SY0-701Preview

After reviewing the following vulnerability scanning report:

An organization disabled unneeded services and placed a firewall in front of a business-critical legacy system. Which of the following best describes the actions taken by the organization?

A security consultant needs secure, remote access to a client environment. Which of the following should the security consultant most likely use to gain access?

Which of the following should a systems administrator use to ensure an easy deployment of resources within the cloud provider?

After a security awareness training session, a user called the IT help desk and reported a suspicious call. The suspicious caller stated that the Chief Financial Officer wanted credit card information in order to close an invoice. Which of the following topics did the user recognize from the training?

A security administrator is deploying a DLP solution to prevent the exfiltration of sensitive customer data. Which of the following should the administrator do first?

An administrator assists the legal and compliance team with ensuring information about customer transactions is archived for the proper time period. Which of the following data policies is the administrator carrying out?

A company is working with a vendor to perform a penetration test. Which of the following includes an estimate about the number of hours required to complete the engagement?

A Chief Information Security Officer (CISO) wants to explicitly raise awareness about the increase of ransomware-as-a-service in a report to the management team. Which of the following best describes the threat actor in the CISO’s report?

Several employees received a fraudulent text message from someone claiming to be the Chief Executive Officer (CEO). The message stated:
“I’m in an airport right now with no access to email. I need you to buy gift cards for employee recognition awards. Please send the gift cards to following email address.”
Which of the following are the best responses to this situation? (Choose two).

Which of the following practices would be best to prevent an insider from introducing malicious code into a company's development process?

Which of the following can best protect against an employee inadvertently installing malware on a company system?

A company is adding a clause to its AUP that states employees are not allowed to modify the operating system on mobile devices. Which of the following vulnerabilities is the organization addressing?

Which of the following would be the best ways to ensure only authorized personnel can access a secure facility? (Choose two.)

An organization would like to store customer data on a separate part of the network that is not accessible to users on the main corporate network. Which of the following should the administrator use to accomplish this goal?

Which of the following is the most common data loss path for an air-gapped network?

Malware spread across a company's network after an employee visited a compromised industry blog. Which of the following best describes this type of attack?

An organization is struggling with scaling issues on its VPN concentrator and internet circuit due to remote work. The organization is looking for a software solution that will allow it to reduce traffic on the VPN and internet circuit, while still providing encrypted tunnel access to the data center and monitoring of remote employee internet traffic. Which of the following will help achieve these objectives?

Which of the following is the best reason to complete an audit in a banking environment?

Which of the following security concepts is the best reason for permissions on a human resources fileshare to follow the principle of least privilege?

A company is required to use certified hardware when building networks. Which of the following best addresses the risks associated with procuring counterfeit hardware?

Which of the following are cases in which an engineer should recommend the decommissioning of a network device? (Choose two.)

A company is required to perform a risk assessment on an annual basis. Which of the following types of risk assessments does this requirement describe?