SY0-701 Practice Test

SY0-701 Practice Test practice questions, page 21 of 25, with answer review and explanations.

Question 101

After reviewing the following vulnerability scanning report: A security analyst performs the following test: Which of the following would the security analyst conclude for this reported vulnerability?

  1. It is a false positive.
  2. A rescan is required.
  3. It is considered noise.
  4. Compensating controls exist.

Question 102

An organization disabled unneeded services and placed a firewall in front of a business-critical legacy system. Which of the following best describes the actions taken by the organization?

  1. Exception
  2. Segmentation
  3. Risk transfer
  4. Compensating controls

Question 103

A security consultant needs secure, remote access to a client environment. Which of the following should the security consultant most likely use to gain access?

  1. EAP
  2. DHCP
  3. IPSec
  4. NAT

Question 104

Which of the following should a systems administrator use to ensure an easy deployment of resources within the cloud provider?

  1. Software as a service
  2. Infrastructure as code
  3. Internet of Things
  4. Software-defined networking

Question 105

After a security awareness training session, a user called the IT help desk and reported a suspicious call. The suspicious caller stated that the Chief Financial Officer wanted credit card information in order to close an invoice. Which of the following topics did the user recognize from the training?

  1. Insider threat
  2. Email phishing
  3. Social engineering
  4. Executive whaling