SY0-701 Exam Questions

A newly appointed board member with cybersecurity knowledge wants the board of directors to receive a quarterly report detailing the number of incidents that impacted the organizat...

Which of the following are the most likely vectors for the unauthorized or unintentional inclusion of vulnerable code in a software company's final software releases? (Choose two).

Which of the following are common VoIP-associated vulnerabilities? (Choose two).

Which of the following is most likely associated with introducing vulnerabilities on a corporate network by the deployment of unapproved software?

Local guidelines require that all information systems meet a minimum security baseline to be compliant. Which of the following can security administrators use to assess their syste...

166.18.75.6. However, over the past hour the SOC has received reports of the site's homepage pointing to 151.191.122.115. Which of the following is occurring?

An employee fell for a phishing scam, which allowed an attacker to gain access to a company PC. The attacker scraped the PC's memory to find other credentials. Without cracking the...

Which of the following is a common source of unintentional corporate credential leakage in cloud environments?

A certificate vendor notified a company that recently invalidated certificates may need to be updated. Which of the following mechanisms should a security administrator use to dete...

A security analyst needs to harden access to a network. One of the requirements is to authenticate users with smart cards. Which of the following should the analyst enable to best...

A recent malware outbreak across a subnet included successful rootkit installations on many PCs, ensuring persistence by rendering remediation efforts ineffective. Which of the fol...

An organization is building a single virtual environment that will host customer applications and data that require availability at all times. The data center that is hosting the e...

A company has decided to move its operations to the cloud. It wants to utilize technology that will prevent users from downloading company applications for personal use, restrict d...

An internet company has created a new collaboration application. To expand the user base, the company wants to implement an option that allows users to log in to the application wi...

A security architect at a large, multinational organization is concerned about the complexities and overhead of managing multiple encryption keys securely in a multicloud provider...

In order to strengthen a password and prevent a hacker from cracking it, a random string of 36 characters was added to the password. Which of the following best describes this tech...

A user is attempting to patch a critical system, but the patch fails to transfer. Which of the following access controls is most likely inhibiting the transfer?

Which of the following is used to protect a computer from viruses, malware, and Trojans being installed and moving laterally across the network?

A systems administrator set up a perimeter firewall but continues to notice suspicious connections between internal endpoints. Which of the following should be set up in order to m...

A business received a small grant to migrate its infrastructure to an off-premises solution. Which of the following should be considered first?

A company is planning a disaster recovery site and needs to ensure that a single natural disaster would not result in the complete loss of regulated backup data. Which of the follo...

A security analyst receives alerts about an internal system sending a large amount of unusual DNS queries to systems on the internet over short periods of time during non-business...

An employee receives a text message from an unknown number claiming to be the company's Chief Executive Officer and asking the employee to purchase several gift cards. Which of the...

Which of the following would help ensure a security analyst is able to accurately measure the overall risk to an organization when a new vulnerability is disclosed?

A systems administrator is changing the password policy within an enterprise environment and wants this update implemented on all systems as quickly as possible. Which of the follo...

An administrator needs to perform server hardening before deployment. Which of the following steps should the administrator take? (Select two).

Visitors to a secured facility are required to check in with a photo ID and enter the facility through an access control vestibule Which of the following but describes this form of...

A company must ensure sensitive data at rest is rendered unreadable. Which of the following will the company most likely use?

Which of the following describes the maximum allowance of accepted risk?

Which of the following incident response activities ensures evidence is properly handied?

Which of the following risk management strategies should an enterprise adopt first if a legacy application is critical to business operations and there are preventative controls th...

Which of the following teams combines both offensive and defensive testing techniques to protect an organization's critical systems?

A company is working with a vendor to perform a penetration test. Which of the following includes an estimate about the number of hours required to complete the engagement?

The local administrator account for a company's VPN appliance was unexpectedly used to log in to the remote management interface. Which of the following would have most likely prev...

Which of the following would be most useful in determining whether the long-term cost to transfer a risk is less than the impact of the risk?

A security analyst is investigating an application server and discovers that software on the server is behaving abnormally. The software normally runs batch jobs locally and does n...

Which of the following is the best way to secure an on-site data center against intrusion from an insider?

An engineer moved to another team and is unable to access the new team's shared folders while still being able to access the shared folders from the former team. After opening a ti...

A network administrator is working on a project to deploy a load balancer in the company's cloud environment. Which of the following fundamental security requirements does this pro...

A technician is deploying a new security camera. Which of the following should the technician do?

A company is experiencing a web services outage on the public network. The services are up and available but inaccessible. The network logs show a sudden increase in network traffi...

Which of the following threat actors is the most likely to be motivated by profit?

An organization experiences a cybersecurity incident involving a command-and-control server. Which of the following logs should be analyzed to identify the impacted host? (Choose t...

During a penetration test, a vendor attempts to enter an unauthorized area using an access badge. Which of the following types of tests does this represent?

A systems administrator uses a key to encrypt a message being sent to a peer in a different branch office. The peer then uses the same key to decrypt the message. Which of the foll...

A visitor plugs a laptop into a network jack in the lobby and is able to connect to the company's network. Which of the following should be configured on the existing network infra...

A security administrator is reissuing a former employee's laptop. Which of the following is the best combination of data handling activities for the administrator to perform? (Choo...

A systems administrator would like to deploy a change to a production system. Which of the following must the administrator submit to demonstrate that the system can be restored to...

A company is redesigning its infrastructure and wants to reduce the number of physical servers in use. Which of the following architectures is best suited for this goal?

A bank set up a new server that contains customers' PII. Which of the following should the bank use to make sure the sensitive data is not modified?