SY0-701 practice questions 361–370

1. Question 361 · 607 in bank

   A company discovered its data was advertised for sale on the dark web. During the initial investigation, the company determined the data was proprietary data. Which of the following is the next step the company should take?

   • AIdentify the attacker’s entry methods.
   • BReport the breach to the local authorities.
   • CNotify the applicable parties of the breach.
   • DImplement vulnerability scanning of the company's systems.

   Show answer

   Answer: C

   Explanation

   When a company discovers that proprietary data has been compromised and advertised for sale on the dark web, the next step is to notify the applicable parties of the breach. This typically includes: Internal stakeholders (e.g., management, legal, and compliance teams) to ensure they are aware of the situation. Affected individuals or entities (e.g., customers, partners, employees) who may be impacted by the data breach. Regulatory authorities (depending on the jurisdiction and nature of the breach, such as GDPR for EU residents, or similar data protection laws elsewhere) to ensure compliance with breach notification laws. Prompt notification helps mitigate the impact, provide guidance to affected parties, and ensure that any required legal or regulatory actions are taken

   Source: Adapted from community discussion — Fourgehan

   Next question

2. Question 362 · 607 in bank

   Which of the following would be the best solution to deploy a low-cost standby site that includes hardware and internet access?

   • ARecovery site
   • BCold site
   • CHot site
   • DWarm site

   Show answer

   Answer: D

   Explanation

   A warm site is a cost-effective solution that provides a partially configured IT environment. It includes hardware, software, and network connections, but it may require some additional setup and configuration to become fully operational. This makes it ideal for organizations that need a quick recovery time but don't require immediate failover capabilities.

   Source: Adapted from community discussion — jacobtriestech

   Next question

3. Question 363 · 607 in bank

   An organization needs to determine how many employees are accessing the building each day in order to configure the proper access controls. Which of the following control types best meets this requirement?

   • ADetective
   • BPreventive
   • CCorrective
   • DDirective

   Show answer

   Answer: A

   Explanation

   Detective controls are designed to identify and detect unwanted events or behaviors. In this case, the organization needs to determine how many employees are accessing the building each day, which can be done using detective controls like access logs, badge scanners, or security cameras that monitor and record employee access.

   Source: Adapted from community discussion — chasingsummer

   Next question

4. Question 364 · 607 in bank

   A technician needs to apply a high-priority patch to a production system. Which of the following steps should be taken first?

   • AAir gap the system.
   • BMove the system to a different network segment.
   • CCreate a change control request.
   • DApply the patch to the system.

   Show answer

   Answer: C

   Explanation

   Change Control is the process that management uses to identify, document and authorize changes to an IT environment. It minimizes the likelihood of disruptions, unauthorized alterations and errors. The change control procedures should be designed with the size and complexity of the environment in mind.

   Source: Adapted from community discussion — Abcd123321

   Next question

5. Question 365 · 607 in bank

   Select 2

   An organization wants to implement a secure solution for remote users. The users handle sensitive PHI on a regular basis and need to access an internally developed corporate application. Which of the following best meet the organization's security requirements? (Choose two.)

   • ALocal administrative password
   • BPerimeter network
   • CJump server
   • DWAF
   • EMFA
   • FVPN

   Show answer

   Answer: EF

   Explanation

   The correct answers are: E. MFA (Multi-Factor Authentication) F. VPN (Virtual Private Network) Explanation: For remote users handling sensitive PHI (Protected Health Information), ensuring data confidentiality and secure access to internal resources is crucial. E. MFA (Multi-Factor Authentication): MFA ensures that users are authenticated using multiple factors (e.g., something they know, have, or are), significantly increasing access security. F. VPN (Virtual Private Network): A VPN provides a secure, encrypted connection between remote users and the corporate network, protecting sensitive data from interception during transmission. Other Options: B. Perimeter network: A perimeter network (DMZ) isolates public-facing servers, but it is not a solution for secure remote access for users. C. Jump server: A jump server can be used for secure administrative tasks but does not directly address remote user access to a corporate application.

   Source: Adapted from community discussion — Anyio

   Next question

6. Question 366 · 607 in bank

   A security officer is implementing a security awareness program and is placing security-themed posters around the building and is assigning online user training. Which of the following would the security officer most likely implement?

   • APassword policy
   • BAccess badges
   • CPhishing campaign
   • DRisk assessment

   Show answer

   Answer: C

   Next question

7. Question 367 · 607 in bank

   A security consultant is working with a client that wants to physically isolate its secure systems. Which of the following best describes this architecture?

   • ASDN
   • BAir gapped
   • CContainerized
   • DHighly available

   Show answer

   Answer: B

   Explanation

   An air gap is a way to provide a physical separation between devices or between networks. This might be a common way to prevent access between a secure network and an insecure network. Or you may want to have an air gap between different customer’s networks.

   Source: Adapted from community discussion — s_plus

   Next question

8. Question 368 · 607 in bank

   A company is in the process of migrating to cloud-based services. The company’s IT department has limited resources for migration and ongoing support. Which of the following best meets the company’s needs?

   • AIPS
   • BWAF
   • CSASE
   • DIAM

   Show answer

   Answer: C

   Explanation

   C. SASE (Secure Access Service Edge) Explanation: SASE (Secure Access Service Edge) is a cloud-native security architecture that combines wide-area networking (WAN) capabilities with comprehensive network security features like secure web gateways, firewall-as-a-service, zero-trust network access, and more.

   Source: Adapted from community discussion — Segunmx

   Next question

9. Question 369 · 607 in bank

   An employee clicks a malicious link in an email that appears to be from the company's Chief Executive Officer. The employee's computer is infected with ransomware that encrypts the company's files. Which of the following is the most effective way for the company to prevent similar incidents in the future?

   • ASecurity awareness training
   • BDatabase encryption
   • CSegmentation
   • DReporting suspicious emails

   Show answer

   Answer: A

   Next question

10. Question 370 · 607 in bank

    Which of the following types of vulnerabilities is primarily caused by improper use and management of cryptographic certificates?

    • AMisconfiguration
    • BResource reuse
    • CInsecure key storage
    • DWeak cipher suites

    Show answer

    Answer: C

    Explanation

    C. Insecure key storage is the best answer because it specifically refers to the improper handling or storing of cryptographic keys (e.g., private keys), which can lead to serious security vulnerabilities if they are exposed or not properly protected. This is directly related to the management of cryptographic certificates. On the other hand, A. Misconfiguration is a broader term that refers to general incorrect settings or configurations in systems, and while it can involve certificates, it doesn't specifically address the key storage issue, which is the core concern in this question.

    Source: Adapted from community discussion — geitenwollenSOC

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 361. 607 questions available.