SY0-701 practice questions 441–450

1. Question 441 · 607 in bank

   A data administrator is configuring authentication for a SaaS application and would like to reduce the number of credentials employees need to maintain. The company prefers to use domain credentials to access new SaaS applications. Which of the following methods would allow this functionality?

   • ASSO
   • BLEAP
   • CMFA
   • DPEAP

   Show answer

   Answer: A

   Explanation

   A. SSO (Single Sign-On) Single Sign-On (SSO) enables users to authenticate once with their domain credentials and then access multiple applications without needing to re-enter their credentials each time. This aligns with the company's preference to use domain credentials and reduces the burden of managing multiple sets of credentials for different applications.

   Source: Adapted from community discussion — lauren2wright

   Next question

2. Question 442 · 607 in bank

   An organization is building a new backup data center with cost-benefit as the primary requirement and RTO and RPO values around two days. Which of the following types of sites is the best for this scenario?

   • AReal-time recovery
   • BHot
   • CCold
   • DWarm

   Show answer

   Answer: D

   Explanation

   Warm Sites ● Not fully equipped, but fundamentals in place ● Can be up and running within a few days ● Cheaper than hot sites but with a slight delay Cold Sites ● Fewer facilities than warm sites ● May be just an empty building, ready in 1-2 months ● Cost-effective but adds more recovery time

   Source: Adapted from community discussion — Abcd123321

   Next question

3. Question 443 · 607 in bank

   Select 2

   A security administrator is addressing an issue with a legacy system that communicates data using an unencrypted protocol to transfer sensitive data to a third party. No software updates that use an encrypted protocol are available, so a compensating control is needed. Which of the following are the most appropriate for the administrator to suggest? (Choose two.)

   • ATokenization
   • BCryptographic downgrade
   • CSSH tunneling
   • DSegmentation
   • EPatch installation
   • FData masking

   Show answer

   Answer: CD

   Explanation

   Explanation: C. SSH tunneling: SSH tunneling can securely encrypt and encapsulate unencrypted traffic sent from the legacy system. It allows the unencrypted protocol to communicate over a secure channel, ensuring sensitive data is protected in transit. This compensating control effectively mitigates the risk of sending data in cleartext. D. Segmentation: Network segmentation isolates the legacy system within a secure zone, limiting its exposure to other parts of the network. By restricting communication pathways, segmentation reduces the attack surface and protects sensitive data from unauthorized access.

   Source: Adapted from community discussion — jennyka76

   Next question

4. Question 444 · 607 in bank

   Which of the following steps in the risk management process involves establishing the scope and potential risks involved with a project?

   • ARisk assessment
   • BRisk identification
   • CRisk treatment
   • DRisk monitoring and review

   Show answer

   Answer: B

   Explanation

   While both are part of risk management, "risk identification" is the initial step of recognizing and listing potential risks, while "risk assessment" involves analyzing and evaluating those identified risks to determine their likelihood and potential impact, essentially prioritizing them for mitigation strategies; in simpler terms, risk identification is just listing possible threats, while risk assessment is figuring out how serious each threat could be

   Source: Adapted from community discussion — AriGarcia

   Next question

5. Question 445 · 607 in bank

   A company's website is www.company.com. Attackers purchased the domain www.c0mpany.com. Which of the following types of attacks describes this example?

   • ATyposquatting
   • BBrand impersonation
   • COn-path
   • DWatering-hole

   Show answer

   Answer: A

   Explanation

   Typosquatting is a cybercrime that involves registering a domain with a common misspelling of a popular website or brand: How it works Cyber criminals register a domain with a typo in the name, such as "tailspintoy.com" instead of "tailspintoys.com". When a user mistypes the URL, they are redirected to the typosquatter's site

   Source: Adapted from community discussion — jennyka76

   Next question

6. Question 446 · 607 in bank

   Which of the following allows a systems administrator to tune permissions for a file?

   • APatching
   • BAccess control list
   • CConfiguration enforcement
   • DLeast privilege

   Show answer

   Answer: B

   Next question

7. Question 447 · 607 in bank

   Which of the following would be the greatest concern for a company that is aware of the consequences of non-compliance with government regulations?

   • ARight to be forgotten
   • BSanctions
   • CExternal compliance reporting
   • DAttestation

   Show answer

   Answer: B

   Explanation

   B. Sanctions Reasoning: Sanctions can result in severe financial penalties, legal actions, operational restrictions, or even a ban on conducting business in certain regions. Non-compliance with government regulations (e.g., GDPR, HIPAA, SOX) often leads to heavy fines, lawsuits, and reputational damage. In extreme cases, regulatory sanctions can result in license revocations, asset freezes, or criminal charges against executives. Why Not the Others? A. Right to be Forgotten – This is an aspect of privacy laws like GDPR, but failure to comply might result in fines, whereas sanctions can be more devastating. C. External Compliance Reporting – While important, it is more of a procedural obligation than a direct punitive risk. D. Attestation – This refers to providing formal verification of compliance, but failing to attest isn’t as critical as actual sanctions imposed for violations.

   Source: Adapted from community discussion — test_arrow

   Next question

8. Question 448 · 607 in bank

   Which of the following security concepts is accomplished when granting access after an individual has logged into a computer network?

   • AAuthorization
   • BIdentification
   • CNon-repudiation
   • DAuthentication

   Show answer

   Answer: A

   Explanation

   Answer: A. Authorization Authorization is the security concept accomplished when granting access to resources or actions after an individual has logged into a computer network. It determines what the user is allowed to do based on their permissions and privileges. Why the other options are not correct: B. Identification Identification is the process of claiming an identity, such as providing a username. It occurs before authentication and does not involve granting access to resources. C. Non-repudiation Non-repudiation ensures that a user cannot deny having performed an action, typically through mechanisms like digital signatures or logs. It is unrelated to granting access after login. D. Authentication Authentication is the process of verifying the identity of a user, such as through passwords, biometrics, or tokens. It occurs before authorization and does not involve granting access to resources.

   Source: Adapted from community discussion — Anyio

   Next question

9. Question 449 · 607 in bank

   A growing organization, which hosts an externally accessible application, adds multiple virtual servers to improve application performance and decrease the resource usage on individual servers. Which of the following solutions is the organization most likely to employ to further increase performance and availability?

   • ALoad balancer
   • BJump server
   • CProxy server
   • DSD-WAN

   Show answer

   Answer: A

   Next question

10. Question 450 · 607 in bank

    A systems administrator is concerned users are accessing emails through a duplicate site that is not run by the company. Which of the following is used in this scenario?

    • AImpersonation
    • BReplication
    • CPhishing
    • DSmishing

    Show answer

    Answer: A

    Explanation

    The correct answer is: A. Impersonation Explanation: Impersonation refers to an attack where a malicious actor pretends to be someone else, typically by mimicking a legitimate website, email address, or service. In this scenario, the users are accessing emails through a duplicate site that is not controlled by the company, which indicates that the attacker is impersonating the company’s legitimate email platform to deceive users.

    Source: Adapted from community discussion — jbmac

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 441. 607 questions available.