SY0-701 Practice Exam Questions and Answers

Which of the following describes a security alerting and monitoring tool that collects system, application, and network logs from multiple sources in a centralized system?

Which of the following is most likely to be deployed to obtain and analyze attacker activity and techniques?

An administrator needs to perform server hardening before deployment. Which of the following steps should the administrator take? (Select two).

During a recent breach, employee credentials were compromised when a service desk employee issued an MFA bypass code to an attacker who called and posed as an employee. Which of the following should be used to prevent this type of incident in the future?

A company is expanding its threat surface program and allowing individuals to security test the company’s internet-facing application. The company will compensate researchers based on the vulnerabilities discovered. Which of the followingbestdescribes the program the company is setting up?

After a recent ransomware attack on a company's system, an administrator reviewed the log files. Which of the following control types did the administrator use?

Which of the following describes the maximum allowance of accepted risk?

Which of the following is classified as high availability in a cloud environment?

Which of the following would be thebestway to block unknown programs from executing?

A security analyst is investigating an application server and discovers that software on the server is behaving abnormally. The software normally runs batch jobs locally and does not generate traffic, but the process is now generating outbound traffic over random high ports. Which of the following vulnerabilities has likely been exploited in this software?