SY0-701 Exam Dumps | A security team purchases a tool for cloud security posture management. The team is quickly overwhelmed

<< Prev Question Next Question >>

Question 68/348

A security team purchases a tool for cloud security posture management. The team is quickly overwhelmed by the number of misconfigurations that the tool detects. Which of the following should the security team configure to establish workflows for cloud resource security?

A. CASB

B. IAM

C. SOAR

D. XDR

Question List (348q): Question 1: A systems administrator discovers a system that is no longer...; Question 2: An employee fell for a phishing scam, which allowed an attac...; Question 3: A U.S.-based cloud-hosting provider wants to expand its data...; Question 4: An administrator notices that several users are logging in f...; Question 5: Which of the following explains why an attacker cannot easil...; Question 6: A security analyst is evaluating a SaaS application that the...; Question 7: A security engineer would like to enhance the use of automat...; Question 8: A security analyst discovers that a large number of employee...; Question 9: An accountant is transferring information to a bank over FTP...; Question 10: Which of the following should be used to prevent changes to ...; Question 11: Sine a recent upgrade (o a WLAN infrastructure, several mobi...; Question 12: Which of the following solutions would most likely be used i...; Question 13: A security audit of an organization revealed that most of th...; Question 14: A company has yearly engagements with a service provider. Th...; Question 15: Which of the following is the best way to validate the integ...; Question 16: Which of the following tools is best for logging and monitor...; Question 17: Which of the following describes a security alerting and mon...; Question 18: A company wants to track modifications to the code used to b...; Question 19: Which of the following best practices gives administrators a...; Question 20: A company evaluates several options that would allow employe...; Question 21: Which of the following actions must an organization take to ...; Question 22: A security consultant needs secure, remote access to a clien...; Question 23: During an investigation, a security analyst discovers traffi...; Question 24: Which of the following activities is included in the post-in...; Question 25: Which of the following must be considered when designing a h...; Question 26: After multiple phishing simulations, the Chief Security Offi...; Question 27: A vendor needs to remotely and securely transfer files from ...; Question 28: A company is concerned about the theft of client data from d...; Question 29: A security analyst scans a company's public network and disc...; Question 30: A company wants to improve the availability of its applicati...; Question 31: A security analyst is reviewing logs and discovers the follo...; Question 32: A company is concerned with supply chain compromise of new s...; Question 33: Which of the following activities should a systems administr...; Question 34: The security operations center is researching an event conce...; Question 35: An organization is implementing a COPE mobile device managem...; Question 36: An organization disabled unneeded services and placed a fire...; Question 37: Which of the following data types relates to data sovereignt...; Question 38: An employee emailed a new systems administrator a malicious ...; Question 39: An organization is leveraging a VPN between its headquarters...; Question 40: A bank set up a new server that contains customers' Pll. Whi...; Question 41: Which of the following would be the best way to block unknow...; Question 42: A company plans to secure its systems by: Preventing users f...; Question 43: Which of the following agreements defines response time, esc...; Question 44: A systems administrator creates a script that validates OS v...; Question 45: Which of the following is the most likely outcome if a large...; Question 46: An organization is struggling with scaling issues on its VPN...; Question 47: Which of the following should be deployed on an externally f...; Question 48: A cybersecurity incident response team at a large company re...; Question 49: Which of the following teams combines both offensive and def...; Question 50: A company is adding a clause to its AUP that states employee...; Question 51: A security administrator receives multiple reports about the...; Question 52: Which of the following describes the category of data that i...; Question 53: A recent black-box penetration test of http://example.com di...; Question 54: A network engineer is increasing the overall security of net...; Question 55: Executives at a company are concerned about employees access...; Question 56: Which of the following is used to add extra complexity befor...; Question 57: An accounting employee recently used software that was not a...; Question 58: Which of the following risk management strategies should an ...; Question 59: An organization is evaluating new regulatory requirements as...; Question 60: A company is aware of a given security risk related to a spe...; Question 61: An organization has a new regulatory requirement to implemen...; Question 62: An administrator is estimating the cost associated with an a...; Question 63: Which of the following has been implemented when a host-base...; Question 64: An administrator wants to perform a risk assessment without ...; Question 65: A systems administrator is creating a script that would save...; Question 66: A store is setting up wireless access for their employees. M...; Question 67: Which of the following is prevented by proper data sanitizat...; Question 68: A security team purchases a tool for cloud security posture ...; Question 69: A Chief Information Security Officer (CISO) has developed in...; Question 70: Which of the following should a technician perform to verify...; Question 71: A business is expanding to a new country and must protect cu...; Question 72: During a SQL update of a database, a temporary field used as...; Question 73: Which of the following data recovery strategies will result ...; Question 74: A user needs to complete training at https://comptiatraining...; Question 75: A security analyst receives alerts about an internal system ...; Question 76: Which of the following strategies should an organization use...; Question 77: An organization's web servers host an online ordering system...; Question 78: An attorney prints confidential documents to a copier in an ...; Question 79: Employees in the research and development business unit rece...; Question 80: Which of the following is the best way to prevent data from ...; Question 81: While a user reviews their email, a host gets infected by ma...; Question 82: Which of the following objectives is best achieved by a tabl...; Question 83: Which of the following should a systems administrator use to...; Question 84: A security report shows that during a two-week test period. ...; Question 85: A security analyst is examining a penetration test report an...; Question 86: A security analyst reviews domain activity logs and notices ...; Question 87: Which of the following would enable a data center to remain ...; Question 88: Which of the following would be best suited for constantly c...; Question 89: Which of the following cryptographic methods is preferred fo...; Question 90: Which of the following actors attacking an organization is t...; Question 91: Which of the following should an internal auditor check for ...; Question 92: In which of the following will unencrypted PLC management tr...; Question 93: Which of the following practices would be best to prevent an...; Question 94: