SY0-701 practice questions 351–360

1. Question 351 · 607 in bank

   Which of the following is a compensating control for providing user access to a high-risk website?

   • AEnabling threat prevention features on the firewall
   • BConfiguring a SIEM tool to capture all web traffic
   • CSetting firewall rules to allow traffic from any port to that destination
   • DBlocking that website on the endpoint protection software

   Show answer

   Answer: A

   Explanation

   A compensating control is a security measure implemented to reduce risk when the primary control cannot be applied. If users need access to a high-risk website, enabling threat prevention features on the firewall serves as a compensating control by inspecting and filtering potentially malicious traffic to and from the site.

   Source: Adapted from community discussion — Fourgehan

   Next question

2. Question 352 · 607 in bank

   Select 2

   An organization is implementing a COPE mobile device management policy. Which of the following should the organization include in the COPE policy? (Choose two.)

   • ARemote wiping of the device
   • BData encryption
   • CRequiring passwords with eight characters
   • DData usage caps
   • EEmployee data ownership
   • FPersonal application store access

   Show answer

   Answer: AB

   Explanation

   The correct answers are: A. Remote wiping of the device B. Data encryption Explanation: COPE (Corporate-Owned, Personally Enabled) devices are company-owned devices that employees can use for both work and personal purposes. The COPE policy must ensure that corporate data is secure while still allowing personal use of the device. A. Remote wiping of the device: This ensures that, in case of theft, loss, or termination of employment, the organization can remotely wipe sensitive corporate data. B. Data encryption: Encryption protects sensitive corporate data on the device, ensuring confidentiality even if the device is lost or compromised. Other Options: C. Requiring passwords with eight characters: While password policies are important, requiring a specific length alone is insufficient without broader authentication and security measures. D. Data usage caps: This is more related to cost control than security or policy enforcement.

   Source: Adapted from community discussion — Anyio

   Next question

3. Question 353 · 607 in bank

   Select 2

   Which of the following must be considered when designing a high-availability network? (Choose two).

   • AEase of recovery
   • BAbility to patch
   • CPhysical isolation
   • DResponsiveness
   • EAttack surface
   • FExtensible authentication

   Show answer

   Answer: AD

   Explanation

   When designing a high-availability network, two key considerations are: A. Ease of recovery D. Responsiveness - Ease of recovery. This is essential for high availability because the network must be able to recover quickly from failures to minimize downtime. - Responsiveness. Ensuring that the network can handle high traffic loads and respond quickly to user requests is crucial for maintaining high availability. Other factors like physical isolation, ability to patch, attack surface, and extensible authentication are important for security and maintenance but are not primary considerations for high availability. Therefore, the correct answers are: A. Ease of recovery D. Responsiveness

   Source: Adapted from community discussion — Etc_Shadow28000

   Next question

4. Question 354 · 607 in bank

   A security administrator observed the following in a web server log while investigating an incident: "GET ../../../../etc/passwd" Which of the following attacks did the security administrator most likely see?

   • APrivilege escalation
   • BCredential replay
   • CBrute force
   • DDirectory traversal

   Show answer

   Answer: D

   Explanation

   The log entry GET ../../../../etc/passwd indicates an attempt to access a file outside the intended directory structure of the web server by manipulating the file path with ../. This is characteristic of a directory traversal attack. Directory traversal attacks exploit vulnerabilities in a web application's input handling to access unauthorized files and directories on the server. The goal in this case is to retrieve the /etc/passwd file, which stores user account information on Unix/Linux systems

   Source: Adapted from community discussion — Fourgehan

   Next question

5. Question 355 · 607 in bank

   An organization wants a third-party vendor to do a penetration test that targets a specific device. The organization has provided basic information about the device. Which of the following best describes this kind of penetration test?

   • APartially known environment
   • BUnknown environment
   • CIntegrated
   • DKnown environment

   Show answer

   Answer: A

   Next question

6. Question 356 · 607 in bank

   Which of the following should a security team do first before a new web server goes live?

   • AHarden the virtual host.
   • BCreate WAF rules.
   • CEnable network intrusion detection.
   • DApply patch management.

   Show answer

   Answer: A

   Explanation

   The correct answer is: A. Harden the virtual host. Explanation: Hardening the virtual host is the first step a security team should take before a new web server goes live. This involves securing the server by removing unnecessary services, applying secure configurations, and minimizing potential attack surfaces. Hardening ensures the server is in a secure state before it is exposed to potential threats. Create WAF rules (B) is important but should be done after the server is hardened, as the Web Application Firewall (WAF) rules depend on the server's configuration and applications. Enable network intrusion detection (C) is a broader network security measure and should be implemented after the server itself is secured. Apply patch management (D) is critical but is part of the ongoing maintenance process and should follow initial hardening. Thus, hardening the virtual host is the first and most critical step to ensure the web server is secure before it goes live.

   Source: Adapted from community discussion — Anyio

   Next question

7. Question 357 · 607 in bank

   Which of the following techniques can be used to sanitize the data contained on a hard drive while allowing for the hard drive to be repurposed?

   • ADegaussing
   • BDrive shredder
   • CRetention platform
   • DWipe tool

   Show answer

   Answer: D

   Next question

8. Question 358 · 607 in bank

   An attacker submits a request containing unexpected characters in an attempt to gain unauthorized access to information within the underlying systems. Which of the following best describes this attack?

   • ASide loading
   • BTarget of evaluation
   • CResource reuse
   • DSQL injection

   Show answer

   Answer: D

   Next question

9. Question 359 · 607 in bank

   A security analyst has determined that a security breach would have a financial impact of $15,000 and is expected to occur twice within a three-year period. Which of the following is the ALE for this risk?

   • A$7,500
   • B$10,000
   • C$15,000
   • D$30,000

   Show answer

   Answer: B

   Explanation

   Simpler calculation without decimals: $15,000 SLE x 2 occurrences = $30,000. $30,000 / 3 years = $10,000 ALE. Answer is B.

   Source: Adapted from community discussion — gingergroot

   Next question

10. Question 360 · 607 in bank

    A systems administrator discovers a system that is no longer receiving support from the vendor. However, this system and its environment are critical to running the business, cannot be modified, and must stay online. Which of the following risk treatments is the most appropriate in this situation?

    • AReject
    • BAccept
    • CTransfer
    • DAvoid

    Show answer

    Answer: B

    Explanation

    In this scenario, the organization has no choice but to accept the risk associated with the unsupported system. The system is critical to the business, and it cannot be modified or replaced without disrupting operations. Therefore, the organization must implement additional security measures, such as regular vulnerability assessments and patching, to mitigate the risk as much as possible.

    Source: Adapted from community discussion — ProudFather

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 351. 607 questions available.