SY0-701 Exam Questions

When trying to access an internal website, an employee reports that a prompt displays, stating that the site is insecure. Which of the following certificate types is the site most...

Which of the following would most likely be deployed to obtain and analyze attacker activity and techniques?

Which of the following objectives is best achieved by a tabletop exercise?

The private key for a website was stolen, and a new certificate has been issued. Which of the following needs to be updated next?

Which of the following organizational documents is most often used to establish and communicate expectations associated with integrity and ethical behavior within an organization?

Which of the following explains how to determine the global regulations that data is subject to regardless of the country where the data is stored?

An organization's web servers host an online ordering system. The organization discovers that the servers are vulnerable to a malicious JavaScript injection, which could allow atta...

Which of the following tools is best for logging and monitoring in a cloud environment?

During a SQL update of a database, a temporary field that was created was replaced by an attacker in order to allow access to the system. Which of the following best describes this...

Which of the following elements of digital forensics should a company use if it needs to ensure the integrity of evidence?

A company suffered a critical incident where 30GB of data was exfiltrated from the corporate network. Which of the following actions is the most efficient way to identify where the...

A security analyst wants to better understand the behavior of users and devices in order to gain visibility into potential malicious activities. The analyst needs a control to dete...

A legal department must maintain a backup from all devices that have been shredded and recycled by a third party. Which of the following best describes this requirement?

Which of the following can be used to compromise a system that is running an RTOS?

A security architect wants to prevent employees from receiving malicious attachments by email. Which of the following functions should the chosen solution do?

Which of the following activities is the first stage in the incident response process?

Which of the following is the main consideration when a legacy system that is a critical part of a company's infrastructure cannot be replaced?

Which of the following is a compensating control for providing user access to a high-risk website?

An organization is implementing a COPE mobile device management policy. Which of the following should the organization include in the COPE policy? (Choose two.)

A security administrator observed the following in a web server log while investigating an incident: "GET ../../../../etc/passwd" Which of the following attacks did the security ad...

Which of the following should a security team do first before a new web server goes live?

Which of the following techniques can be used to sanitize the data contained on a hard drive while allowing for the hard drive to be repurposed?

An attacker submits a request containing unexpected characters in an attempt to gain unauthorized access to information within the underlying systems. Which of the following best d...

A security analyst has determined that a security breach would have a financial impact of $15,000 and is expected to occur twice within a three-year period. Which of the following...

A systems administrator discovers a system that is no longer receiving support from the vendor. However, this system and its environment are critical to running the business, canno...

A company discovered its data was advertised for sale on the dark web. During the initial investigation, the company determined the data was proprietary data. Which of the followin...

Which of the following would be the best solution to deploy a low-cost standby site that includes hardware and internet access?

An organization needs to determine how many employees are accessing the building each day in order to configure the proper access controls. Which of the following control types bes...

An organization wants to implement a secure solution for remote users. The users handle sensitive PHI on a regular basis and need to access an internally developed corporate applic...

A security consultant is working with a client that wants to physically isolate its secure systems. Which of the following best describes this architecture?

A company is in the process of migrating to cloud-based services. The company's IT department has limited resources for migration and ongoing support. Which of the following best m...

An employee clicks a malicious link in an email that appears to be from the company's Chief Executive Officer. The employee's computer is infected with ransomware that encrypts the...

Which of the following best describe the benefits of a microservices architecture when compared to a monolithic architecture? (Choose two.)

A user's workstation becomes unresponsive and displays a ransom note demanding payment to decrypt files. Before the attack, the user opened a resume they received in a message, bro...

A penetration tester finds an unused Ethernet port during an on-site penetration test. Upon plugging a device into the unused port, the penetration tester notices that the machine...

A security administrator documented the following records during an assessment of network services: Two weeks later, the administrator performed a log review and noticed the record...

Which of the following is the primary reason why false negatives on a vulnerability scan should be a concern?

A company is concerned about theft of client data from decommissioned laptops. Which of the following is the most cost-effective method to decrease this risk?

A company that has a large IT operation is looking to better control, standardize, and lower the time required to build new servers. Which of the following architectures will best...

A government official receives a blank envelope containing photos and a note instructing the official to wire a large sum of money by midnight to prevent the photos from being leak...

Which of the following is the best security reason for closing service ports that are not needed?

A malicious actor conducted a brute-force attack on a company's web servers and eventually gained access to the company's customer information database. Which of the following is t...

Which of the following options will provide the lowest RTO and RPO for a database?

Due to a cyberattack, a company's IT systems were not operational for an extended period of time. The company wants to measure how quickly the systems must be restored in order to...

Which of the following actors attacking an organization is the most likely to be motivated by personal beliefs?

Which of the following should a security team use to document persistent vulnerabilities with related recommendations?

An organization purchased a critical business application containing sensitive data. The organization would like to ensure that the application is not exploited by common data exfi...

A company is performing a risk assessment on new software the company plans to use. Which of the following should the company assess during this process?

A malicious actor is trying to access sensitive financial information from a company's database by intercepting and reusing log-in credentials. Which of the following attacks is th...

A new employee accessed an unauthorized website. An investigation found that the employee violated the company's rules. Which of the following did the employee violate?