SY0-701 practice questions 401–410

1. Question 401 · 607 in bank

   A company discovers suspicious transactions that were entered into the company's database and attached to a user account that was created as a trap for malicious activity. Which of the following is the user account an example of?

   • AHoneytoken
   • BHoneynet
   • CHoneypot
   • DHoneyfile

   Show answer

   Answer: A

   Explanation

   A honeytoken is a fake or misleading piece of data that is used to detect unauthorized access or malicious activity. Honeytokens are a cybersecurity concept that can be used to track data and identify attackers:

   Source: Adapted from community discussion — jennyka76

   Next question

2. Question 402 · 607 in bank

   A network engineer is increasing the overall security of network devices and needs to harden the devices. Which of the following will best accomplish this task?

   • AConfiguring centralized logging
   • BGenerating local administrator accounts
   • CReplacing Telnet with SSH
   • DEnabling HTTP administration

   Show answer

   Answer: C

   Next question

3. Question 403 · 607 in bank

   A company's accounting department receives an urgent payment message from the company's bank domain with instructions to wire transfer funds. The sender requests that the transfer be completed as soon as possible. Which of the following attacks is described?

   • ABusiness email compromise
   • BVishing
   • CSpear phishing
   • DImpersonation

   Show answer

   Answer: A

   Explanation

   The correct answer is: A. Business Email Compromise (BEC) Explanation: Business Email Compromise (BEC) is a targeted attack where attackers impersonate a trusted entity (e.g., a bank or executive) to trick victims into performing financial transactions or revealing sensitive information. In this scenario, the attacker sent an urgent payment request appearing to come from the bank, which is a hallmark of BEC. Other Options: B. Vishing: Involves voice-based phishing attacks over the phone, which is not relevant here as the communication was via email. C. Spear Phishing: Although this attack is also targeted, spear phishing typically involves obtaining sensitive information like credentials, not direct wire transfer requests. D. Impersonation: While impersonation is a tactic used in BEC, it’s not the specific attack type described in this scenario.

   Source: Adapted from community discussion — Anyio

   Next question

4. Question 404 · 607 in bank

   A company filed a complaint with its IT service provider after the company discovered the service provider's external audit team had access to some of the company's confidential information. Which of the following is the most likely reason the company filed the complaint?

   • AThe MOU had basic clauses from a template.
   • BA SOW had not been agreed to by the client.
   • CA WO had not been mutually approved.
   • DA required NDA had not been signed.

   Show answer

   Answer: D

   Explanation

   The correct answer is: D. A required NDA had not been signed. Explanation: Non-Disclosure Agreements (NDAs) are legal documents that ensure confidentiality by preventing third parties, such as external auditors, from sharing or accessing sensitive information without proper authorization. Other Options: A. The MOU had basic clauses from a template: A Memorandum of Understanding (MOU) is a non-binding agreement that outlines general terms. While it might lack detail, it wouldn’t directly address confidentiality. B. A SOW had not been agreed to by the client: A Statement of Work (SOW) defines the specific tasks and deliverables but doesn’t focus on confidentiality. C. A WO had not been mutually approved: A Work Order (WO) details the work to be done and associated costs. Its absence wouldn’t necessarily lead to unauthorized access to confidential data.

   Source: Adapted from community discussion — Anyio

   Next question

5. Question 405 · 607 in bank

   Which of the following aspects of the data management life cycle is most directly impacted by local and international regulations?

   • ADestruction
   • BCertification
   • CRetention
   • DSanitization

   Show answer

   Answer: C

   Explanation

   The aspect of the data management life cycle most directly impacted by local and international regulations is "Data Retention and Deletion".

   Source: Adapted from community discussion — jennyka76

   Next question

6. Question 406 · 607 in bank

   An analyst is reviewing job postings to ensure sensitive company information is not being shared with the general public. Which of the following is the analyst most likely looking for?

   • AOffice addresses
   • BSoftware versions
   • CList of board members
   • DGovernment identification numbers

   Show answer

   Answer: B

   Explanation

   When reviewing job postings, an analyst is most likely looking for information that could inadvertently expose the company's vulnerabilities or security posture. Posting software versions could reveal outdated or vulnerable systems, which attackers might exploit.

   Source: Adapted from community discussion — 1f2b013

   Next question

7. Question 407 · 607 in bank

   An engineer has ensured that the switches are using the latest OS, the servers have the latest patches, and the endpoints' definitions are up to date. Which of the following will these actions most effectively prevent?

   • AZero-day attacks
   • BInsider threats
   • CEnd-of-life support
   • DKnown exploits

   Show answer

   Answer: D

   Explanation

   The correct answer is: D. Known exploits Explanation: By ensuring that switches are running the latest OS, servers have the latest patches, and endpoints are using up-to-date definitions, the engineer is effectively reducing the risk of known exploits. Known exploits are vulnerabilities that have been identified and for which patches or updates are available. By keeping systems updated, the engineer is preventing attackers from exploiting these known vulnerabilities.

   Source: Adapted from community discussion — jbmac

   Next question

8. Question 408 · 607 in bank

   A company’s legal department drafted sensitive documents in a SaaS application and wants to ensure the documents cannot be accessed by individuals in high-risk countries. Which of the following is the most effective way to limit this access?

   • AData masking
   • BEncryption
   • CGeolocation policy
   • DData sovereignty regulation

   Show answer

   Answer: C

   Explanation

   What is Geolocation Protection? Organizations may implement access control policies that restrict or allow access to certain resources based on the geographic location of users or devices. For example, they might limit access to sensitive systems only to users connecting from specific geographic regions or countries.

   Source: Adapted from community discussion — Abcd123321

   Next question

9. Question 409 · 607 in bank

   Which of the following is most likely a security concern when installing and using low-cost IoT devices in infrastructure environments?

   • ACountry of origin
   • BDevice responsiveness
   • CEase of deployment
   • DStorage of data

   Show answer

   Answer: D

   Explanation

   From CompTIA guide: The sheer volume of data generated by IoT devices can make securing and protecting sensitive information difficult. As more devices are connected to the Internet, there is an increasing risk of data breaches and cyberattacks, which can result in the theft of personal and sensitive data. A- does not make sense. B&C are not security concerns but rather performance concerns.

   Source: Adapted from community discussion — iliecomptia

   Next question

10. Question 410 · 607 in bank

    A company captures log-in details and reviews them each week to identify conditions such as excessive log-in attempts and frequent lockouts. Which of the following should a security analyst recommend to improve security compliance monitoring?

    • AIncluding the date and person who reviewed the information in a report
    • BAdding automated alerting when anomalies occur
    • CRequiring a statement each week that no exceptions were noted
    • DMasking the username in a report to protect privacy

    Show answer

    Answer: B

    Explanation

    Automated alerting is a significant improvement. Instead of relying on weekly manual reviews, automated systems can detect and alert the team immediately when unusual activity (like excessive log-in attempts or lockouts) occurs. This speeds up the response and strengthens compliance.

    Source: Adapted from community discussion — mohammad88

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 401. 607 questions available.