SY0-701 Exam Questions

A systems administrator is reviewing the VPN logs and notices that during non-working hours a user is accessing the company file server and information is being transferred to a su...

SIMULATION 3 A security architect is tasked with designing a highly resilient, business-critical application. The application SLA is 99.999%. INSTRUCTIONS Select the network, power...

A company discovers suspicious transactions that were entered into the company's database and attached to a user account that was created as a trap for malicious activity. Which of...

A network engineer is increasing the overall security of network devices and needs to harden the devices. Which of the following will best accomplish this task?

A company's accounting department receives an urgent payment message from the company's bank domain with instructions to wire transfer funds. The sender requests that the transfer...

A company filed a complaint with its IT service provider after the company discovered the service provider's external audit team had access to some of the company's confidential in...

An analyst is reviewing job postings to ensure sensitive company information is not being shared with the general public. Which of the following is the analyst most likely looking...

An engineer has ensured that the switches are using the latest OS, the servers have the latest patches, and the endpoints' definitions are up to date. Which of the following will t...

Which of the following is most likely a security concern when installing and using low-cost IoT devices in infrastructure environments?

A company captures log-in details and reviews them each week to identify conditions such as excessive log-in attempts and frequent lockouts. Which of the following should a securit...

A security team is in the process of hardening the network against externally crafted malicious packets. Which of the following is the most secure method to protect the internal ne...

Which of the following should a systems administrator use to decrease the company's hardware attack surface?

A company wants to add an MFA solution for all employees who access the corporate network remotely. Log-in requirements include something you know, are, and have. The company wants...

A company is using a legacy FTP server to transfer financial data to a third party. The legacy system does not support SFTP, so a compensating control is needed to protect the sens...

A security manager wants to reduce the number of steps required to identify and contain basic threats. Which of the following will help achieve this goal?

The Chief Information Officer (CIO) asked a vendor to provide documentation detailing the specific objectives within the compliance framework that the vendor's services meet. The v...

Which of the following describes the most effective way to address OS vulnerabilities after they are identified?

The management team reports that employees are missing features on company-provided tablets, which is causing productivity issues. The management team directs the IT team to resolv...

A company is implementing a policy to allow employees to use their personal equipment for work. However, the company wants to ensure that only company-approved applications can be...

An alert references attacks associated with a zero-day exploit. An analyst places a bastion host in the network to reduce the risk of the exploit. Which of the following types of c...

Which of the following is an example of memory injection?

A security administrator is implementing encryption on all hard drives in an organization. Which of the following security concepts is the administrator applying?

An administrator has configured a quarantine subnet for all guest devices that connect to the network. Which of the following would be best for the security team to perform before...

A Chief Information Security Officer is developing procedures to guide detective and corrective activities associated with common threats, including phishing, social engineering, a...

Which of the following testing techniques uses both defensive and offensive testing methodologies with developers to securely build key applications and software?

An administrator wants to automate an account permissions update for a large number of accounts. Which of the following would best accomplish this task?

Which of the following is the fastest and most cost-effective way to confirm a third-party supplier's compliance with security obligations?

Which of the following cryptographic solutions is used to hide the fact that communication is occurring?

Which of the following steps should be taken before mitigating a vulnerability in a production server?

A security engineer needs to quickly identify a signature from a known malicious file. Which of the following analysis methods would the security engineer most likely use?

Which of the following steps in the risk management process involves establishing the scope and potential risks involved with a project?

A growing organization, which hosts an externally accessible application, adds multiple virtual servers to improve application performance and decrease the resource usage on indivi...

A systems administrator is concerned users are accessing emails through a duplicate site that is not run by the company. Which of the following is used in this scenario?

A company wants to ensure employees are allowed to copy files from a virtual desktop during the workday but are restricted during non-working hours. Which of the following security...

Employees sign an agreement that restricts specific activities when leaving the company. Violating the agreement can result in legal consequences. Which of the following agreements...

A systems administrator just purchased multiple network devices. Which of the following should the systems administrator perform to prevent attackers from accessing the devices by...

A CVE in a key back-end component of an application has been disclosed. The systems administrator is identifying all of the systems in the environment that are susceptible to this...

Which of the following activities uses OSINT?

A company is considering an expansion of access controls for an application that contractors and internal employees use to reduce costs. Which of the following risk elements should...

Which of the following is the act of proving to a customer that software developers are trained on secure coding?

An administrator is creating a secure method for a contractor to access a test environment. Which of the following would provide the contractor with the best access to the test env...

A security analyst notices unusual behavior on the network. The IDS on the network was not able to detect the activities. Which of the following should the security analyst use to...

To which of the following security categories does an EDR solution belong?

Which of the following is the stage in an investigating when forensic images are obtained?

Which of the following describes the difference between encryption and hashing?

A security report shows that during a two-week test period, 80% of employees unwittingly disclosed their SSO credentials when accessing an external website. The organization purpos...

A Chief Information Security Officer (CISO) has developed information security policies that relate to the software development methodology. Which of the following would the CISO m...

A security analyst created a fake account and saved the password in a non-readily accessible directory in a spreadsheet. An alert was also configured to notify the security team if...

Which of the following is the best way to provide secure, remote access for employees while minimizing the exposure of a company's internal network?

A company wants to track modifications to the code that is used to build new virtual servers. Which of the following will the company most likely deploy?