SY0-701 practice questions 371–380

1. Question 371 · 607 in bank

   Select 2

   Which of the following best describe the benefits of a microservices architecture when compared to a monolithic architecture? (Choose two.)

   • AEasier debugging of the system
   • BReduced cost of ownership of the system
   • CImproved scalability of the system
   • DIncreased compartmentalization of the system
   • EStronger authentication of the system
   • FReduced complexity of the system

   Show answer

   Answer: CD

   Explanation

   The correct answers are: C. Improved scalability of the system D. Increased compartmentalization of the system Explanation: C. Improved scalability of the system: Microservices allow individual components to be scaled independently, providing better flexibility and resource optimization compared to scaling an entire monolithic system. D. Increased compartmentalization of the system: Microservices are designed to break down a system into smaller, independent services, improving modularity and making it easier to isolate and manage components. Other Options: A. Easier debugging of the system: Debugging can be more complex in microservices due to the distributed nature of the architecture. B. Reduced cost of ownership of the system: While microservices provide flexibility, they can increase operational costs due to the need for managing multiple services and infrastructure.

   Source: Adapted from community discussion — Anyio

   Next question

2. Question 372 · 607 in bank

   A user's workstation becomes unresponsive and displays a ransom note demanding payment to decrypt files. Before the attack, the user opened a resume they received in a message, browsed the company's website, and installed OS updates. Which of the following is the most likely vector of this attack?

   • ASpear-phishing attachment
   • BWatering hole
   • CInfected website
   • DTyposquatting

   Show answer

   Answer: A

   Explanation

   The most likely vector of the ransomware attack is the spear-phishing attachment from the resume the user opened in a message. Spear-phishing is a targeted attack where attackers send malicious attachments or links that appear legitimate. In this case, the resume attachment likely contained malicious code that executed the ransomware when opened. Why Not the Other Options? B. Watering hole: A watering hole attack compromises a trusted website that the target frequently visits. While the user browsed the company's website, there’s no evidence that the website itself was infected or used as the attack vector.

   Source: Adapted from community discussion — saba263

   Next question

3. Question 373 · 607 in bank

   A penetration tester finds an unused Ethernet port during an on-site penetration test. Upon plugging a device into the unused port, the penetration tester notices that the machine is assigned an IP address, allowing the tester to enumerate the local network. Which of the following should an administrator implement in order to prevent this situation from happening in the future?

   • APort security
   • BTransport Layer Security
   • CProxy server
   • DSecurity zones

   Show answer

   Answer: A

   Next question

4. Question 374 · 607 in bank

   Which of the following should be used to ensure an attacker is unable to read the contents of a mobile device's drive if the device is lost?

   • ATPM
   • BECC
   • CFDE
   • DHSM

   Show answer

   Answer: C

   Next question

5. Question 375 · 607 in bank

   Which of the following describes the reason root cause analysis should be conducted as part of incident response?

   • ATo gather IoCs for the investigation
   • BTo discover which systems have been affected
   • CTo eradicate any trace of malware on the network
   • DTo prevent future incidents of the same nature

   Show answer

   Answer: D

   Explanation

   Root cause analysis is fundamental to preventing future incidents by addressing the underlying issues rather than merely treating the symptoms. This approach helps build a more resilient security infrastructure. Also, Conducting RCA contributes to continuous improvement in security practices, policies, and technologies, enhancing the organization's overall security posture.

   Source: Adapted from community discussion — dbrowndiver

   Next question

6. Question 376 · 607 in bank

   A security administrator documented the following records during an assessment of network services:

   

   Two weeks later, the administrator performed a log review and noticed the records were changed as follows:

   

   When consulting the service owner, the administrator validated that the new address was not part of the company network. Which of the following was the company most likely experiencing?

   • ADDoS attack
   • BDNS poisoning
   • CRansomware compromise
   • DSpyware infection

   Show answer

   Answer: B

   Explanation

   B. DNS poisoning DNS poisoning (or DNS spoofing) occurs when an attacker alters DNS records to redirect traffic to malicious sites. In this scenario, the security administrator noticed that the network service records had been changed to an address outside the company network, indicating unauthorized modification of DNS entries. Why the other options are incorrect: • A. DDoS attack – A Distributed Denial-of-Service (DDoS) attack overwhelms a system with traffic but does not typically change DNS records. • C. Ransomware compromise – Ransomware encrypts data and demands payment but does not alter DNS records. • D. Spyware infection – Spyware collects information covertly but does not modify network service records.

   Source: Adapted from community discussion — db4dd89

   Next question

7. Question 377 · 607 in bank

   Which of the following is the primary reason why false negatives on a vulnerability scan should be a concern?

   • AThe system has vulnerabilities that are not being detected.
   • BThe time to remediate vulnerabilities that do not exist is excessive.
   • CVulnerabilities with a lower severity will be prioritized over critical vulnerabilities.
   • DThe system has vulnerabilities, and a patch has not yet been released.

   Show answer

   Answer: A

   Next question

8. Question 378 · 607 in bank

   A company is concerned about theft of client data from decommissioned laptops. Which of the following is the most cost-effective method to decrease this risk?

   • AWiping
   • BRecycling
   • CShredding
   • DDeletion

   Show answer

   Answer: A

   Explanation

   Wiping. You can simply use a wiping tool on your computer. It is more cost affective than using a shredder which would have been my second choice.

   Source: Adapted from community discussion — LouWill

   Next question

9. Question 379 · 607 in bank

   A company that has a large IT operation is looking to better control, standardize, and lower the time required to build new servers. Which of the following architectures will best achieve the company’s objectives?

   • AIoT
   • BIaC
   • CIaaS
   • DICS

   Show answer

   Answer: B

   Explanation

   The correct answer is: B. IaC (Infrastructure as Code) Explanation: IaC (Infrastructure as Code) allows IT teams to automate the provisioning, configuration, and management of servers using code. This ensures consistency, reduces manual errors, and significantly lowers the time needed to build new servers by automating the entire process. It is particularly beneficial for large IT operations, as it enables standardization and version control, making deployments faster and more reliable. Other Options: A. IoT (Internet of Things): IoT refers to interconnected devices and sensors, which is unrelated to server provisioning. C. IaaS (Infrastructure as a Service): While IaaS provides virtualized resources, it does not inherently standardize or automate the provisioning process without IaC tools. D. ICS (Industrial Control System): ICS is used for managing industrial processes and is not relevant to building and managing servers.

   Source: Adapted from community discussion — Anyio

   Next question

10. Question 380 · 607 in bank

    A government official receives a blank envelope containing photos and a note instructing the official to wire a large sum of money by midnight to prevent the photos from being leaked on the internet. Which of the following best describes the threat actor's intent?

    • AOrganized crime
    • BPhilosophical beliefs
    • CEspionage
    • DBlackmail

    Show answer

    Answer: D

    Explanation

    Blackmail: The attacker obtains sensitive data and information about an individual or an organization and threatens to release this info to the public unless certain demands are met.

    Source: Adapted from community discussion — e2ba0ff

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 371. 607 questions available.