SY0-701 practice questions 31–40

1. Question 31 · 607 in bank

   After an audit, an administrator discovers all users have access to confidential data on a file server. Which of the following should the administrator use to restrict access to the data quickly?

   • AGroup Policy
   • BContent filtering
   • CData loss prevention
   • DAccess control lists

   Show answer

   Answer: D

   Explanation

   Access control lists (ACLs) should be used to restrict access to the data quickly. ACLs allow the administrator to specify which users or groups have permission to access certain files or directories on the file server, providing a straightforward and immediate way to enforce access controls and protect confidential data.

   Source: Adapted from community discussion — SHADTECH123

   Next question

2. Question 32 · 607 in bank

   A client demands at least 99.99% uptime from a service provider's hosted security services. Which of the following documents includes the information the service provider should return to the client?

   • AMOA
   • BSOW
   • CMOU
   • DSLA

   Show answer

   Answer: D

   Explanation

   At first I choose A. MOA but this is where you have to take your time and really read the question. 99.99% is similar to metrics. SLA is an agreement that involves metrics.

   Source: Adapted from community discussion — KosherKin

   Next question

3. Question 33 · 607 in bank

   A company is discarding a classified storage array and hires an outside vendor to complete the disposal. Which of the following should the company request from the vendor?

   • ACertification
   • BInventory list
   • CClassification
   • DProof of ownership

   Show answer

   Answer: A

   Explanation

   For a classified storage array, certification is critical to ensure that sensitive data has been irretrievably destroyed, preventing unauthorized access or data breaches. The certification serves as evidence that the company complied with legal and regulatory requirements regarding the handling and disposal of classified materials. This can be important for audits or investigations. Certification provides assurance and documentation that the storage array was disposed of securely, mitigating risks associated with the handling of classified information.

   Source: Adapted from community discussion — dbrowndiver

   Next question

4. Question 34 · 607 in bank

   A company is planning a disaster recovery site and needs to ensure that a single natural disaster would not result in the complete loss of regulated backup data. Which of the following should the company consider?

   • AGeographic dispersion
   • BPlatform diversity
   • CHot site
   • DLoad balancing

   Show answer

   Answer: A

   Explanation

   Answer: A Geographic dispersion is the practice of having backup data stored in different locations that are far enough apart to minimize the risk of a single natural disaster affecting both sites. This ensures that the company can recover its regulated data in case of a disaster at the primary site. Platform diversity, hot site, and load balancing are not directly related to the protection of backup data from natural disasters.Reference:CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, page 449;Disaster Recovery Planning: Geographic Diversity

   Source: Adapted from community discussion — geocis

   Next question

5. Question 35 · 607 in bank

   Which of the following provides the details about the terms of a test with a third-party penetration tester?

   • ARules of engagement
   • BSupply chain analysis
   • CRight to audit clause
   • DDue diligence

   Show answer

   Answer: A

   Explanation

   The correct option that provides details about the terms of a test with a third-party penetration tester is: A. Rules of engagement Rules of engagement (RoE) outline the scope, objectives, limitations, and boundaries of the penetration test. This document ensures both parties understand what is allowed and expected during the testing process, including which systems can be tested, the methods to be used, the timing of the tests, and how the results will be reported and handled. - B: This involves assessing the risks associated with the supply chain and third-party vendors, not specifically the terms of a penetration test. - C: This clause in a contract allows one party to audit the other, typically related to compliance and security practices, but does not detail the terms of a penetration test. - D. This is the process of investigating and evaluating a business or person before signing a contract, but it doesn't provide the specific terms of a penetration test.

   Source: Adapted from community discussion — Etc_Shadow28000

   Next question

6. Question 36 · 607 in bank

   A security analyst locates a potentially malicious video file on a server and needs to identify both the creation date and the file's creator. Which of the following actions would most likely give the security analyst the information required?

   • AObtain the file's SHA-256 hash.
   • BUse hexdump on the file's contents.
   • CCheck endpoint logs.
   • DQuery the file's metadata.

   Show answer

   Answer: D

   Explanation

   In this scenario, choice "D" is correct. Query the file's metadata is the correct answer because metadata provides direct information about the file's creation date and possibly the creator. This method is the most efficient and effective way to gather the required details about a potentially malicious video file. By querying the file's metadata, the security analyst can access information about when the file was created and potentially who created it, assuming the creator's details were embedded or tagged during the file's creation.

   Source: Adapted from community discussion — dbrowndiver

   Next question

7. Question 37 · 607 in bank

   Which of the following teams combines both offensive and defensive testing techniques to protect an organization's critical systems?

   • ARed
   • BBlue
   • CPurple
   • DYellow

   Show answer

   Answer: C

   Explanation

   Red = offensive Blue = defensive Yellow = builders Purple = mix of offensive and defensive. Also the color you get when you mix red and blue.

   Source: Adapted from community discussion — 123456789User

   Next question

8. Question 38 · 607 in bank

   A small business uses kiosks on the sales floor to display product information for customers. A security team discovers the kiosks use end-of-life operating systems. Which of the following is the security team most likely to document as a security implication of the current architecture?

   • APatch availability
   • BProduct software compatibility
   • CEase of recovery
   • DCost of replacement

   Show answer

   Answer: A

   Explanation

   The most likely security implication that the security team would document is patch availability. End-of-life operating systems no longer receive security updates or patches from the vendor, which leaves them vulnerable to newly discovered exploits and vulnerabilities. This lack of ongoing support means that any security flaws found in the operating systems will not be addressed, increasing the risk of compromise.

   Source: Adapted from community discussion — SHADTECH123

   Next question

9. Question 39 · 607 in bank

   Which of the following would help ensure a security analyst is able to accurately measure the overall risk to an organization when a new vulnerability is disclosed?

   • AA full inventory of all hardware and software
   • BDocumentation of system classifications
   • CA list of system owners and their departments
   • DThird-party risk assessment documentation

   Show answer

   Answer: A

   Explanation

   Conducting inventory is part of risk management, so knowing what is in your environment will be very helpful to track and patch

   Source: Adapted from community discussion — MAKOhunter33333333

   Next question

10. Question 40 · 607 in bank

    Which of the following best practices gives administrators a set period to perform changes to an operational system to ensure availability and minimize business impacts?

    • AImpact analysis
    • BScheduled downtime
    • CBackout plan
    • DChange management boards

    Show answer

    Answer: B

    Explanation

    In this scenario, the best choice is "B". Scheduled downtime is the correct answer because it specifically involves setting a designated time for changes to occur, balancing the need for system maintenance with minimizing business impacts. Scheduled downtime ensures that updates and changes are performed in a controlled and predictable manner, reducing the risk of unplanned disruptions.

    Source: Adapted from community discussion — dbrowndiver

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 31. 607 questions available.