SY0-701 practice questions 561–570

1. Question 561 · 607 in bank

   A security analyst scans a company's public network and discovers a host is running a remote desktop that can be used to access the production network. Which of the following changes should the security analyst recommend?

   • AChanging the remote desktop port to a non-standard number
   • BSetting up a VPN and placing the jump server inside the firewall
   • CUsing a proxy for web connections from the remote desktop server
   • DConnecting the remote server to the domain and increasing the password length

   Show answer

   Answer: B

   Explanation

   Setting up a VPN and placing the jump server inside the firewall is the most secure approach because it reduces the attack surface and ensures that only authorized users can access the remote desktop service. This solution addresses the primary security concern of protecting sensitive production systems by ensuring that only verified users can gain access, thus minimizing the attack surface and potential vulnerabilities.

   Source: Adapted from community discussion — dbrowndiver

   Next question

2. Question 562 · 607 in bank

   An enterprise has been experiencing attacks focused on exploiting vulnerabilities in older browser versions with well-known exploits. Which of the following security solutions should be configured to best provide the ability to monitor and block these known signature-based attacks?

   • AACL
   • BDLP
   • CIDS
   • DIPS

   Show answer

   Answer: D

   Explanation

   An IPS is designed to continuously monitor network traffic and take immediate action to block potential threats based on known signatures. It’s an active security measure that not only detects but also prevents the exploitation of known vulnerabilities. A. ACL (Access Control List): ACLs are used to control the flow of traffic based on rules, but they are not dynamic enough to monitor or block signature-based attacks effectively. B. DLP (Data Loss Prevention): DLP systems are focused on preventing data breaches by detecting and blocking potential data leaks/exfiltration, not on monitoring or blocking attacks per se. C. IDS (Intrusion Detection System): While an IDS can detect known signature-based attacks, it does not block them; it only alerts the system administrators of the potential threat. D. IPS (Intrusion Prevention System): As mentioned, an IPS actively monitors and blocks attacks, making it the most suitable option for the scenario described.

   Source: Adapted from community discussion — AutoroTink

   Next question

3. Question 563 · 607 in bank

   Security controls in a data center are being reviewed to ensure data is properly protected and that human life considerations are included. Which of the following best describes how the controls should be set up?

   • ARemote access points should fail closed.
   • BLogging controls should fail open.
   • CSafety controls should fail open.
   • DLogical security controls should fail closed.

   Show answer

   Answer: C

   Explanation

   Safety controls failing open is a critical design principle that ensures human life is prioritized in the event of a failure. This principle applies to situations where failing open provides an immediate safety benefit, such as allowing exit doors to unlock automatically during a fire.

   Source: Adapted from community discussion — dbrowndiver

   Next question

4. Question 564 · 607 in bank

   Which of the following would be best suited for constantly changing environments?

   • ARTOS
   • BContainers
   • CEmbedded systems
   • DSCADA

   Show answer

   Answer: B

   Explanation

   In this scenario, Choice B is the correct answer. Containers is the correct answer because they are specifically designed to provide flexibility and scalability in constantly changing environments. Containers allow for rapid deployment and scaling, making them ideal for dynamic applications that need to adapt to frequent changes and updates. Futhermore containers are particularly well-suited for microservices architectures, continuous integration/continuous deployment (CI/CD) pipelines, and environments that need to rapidly adapt to change. Technologies like Docker and Kubernetes have made containers popular for modern application deployment.

   Source: Adapted from community discussion — dbrowndiver

   Next question

5. Question 565 · 607 in bank

   Which of the following incident response activities ensures evidence is properly handled?

   • AE-discovery
   • BChain of custody
   • CLegal hold
   • DPreservation

   Show answer

   Answer: B

   Explanation

   B. Chain of custody Chain of custody is the process that ensures evidence is properly handled and documented throughout its lifecycle. It tracks the evidence from the time it is collected, through its transportation, storage, and presentation in court, ensuring that it has not been altered or tampered with. Maintaining a proper chain of custody is critical for ensuring the integrity and admissibility of the evidence in legal proceedings. Therefore, the correct answer is: B. Chain of custody

   Source: Adapted from community discussion — Etc_Shadow28000

   Next question

6. Question 566 · 607 in bank

   An accounting clerk sent money to an attacker's bank account after receiving fraudulent instructions to use a new account. Which of the following would most likely prevent this activity in the future?

