SY0-701 Practice Test

SY0-701 Practice Test practice questions, page 9 of 25, with answer review and explanations.

Question 41

A security team is reviewing the findings in a report that was delivered after a third party performed a penetration test. One of the findings indicated that a web application form field is vulnerable to cross-site scripting. Which of the following application security techniques should the security analyst recommend the developer implement to prevent this vulnerability?

  1. Secure cookies
  2. Version control
  3. Input validation
  4. Code signing

Question 42

Which of the following must be considered when designing a high-availability network? (Choose two).

  1. Ease of recovery
  2. Ability to patch
  3. Physical isolation
  4. Responsiveness
  5. Attack surface
  6. Extensible authentication

Question 43

A technician needs to apply a high-priority patch to a production system. Which of the following steps should be taken first?

  1. Air gap the system.
  2. Move the system to a different network segment.
  3. Create a change control request.
  4. Apply the patch to the system.

Question 44

Which of the following describes the reason root cause analysis should be conducted as part of incident response?

  1. To gather IoCs for the investigation
  2. To discover which systems have been affected
  3. To eradicate any trace of malware on the network
  4. To prevent future incidents of the same nature

Question 45

Which of the following is the most likely outcome if a large bank fails an internal PCI DSS compliance assessment?

  1. Fines
  2. Audit findings
  3. Sanctions
  4. Reputation damage