SY0-701Free trial

After a recent ransomware attack on a company's system, an administrator reviewed the log files. Which of the following control types did the administrator use?

...Show comments

—

Which of the following exercises should an organization use to improve its incident response process?

...Show comments

—

Which of the following best ensures minimal downtime and data loss for organizations with critical computing equipment located in earthquake-prone areas?

...Show comments

—

A newly identified network access vulnerability has been found in the OS of legacy IoT devices. Which of the following would best mitigate this vulnerability quickly?

...Show comments

—

After an audit, an administrator discovers all users have access to confidential data on a file server. Which of the following should the administrator use to restrict access to the data quickly?

...Show comments

—

A client demands at least 99.99% uptime from a service provider's hosted security services. Which of the following documents includes the information the service provider should return to the client?

...Show comments

—

A company is discarding a classified storage array and hires an outside vendor to complete the disposal. Which of the following should the company request from the vendor?

...Show comments

—

A company is planning a disaster recovery site and needs to ensure that a single natural disaster would not result in the complete loss of regulated backup data. Which of the following should the company consider?

...Show comments

—

Which of the following provides the details about the terms of a test with a third-party penetration tester?

...Show comments

—

A security analyst locates a potentially malicious video file on a server and needs to identify both the creation date and the file's creator. Which of the following actions would most likely give the security analyst the information required?

...Show comments

—

Which of the following teams combines both offensive and defensive testing techniques to protect an organization's critical systems?

...Show comments

—

A small business uses kiosks on the sales floor to display product information for customers. A security team discovers the kiosks use end-of-life operating systems. Which of the following is the security team most likely to document as a security implication of the current architecture?

...Show comments

—

Which of the following would help ensure a security analyst is able to accurately measure the overall risk to an organization when a new vulnerability is disclosed?

...Show comments

—

Which of the following best practices gives administrators a set period to perform changes to an operational system to ensure availability and minimize business impacts?

...Show comments

—

A company must ensure sensitive data at rest is rendered unreadable. Which of the following will the company most likely use?

...Show comments

—

A legacy device is being decommissioned and is no longer receiving updates or patches. Which of the following describes this scenario?

...Show comments

—

A bank insists all of its vendors must prevent data loss on stolen laptops. Which of the following strategies is the bank requiring?

...Show comments

—

A company's end users are reporting that they are unable to reach external websites. After reviewing the performance data for the DNS severs, the analyst discovers that the CPU, disk, and memory usage are minimal, but the network interface is flooded with inbound traffic. Network logs show only a small number of DNS queries sent to this server. Which of the following best describes what the security analyst is seeing?

...Show comments

—

A systems administrator wants to prevent users from being able to access data based on their responsibilities. The administrator also wants to apply the required access structure via a simplified format. Which of the following should the administrator apply to the site recovery resource group?

...Show comments

—

A penetration tester begins an engagement by performing port and service scans against the client environment according to the rules of engagement. Which of the following reconnaissance types is the tester performing?

...Show comments

—

During the onboarding process, an employee needs to create a password for an intranet account. The password must include ten characters, numbers, and letters, and two special characters. Once the password is created, the company will grant the employee access to other company-owned websites based on the intranet profile. Which of the following access management concepts is the company most likely using to safeguard intranet accounts and grant access to multiple sites based on a user's intranet account? (Choose two.)

...Show comments

—

Which of the following describes a security alerting and monitoring tool that collects system, application, and network logs from multiple sources in a centralized system?

...Show comments

—

A network manager wants to protect the company's VPN by implementing multifactor authentication that uses:

Something you know -

Something you have -

Something you are -
Which of the following would accomplish the manager's goal?

...Show comments

—

Which of the following would be the best way to handle a critical business application that is running on a legacy server?

...Show comments

—

Which of the following vulnerabilities is exploited when an attacker overwrites a register with a malicious address?

...Show comments

—