SY0-701 Practice Test

SY0-701 Practice Test practice questions, page 22 of 25, with answer review and explanations.

Question 106

A security administrator is deploying a DLP solution to prevent the exfiltration of sensitive customer data. Which of the following should the administrator do first?

  1. Block access to cloud storage websites.
  2. Create a rule to block outgoing email attachments.
  3. Apply classifications to the data.
  4. Remove all user permissions from shares on the file server.

Question 107

An administrator assists the legal and compliance team with ensuring information about customer transactions is archived for the proper time period. Which of the following data policies is the administrator carrying out?

  1. Compromise
  2. Retention
  3. Analysis
  4. Transfer
  5. Inventory

Question 108

A company is working with a vendor to perform a penetration test. Which of the following includes an estimate about the number of hours required to complete the engagement?

  1. SOW
  2. BPA
  3. SLA
  4. NDA

Question 109

A Chief Information Security Officer (CISO) wants to explicitly raise awareness about the increase of ransomware-as-a-service in a report to the management team. Which of the following best describes the threat actor in the CISO’s report?

  1. Insider threat
  2. Hacktivist
  3. Nation-state
  4. Organized crime

Question 110

Which of the following practices would be best to prevent an insider from introducing malicious code into a company's development process?

  1. Code scanning for vulnerabilities
  2. Open-source component usage
  3. Quality assurance testing
  4. Peer review and approval