SY0-701 Practice Test

SY0-701 Practice Test practice questions, page 7 of 25, with answer review and explanations.

Question 31

A company is expanding its threat surface program and allowing individuals to security test the company’s internet-facing application. The company will compensate researchers based on the vulnerabilities discovered. Which of the following best describes the program the company is setting up?

  1. Open-source intelligence
  2. Bug bounty
  3. Red team
  4. Penetration testing

Question 32

Which of the following threat actors is the most likely to use large financial resources to attack critical systems located in other countries?

  1. Insider
  2. Unskilled attacker
  3. Nation-state
  4. Hacktivist

Question 33

Which of the following enables the use of an input field to run commands that can view or manipulate data?

  1. Cross-site scripting
  2. Side loading
  3. Buffer overflow
  4. SQL injection

Question 34

Employees in the research and development business unit receive extensive training to ensure they understand how to best protect company data. Which of the following is the type of data these employees are most likely to use in day-to-day work activities?

  1. Encrypted
  2. Intellectual property
  3. Critical
  4. Data in transit

Question 35

A company has begun labeling all laptops with asset inventory stickers and associating them with employee IDs. Which of the following security benefits do these actions provide? (Choose two.)

  1. If a security incident occurs on the device, the correct employee can be notified.
  2. The security team will be able to send user awareness training to the appropriate device.
  3. Users can be mapped to their devices when configuring software MFA tokens.
  4. User-based firewall policies can be correctly targeted to the appropriate laptops.
  5. When conducting penetration testing, the security team will be able to target the desired laptops.
  6. Company data can be accounted for when the employee leaves the organization.