SY0-701 Practice Test

SY0-701 Practice Test practice questions, page 17 of 25, with answer review and explanations.

Question 81

An administrator is reviewing a single server's security logs and discovers the following: Which of the following best describes the action captured in this log file?

  1. Brute-force attack
  2. Privilege escalation
  3. Failed password audit
  4. Forgotten password by the user

Question 82

A security engineer is implementing FDE for all laptops in an organization. Which of the following are the most important for the engineer to consider as part of the planning process? (Choose two.)

  1. Key escrow
  2. TPM presence
  3. Digital signatures
  4. Data tokenization
  5. Public key management
  6. Certificate authority linking

Question 83

A security analyst scans a company's public network and discovers a host is running a remote desktop that can be used to access the production network. Which of the following changes should the security analyst recommend?

  1. Changing the remote desktop port to a non-standard number
  2. Setting up a VPN and placing the jump server inside the firewall
  3. Using a proxy for web connections from the remote desktop server
  4. Connecting the remote server to the domain and increasing the password length

Question 84

An enterprise has been experiencing attacks focused on exploiting vulnerabilities in older browser versions with well-known exploits. Which of the following security solutions should be configured to best provide the ability to monitor and block these known signature-based attacks?

  1. ACL
  2. DLP
  3. IDS
  4. IPS

Question 85

Security controls in a data center are being reviewed to ensure data is properly protected and that human life considerations are included. Which of the following best describes how the controls should be set up?

  1. Remote access points should fail closed.
  2. Logging controls should fail open.
  3. Safety controls should fail open.
  4. Logical security controls should fail closed.