SY0-701 Exam Questions

A multinational bank hosts several servers in its data center. These servers run a business-critical application used by customers to access their account information. Which of the...

The author of a software package is concerned about bad actors repackaging and inserting malware into the software. The software download is hosted on a website, and the author exc...

A third-party vendor is moving a particular application to the end-of-life stage at the end of the current year. Which of the following is the most critical risk if the company cho...

A security analyst recently read a report about a flaw in several of the organization's printer models that causes credentials to be sent over the network in cleartext, regardless...

A development team is launching a new public-facing web product. The Chief Information Security Officer has asked that the product be protected from attackers who use malformed or...

During an annual review of the system design, an engineer identified a few issues with the currently released design. Which of the following should be performed next according to b...

Which of the following is best to use when determining the severity of a vulnerability?

An organization experienced a security breach that allowed an attacker to send fraudulent wire transfers from a hardened PC exclusively to the attacker's bank through remote connec...

Which of the following is the best resource to consult for information on the most common application exploitation methods?

A security analyst is reviewing the logs on an organization's DNS server and notices the following unusual snippet: Which of the following attack techniques was most likely used?

A security analyst at an organization observed several user logins from outside the organization's network. The analyst determined that these logins were not performed by individua...

A security team is addressing a risk associated with the attack surface of the organization's web application over port 443. Currently, no advanced network security capabilities ar...

A systems administrator would like to create a point-in-time backup of a virtual machine. Which of the following should the administrator use?

A security administrator notices numerous unused, non-compliant desktops are connected to the network. Which of the following actions would the administrator most likely recommend...

Which of the following is a common data removal option for companies that want to wipe sensitive data from hard drives in a repeatable manner but allow the hard drives to be reused...

An organization wants to improve the company's security authentication method for remote employees. Given the following requirements: - Must work across SaaS and internal network a...

A security officer is implementing a security awareness program and has placed security-themed posters around the building and assigned online user training. Which of the following...

A malicious update was distributed to a common software platform and disabled services at many organizations. Which of the following best describes this type of vulnerability?

A company web server is initiating outbound traffic to a low-reputation, public IP on non-standard pat. The web server is used to present an unauthenticated page to clients who upl...

An organization requests a third-party full-spectrum analysis of its supply chain. Which of the following would the analysis team use to meet this requirement?

A systems administrator deployed a monitoring solution that does not require installation on the endpoints that the solution is monitoring. Which of the following is described in t...

Which of the following agreement types is used to limit external discussions?

A security analyst is evaluating a SaaS application that the human resources department would like to implement. The analyst requests a SOC 2 report from the SaaS vendor. Which of...

Which of the following is used to conceal credit card information in a database log file?

SIMULATION 1 A systems administrator is configuring a site-to-site VPN between two branch offices. Some of the settings have already been configured correctly. The systems administ...

Which of the following topics would most likely be included within an organization's SDLC?

Which of the following activities should a systems administrator perform to quarantine a potentially infected system?

An organization is adopting cloud services at a rapid pace and now has multiple SaaS applications in use. Each application has a separate log-in, so the security team wants to redu...

A company's online shopping website became unusable shortly after midnight on January 30, 2023. When a security analyst reviewed the database server, the analyst noticed the follow...

Which of the following would be the best way to test resiliency in the event of a primary power failure?

A company is concerned about the theft of client data from decommissioned laptops. Which of the following is the most cost-effective method to decrease this risk?

A company relies on open-source software libraries to build the software used by its customers. Which of the following vulnerability types would be the most difficult to remediate...

While investigating a possible incident, a security analyst discovers the following log entries: Which of the following should the analyst do first?

Which of the following should be used to ensure an attacker is unable to read the contents of a mobile device's drive if the device is lost?

An organization plans to expand its operations internationally and needs to keep data at the new location secure. The organization wants to use the most secure architecture model p...

The security team at a large global company needs to reduce the cost of storing data used for performing investigations. Which of the following types of data should have its retent...

Which of the following is the primary purpose of a service that tracks log-ins and time spent using the service?

Which of the following should be used to aggregate log data in order to create alerts and detect anomalous activity?

Which of the following is a type of vulnerability that refers to the unauthorized installation of applications on a device through means other than the official application store?

Which of the following types of identification methods can be performed on a deployed application during runtime?

Which of the following is the best way to provide secure remote access for employees while minimizing the exposure of a company's internal network?

An administrator must replace an expired SSL certificate. Which of the following does the administrator need to create the new SSL certificate?

Which of the following strategies should an organization use to efficiently manage and analyze multiple types of logs?

A customer has a contract with a CSP and wants to identify which controls should be implemented in the IaaS enclave. Which of the following is most likely to contain this informati...

Which of the following is a type of vulnerability that involves inserting scripts into web-based applications in order to take control of the client's web browser?

A security analyst receives an alert from a corporate endpoint used by employees to issue visitor badges. The alert contains the following details: Which of the following best desc...

A penetration test has demonstrated that domain administrator accounts were vulnerable to pass- the-hash attacks. Which of the following would have been the best strategy to preven...

Which of the following security concepts is accomplished when granting access after an individual has logged into a computer network?

A security professional discovers a folder containing an employee's personal information on the enterprise's shared drive. Which of the following best describes the data type the s...

An organization needs to monitor its users' activities to prevent insider threats. Which of the following solutions would help the organization achieve this goal?