SY0-701 practice questions 61–70

1. Question 61 · 607 in bank

   Select 2

   Which of the following factors are the most important to address when formulating a training curriculum plan for a security awareness program? (Choose two.)

   • AChannels by which the organization communicates with customers
   • BThe reporting mechanisms for ethics violations
   • CThreat vectors based on the industry in which the organization operates
   • DSecure software development training for all personnel
   • ECadence and duration of training events
   • FRetraining requirements for individuals who fail phishing simulations

   Show answer

   Answer: CE

   Explanation

   C. Threat vectors based on the industry in which the organization operates E. Cadence and duration of training events When formulating a training curriculum plan for a security awareness program, it is crucial to focus on: - Threat vectors based on the industry in which the organization operates (C): Understanding the specific threats that are most relevant to the industry helps tailor the training content to address the most pressing risks and vulnerabilities that employees might face. - Cadence and duration of training events (E): Establishing an appropriate schedule and duration for training ensures that employees receive regular, ongoing education to keep security top-of-mind and adapt to evolving threats. Therefore, the correct answers are: C. Threat vectors based on the industry in which the organization operates E. Cadence and duration of training events

   Source: Adapted from community discussion — Etc_Shadow28000

   Next question

2. Question 62 · 607 in bank

   A network administrator is working on a project to deploy a load balancer in the company's cloud environment. Which of the following fundamental security requirements does this project fulfil?

   • APrivacy
   • BIntegrity
   • CConfidentiality
   • DAvailability

   Show answer

   Answer: D

   Explanation

   Availability is the correct answer because deploying a load balancer enhances the availability of applications and services by distributing traffic, providing redundancy, and ensuring continued access to resources even in the event of server failures. This project directly supports the availability aspect of the security triad.

   Source: Adapted from community discussion — dbrowndiver

   Next question

3. Question 63 · 607 in bank

   A systems administrator is changing the password policy within an enterprise environment and wants this update implemented on all systems as quickly as possible. Which of the following operating system security measures will the administrator most likely use?

   • ADeploying PowerShell scripts
   • BPushing GPO update
   • CEnabling PAP
   • DUpdating EDR profiles

   Show answer

   Answer: B

   Explanation

   Group Policy Objects (GPOs) provides an infrastructure for centralized configuration management of the Windows operating system and applications that run on the operating system. GPOs are a collection of settings that define what a system will look like and how it will behave for a defined group of computers or users.

   Source: Adapted from community discussion — adderallpm

   Next question

4. Question 64 · 607 in bank

   Which of the following would be most useful in determining whether the long-term cost to transfer a risk is less than the impact of the risk?

   • AARO
   • BRTO
   • CRPO
   • DALE
   • ESLE

   Show answer

   Answer: D

   Explanation

   ALE (Annual Loss Expectancy) represents the expected monetary loss for an asset due to a risk over a year. It is calculated by multiplying the Annual Rate of Occurrence (ARO) by the Single Loss Expectancy (SLE). This provides a clear picture of the financial impact of a risk over time.

   Source: Adapted from community discussion — SHADTECH123

   Next question

5. Question 65 · 607 in bank

   In order to strengthen a password and prevent a hacker from cracking it, a random string of 36 characters was added to the password. Which of the following best describes this technique?

   • AKey stretching
   • BTokenization
   • CData masking
   • DSalting

   Show answer

   Answer: D

   Explanation

   Salting is the correct answer because it involves adding a random string to a password before hashing to strengthen security. This technique effectively prevents precomputed hash attacks, making it a critical component of modern password protection strategies.

   Source: Adapted from community discussion — dbrowndiver

   Next question

6. Question 66 · 607 in bank

   A technician is deploying a new security camera. Which of the following should the technician do?

   • AConfigure the correct VLAN.
   • BPerform a vulnerability scan.
   • CDisable unnecessary ports.
   • DConduct a site survey.

   Show answer

   Answer: D

   Explanation

   A site survey is essential to determine the best locations for camera installation, ensuring optimal coverage and signal strength. It involves assessing the physical environment to identify any potential issues that could affect the camera’s performance, such as obstructions, lighting conditions, and power source availability. A. Configure the correct VLAN: While important for network segmentation, it’s not the first step in physical deployment. B. Perform a vulnerability scan: This is more relevant for assessing the security of existing systems, not the initial placement of a camera. C. Disable unnecessary ports: This is a security measure for network devices, but it doesn’t address the physical aspects of camera deployment.

   Source: Adapted from community discussion — AutoroTink

   Next question

7. Question 67 · 607 in bank

   A company is experiencing a web services outage on the public network. The services are up and available but inaccessible. The network logs show a sudden increase in network traffic that is causing the outage. Which of the following attacks is the organization experiencing?

   • AARP poisoning
   • BBrute force
   • CBuffer overflow
   • DDDoS

   Show answer

   Answer: D

   Explanation

   DDoS is the correct answer because the sudden increase in network traffic leading to a web services outage is characteristic of a Distributed Denial of Service attack. This type of attack overwhelms the target's resources, making services inaccessible, even though they are still operational. DDoS attacks specifically aim to disrupt access by flooding the target with excessive traffic, matching the symptoms described in the scenario.

   Source: Adapted from community discussion — dbrowndiver

   Next question

8. Question 68 · 607 in bank

   Which of the following vulnerabilities is associated with installing software outside of a manufacturer’s approved software repository?

   • AJailbreaking
   • BMemory injection
   • CResource reuse
   • DSide loading

   Show answer

   Answer: D

   Explanation

   Jailbreaking is privilege escalating a device, & memory injection is executing any form of code into the memory section of a computer typically with malicious intent.

   Source: Adapted from community discussion — Mehsotopes

   Next question

9. Question 69 · 607 in bank

   Which of the following threat actors is the most likely to be motivated by profit?

   • AHacktivist
   • BInsider threat
   • COrganized crime
   • DShadow IT

   Show answer

   Answer: C

   Explanation

   Profit is the main driver for organized crime, making them the most likely threat actor motivated by financial incentives. They are structured to exploit opportunities that result in monetary rewards. Therefore, Organized crime is the correct answer because organized crime groups are primarily driven by the pursuit of financial gain. They engage in cyber activities designed to steal, extort, or otherwise generate profit, making them the most profit-motivated threat actor in this context.

   Source: Adapted from community discussion — dbrowndiver

   Next question

10. Question 70 · 607 in bank

    Select 2

    An organization experiences a cybersecurity incident involving a command-and-control server. Which of the following logs should be analyzed to identify the impacted host? (Choose two.)

    • AApplication
    • BAuthentication
    • CDHCP
    • DNetwork
    • EFirewall
    • FDatabase

    Show answer

    Answer: DE

    Explanation

    To identify the impacted host in a cybersecurity incident involving a command-and-control server, the most relevant logs to analyze would be: C. DHCP and E. Firewall : Firewall logs capture network traffic and can show which internal hosts communicated with external IP addresses, including the command-and-control server. By analyzing firewall logs, you can identify the internal IP addresses that initiated or received communication with the command-and-control server, helping to pinpoint the impacted host. If you have already identified suspicious network traffic (e.g., connections to a C2 server) in firewall or network logs, the next step is often to determine which device was responsible for that traffic. DHCP logs are necessary for this step because they map IP addresses to specific devices. Without this mapping, knowing the IP address alone is insufficient, especially in environments where IP addresses are dynamically assigned. By consulting DHCP logs, you can quickly identify the physical or virtual device behind the suspicious activity.

    Source: Adapted from community discussion — Bimbo_12

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 61. 607 questions available.