   • AStandardizing security incident reporting
   • BExecuting regular phishing campaigns
   • CImplementing insider threat detection measures
   • DUpdating processes for sending wire transfers

   Show answer

   Answer: D

   Explanation

   D. Updating processes for sending wire transfers Updating the processes for sending wire transfers would most likely prevent this type of activity in the future. This could include implementing additional verification steps, such as requiring multiple levels of approval, verifying new payment instructions through a separate communication channel, or implementing a callback procedure to confirm the authenticity of the instructions. Therefore, the correct answer is: D. Updating processes for sending wire transfers

   Source: Adapted from community discussion — Etc_Shadow28000

   Next question

7. Question 567 · 607 in bank

   A systems administrator is creating a script that would save time and prevent human error when performing account creation for a large number of end users. Which of the following would be a good use case for this task?

   • AOff-the-shelf software
   • BOrchestration
   • CBaseline
   • DPolicy enforcement

   Show answer

   Answer: B

   Explanation

   A makes no sense B orchestration and automation are treated as the same in the exam objectives so not sure on this one C establishing a baseline (confused on this one) a baseline for what? if it means a baseline for account creation then yes, if it means a baseline like a policy then no.. D policy enforcement.. idk if you'd need to write a script for that as much as you'd rely on software.. going with B since the first part of the question doesnt mention automation/orchestration even though the question is very poorly worded.

   Source: Adapted from community discussion — e5c1bb5

   Next question

8. Question 568 · 607 in bank

   An administrator notices that several users are logging in from suspicious IP addresses. After speaking with the users, the administrator determines that the employees were not logging in from those IP addresses and resets the affected users’ passwords. Which of the following should the administrator implement to prevent this type of attack from succeeding in the future?

   • AMultifactor authentication
   • BPermissions assignment
   • CAccess management
   • DPassword complexity

   Show answer

   Answer: A

   Explanation

   To prevent unauthorized logins from suspicious IP addresses and enhance the security of user accounts, the administrator should implement: A. Multifactor authentication Multifactor authentication (MFA) requires users to provide two or more verification factors to gain access to a resource such as an application, online account, or VPN. This security measure significantly reduces the likelihood of unauthorized access because even if an attacker has the password, they would still need the additional verification factor(s), such as a code from a mobile device, a fingerprint, or a hardware token.

   Source: Adapted from community discussion — Etc_Shadow28000

   Next question

9. Question 569 · 607 in bank

   A company's marketing department collects, modifies, and stores sensitive customer data. The infrastructure team is responsible for securing the data while in transit and at rest. Which of the following data roles describes the customer?

   • AProcessor
   • BCustodian
   • CSubject
   • DOwner

   Show answer

   Answer: C

   Explanation

   From Professor Messer study notes: Data subject • Any information relating to an identified or identifiable natural person – An individual with personal data • This includes everyone – Name, ID number, address information, genetic makeup, physical characteristics, location data, etc. – You are the data subject • Laws and regulations – Privacy is ideally defined from the perspective of the data subject Data owner – Accountable for specific data, often a senior officer – VP of Sales owns the customer relationship data – Treasurer owns the financial information I'm also going with C.

   Source: Adapted from community discussion — EOtero

   Next question

10. Question 570 · 607 in bank

    Which of the following describes the maximum allowance of accepted risk?

    • ARisk indicator
    • BRisk level
    • CRisk score
    • DRisk threshold

    Show answer

    Answer: D

    Explanation

    This refers to the point or level of risk that an organization is willing to tolerate. Beyond this threshold, actions must be taken to mitigate or reduce the risk to an acceptable level. It defines the boundary between acceptable and unacceptable risk. -The risk threshold is essentially the upper limit of risk that is deemed acceptable by an organization. It serves as a guideline for decision-making regarding risk management and response strategies. -Organizations set risk thresholds based on their risk appetite and tolerance, helping them determine when to take action and allocate resources for risk mitigation.

    Source: Adapted from community discussion — dbrowndiver

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 561. 607 questions available.