBeing hashed

   Show answer

   Answer: A

   Explanation

   In Rest: In use: Actively being processed or used. Data is loading, editing, computation, etc. At Rest: Stored, hard drive, cloud, not used, no connection, power off the database, etc. In Transit: Over the network, between the system, data transferring, etc. Being Hashed: Relevant with security, cryptographic, hashing, integrity, etc.

   Source: Adapted from community discussion — 9149f41

   Next question

6. Question 296 · 607 in bank

   Which of the following architectures is most suitable to provide redundancy for critical business processes?

   • ANetwork-enabled
   • BServer-side
   • CCloud-native
   • DMultitenant

   Show answer

   Answer: C

   Explanation

   Cloud-native architectures are designed to leverage the flexibility, scalability, and redundancy features of cloud environments. These architectures typically use distributed systems, microservices, and containerization (e.g., Kubernetes) to ensure high availability, fault tolerance, and automated failover. Cloud providers offer built-in redundancy and disaster recovery solutions, ensuring that critical business processes are protected from outages. Not D. Multitenant: Multitenant architectures allow multiple clients or tenants to share the same infrastructure. While they can provide efficient resource utilization, they aren't specifically designed for redundancy. Redundancy would still need to be implemented through other mechanisms (e.g., cloud services, clustering).

   Source: Adapted from community discussion — laternak26

   Next question

7. Question 297 · 607 in bank

   A newly appointed board member with cybersecurity knowledge wants the board of directors to receive a quarterly report detailing the number of incidents that impacted the organization. The systems administrator is creating a way to present the data to the board of directors. Which of the following should the systems administrator use?

   • APacket captures
   • BVulnerability scans
   • CMetadata
   • DDashboard

   Show answer

   Answer: D

   Explanation

   Dashboard: A dashboard is a graphical user interface that provides at-a-glance views of key performance indicators (KPIs) and other important metrics. In the context of cybersecurity, a dashboard can be used to present summarized information about security incidents, including the number of incidents, their severity, affected systems, and trends over time. Dashboards can provide a visually appealing and easy-to-understand way to present quarterly incident reports to the board of directors, making them the most suitable option among the choices provided. Therefore, the systems administrator should use Dashboard to present the quarterly incident reports to the board of directors. A dashboard can effectively summarize incident data and provide a visually appealing presentation format for the board's review.

   Source: Adapted from community discussion — metzen227

   Next question

8. Question 298 · 607 in bank

   After a security incident, a systems administrator asks the company to buy a NAC platform. Which of the following attack surfaces is the systems administrator trying to protect?

   • ABluetooth
   • BWired
   • CNFC
   • DSCADA

   Show answer

   Answer: B

   Explanation

   B. Wired Explanation: A Network Access Control (NAC) platform is designed to enforce security policies on devices attempting to connect to a network. The primary attack surface that a NAC platform aims to protect is typically the wired network

   Source: Adapted from community discussion — Segunmx

   Next question

9. Question 299 · 607 in bank

   While reviewing logs, a security administrator identifies the following code:

   

   Which of the following best describes the vulnerability being exploited?

   • AXSS
   • BSQLi
   • CDDoS
   • DCSRF

   Show answer

   Answer: A

   Explanation

   The code snippet provided ( function (send_info) ) indicates the presence of a JavaScript function embedded within a webpage, which is typical of a cross-site scripting (XSS) attack.

   Source: Adapted from community discussion — chasingsummer

   Next question

10. Question 300 · 607 in bank

    An organization issued new laptops to all employees and wants to provide web filtering both in and out of the office without configuring additional access to the network. Which of the following types of web filtering should a systems administrator configure?

    • AAgent-based
    • BCentralized proxy
    • CURL scanning
    • DContent categorization

    Show answer

    Answer: A

    Explanation

    Agent-based web filtering is the most suitable solution. It provides granular control over web traffic on individual devices, ensuring consistent filtering policies regardless of network location.

    Source: Adapted from community discussion — Cocopqr

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 291. 607 questions available.