SY0-701 practice questions 571–580

1. Question 571 · 607 in bank

   A security analyst receives alerts about an internal system sending a large amount of unusual DNS queries to systems on the internet over short periods of time during non-business hours. Which of the following is most likely occurring?

   • AA worm is propagating across the network.
   • BData is being exfiltrated.
   • CA logic bomb is deleting data.
   • DRansomware is encrypting files.

   Show answer

   Answer: B

   Explanation

   The scenario describes an internal system sending unusual and large amounts of DNS queries to external systems, especially during non-business hours. This behavior is indicative of data exfiltration, where an attacker tries to move data out of the network covertly.

   Source: Adapted from community discussion — dbrowndiver

   Next question

2. Question 572 · 607 in bank

   A technician is opening ports on a firewall for a new system being deployed and supported by a SaaS provider. Which of the following is a risk in the new system?

   • ADefault credentials
   • BNon-segmented network
   • CSupply chain vendor
   • DVulnerable software

   Show answer

   Answer: C

   Explanation

   I am thinking that opening firewall ports is a Layer 3 and Layer 4 issue and not a Layer 7 vulnerability, which is where the Vulnerable software would fit in. I would be more concerned about the Cloud provider which is why I am choosing C: Supply Chain Vendor.

   Source: Adapted from community discussion — hasquaati

   Next question

3. Question 573 · 607 in bank

   A systems administrator is working on a solution with the following requirements: • Provide a secure zone. • Enforce a company-wide access control policy. • Reduce the scope of threats. Which of the following is the systems administrator setting up?

   • AZero Trust
   • BAAA
   • CNon-repudiation
   • DCIA

   Show answer

   Answer: A

   Explanation

   Zero Trust is a security framework that aligns perfectly with the given requirements. It emphasizes strict access control, minimizing trust, and ensuring that all access requests are verified, making it an ideal choice for creating a secure environment.

   Source: Adapted from community discussion — dbrowndiver

   Next question

4. Question 574 · 607 in bank

   Which of the following involves an attempt to take advantage of database misconfigurations?

   • ABuffer overflow
   • BSQL injection
   • CVM escape
   • DMemory injection

   Show answer

   Answer: B

   Explanation

   My problem with this question is that it's not a misconfigured database that allows SQL injection, it's improperly sanitized user input fields in applications/web pages.

   Source: Adapted from community discussion — internslayer

   Next question

5. Question 575 · 607 in bank

   Which of the following is used to validate a certificate when it is presented to a user?

   • AOCSP
   • BCSR
   • CCA
   • DCRC

   Show answer

   Answer: A

   Explanation

   CA issues and manages certificates. OSCP - Online Certificate Status Protocol, a protocol that checks a certificate for validity and if its been revoked (by the CA). The answer is OSCP. CA is like Congress, OSCP is like police. Congress records laws and writes them but don't actually enforce anything. Police enforce them

   Source: Adapted from community discussion — c80f5c5

   Next question

6. Question 576 · 607 in bank

   One of a company's vendors sent an analyst a security bulletin that recommends a BIOS update. Which of the following vulnerability types is being addressed by the patch?

   • AVirtualization
   • BFirmware
   • CApplication
   • DOperating system

   Show answer

   Answer: B

   Explanation

   Firmware is the correct answer because a BIOS update addresses vulnerabilities at the firmware level. The BIOS is an essential component of the system's firmware, and updates to it are intended to fix security vulnerabilities, improve compatibility, and enhance overall system stability.

   Source: Adapted from community discussion — dbrowndiver

   Next question

7. Question 577 · 607 in bank

   Which of the following is used to quantitatively measure the criticality of a vulnerability?

   • ACVE
   • BCVSS
   • CCIA
   • DCERT

   Show answer

   Answer: B

   Explanation

   Answer is B A - Common Vulnerabilities & Exposures is a dictionary of known threats. B - Common Vulnerability Scoring System quantifies how critical a vulnerability is. C - Confidentiality, Integrity & Availability is a security concept. D - Computer Emergency Response Team - the title speaks for itself!

   Source: Adapted from community discussion — leedsbarber

   Next question

8. Question 578 · 607 in bank

   Which of the following actions could a security engineer take to ensure workstations and servers are properly monitored for unauthorized changes and software?

   • AConfigure all systems to log scheduled tasks.
   • BCollect and monitor all traffic exiting the network.
   • CBlock traffic based on known malicious signatures.
   • DInstall endpoint management software on all systems

   Show answer

   Answer: D

   Explanation

   Install endpoint management software on all systems is the correct answer because it offers a comprehensive solution for monitoring and managing workstations and servers. Endpoint management software provides visibility into unauthorized changes, detects unapproved software installations, and enforces security policies, making it the most effective choice for ensuring system integrity and compliance.

   Source: Adapted from community discussion — dbrowndiver

   Next question

9. Question 579 · 607 in bank

   A recent power outage halted operations at a company's only data center. Which of the following solutions would best prevent an event like this one in the future?

   • APlatform diversity
   • BGenerator
   • CSnapshots
   • DLoad balancing

   Show answer

   Answer: B

   Next question

10. Question 580 · 607 in bank

    Which of the following analysis methods allows an organization to measure the exposure factor associated with organizational assets?

    • AHeuristic
    • BQuantitative
    • CUser-driven
    • DTrend-based

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 571. 607 questions available.