Which of the following is an example of memory injection?...; Question 95: A malicious insider from the marketing team alters records a...; Question 96: During an investigation, an incident response team attempts ...; Question 97: Which of the following alert types is the most likely to be ...; Question 98: A network administrator wants to ensure that network traffic...; Question 99: During a recent company safety stand-down, the cyber-awarene...; Question 100: The Chief Information Security Officer wants to put security...; Question 101: A store is setting up wireless access for employees. Managem...; Question 102: An IT team rolls out a new management application that uses ...; Question 103: A database administrator is updating the company's SQL datab...; Question 104: Several employees received a fraudulent text message from so...; Question 105: Which of the following would a systems administrator follow ...; Question 106: A company implemented an MDM policy 10 mitigate risks after ...; Question 107: A company's legal department drafted sensitive documents in ...; Question 108: An organization wants to limit potential impact to its log-i...; Question 109: A systems administrator notices that the research and develo...; Question 110: Visitors to a secured facility are required to check in with...; Question 111: An organization issued new laptops to all employees and want...; Question 112: Which of the following vulnerabilities is associated with in...; Question 113: An organization recently started hosting a new service that ...; Question 114: A cyber operations team informs a security analyst about a n...; Question 115: Which of the following is the best method to reduce the atta...; Question 116: After a security incident, a systems administrator asks the ...; Question 117: Which of the following security measures is required when us...; Question 118: Various stakeholders are meeting to discuss their hypothetic...; Question 119: Which of the following best describe the benefits of a micro...; Question 120: A security engineer at a large company needs to enhance IAM ...; Question 121: Which of the following can assist in recovering data if the ...; Question 122: A security officer observes that a software development team...; Question 123: Which of the following data protection strategies can be use...; Question 124: The private key for a website was stolen, and a new certific...; Question 125: A systems administrator needs to encrypt all data on employe...; Question 126: A systems administrator set up a perimeter firewall but cont...; Question 127: A company is concerned about weather events causing damage t...; Question 128: A recent penetration test identified that an attacker could ...; Question 129: Which of the following is the best reason to complete an aud...; Question 130: A company's accounting department receives an urgent payment...; Question 131: An administrator is Investigating an incident and discovers ...; Question 132: Which of the following is a reason environmental variables a...; Question 133: A growing company would like to enhance the ability of its s...; Question 134: A malicious update was distributed to a common software plat...; Question 135: Two companies are in the process of merging. The companies n...; Question 136: Malware spread across a company's network after an employee ...; Question 137: A client demands at least 99.99% uptime from a service provi...; Question 138: A security manager wants to reduce the number of steps requi...; Question 139: Which of the following types of identification methods can b...; Question 140: Which of the following is a benefit of an RTO when conductin...; Question 141: A data administrator is configuring authentication for a Saa...; Question 142: An IT administrator needs to ensure data retention standards...; Question 143: Which of the following should an organization use to protect...; Question 144: While a school district is performing state testing, a secur...; Question 145: Which of the following can best protect against an employee ...; Question 146: Which of the following prevents unauthorized modifications t...; Question 147: Which of the following should a systems administrator use to...; Question 148: Which of the following scenarios describes a possible busine...; Question 149: An administrator needs to perform server hardening before de...; Question 150: Which of the following should a security analyst consider wh...; Question 151: Which of the following is an algorithm performed to verify t...; Question 152: A company is required to use certified hardware when buildin...; Question 153: A security analyst receives an alert that there was an attem...; Question 154: An employee clicked a malicious link in an email and downloa...; Question 155: Which of the following is the final step of the modem respon...; Question 156: A systems administrator is auditing all company servers to e...; Question 157: An important patch for a critical application has just been ...; Question 158: Which of the following consequences would a retail chain mos...; Question 159: A company recently decided to allow employees to work remote...; Question 160: A security manager created new documentation to use in respo...; Question 161: After failing an audit twice, an organization has been order...; Question 162: A company's web filter is configured to scan the URL for str...; Question 163: A company needs to determine whether authentication weakness...; Question 164: The Chief Information Security Officer wants to discuss opti...; Question 165: The physical security team at a company receives reports tha...; Question 166: An organization wants to improve the company's security auth...; Question 167: Which of the following metrics impacts the backup schedule a...; Question 168: The internal audit team determines a software application is...; Question 169: Which of the following is a qualitative approach to risk ana...; Question 170: Which of the following would be the best way to test resilie...; Question 171: An organization designs an inbound firewall with a fail-open...; Question 172: A Chief Security Officer signs off on a request to allow inb...; Question 173: An attacker used XSS to compromise a web server. Which of th...; Question 174: Client files can only be accessed by employees who need to k...; Question 175: A company discovers suspicious transactions that were entere...; Question 176: A security analyst reviews web server logs and sees the foll...; Question 177: A technician wants to improve the situational and environmen...; Question 178: Which of the following would be the best ways to ensure only...; Question 179: An administrator implements web-filtering products but still...; Question 180: A company wants to track modifications to the code that is u...; Question 181: Security controls in a data center are being reviewed to ens...; Question 182: A systems administrator notices that one of the systems crit...; Question 183: Which of the following automation use cases would best enhan...; Question 184: The help desk receives multiple calls that machines with an ...; Question 185: An administrator at a small business notices an increase in ...; Question 186: The Chief Information Security Officer of an organization ne...; Question 187: Which of the following activities should be performed first ...; Question 188: Which of the following should be used to select a label for ...; Question 189: Which of the following organizational documents is most ofte...; Question 190: A company that has a large IT operation is looking to better...; Question 191: An analyst identifies that multiple users have the same pass...; Question 192: A service provider wants a cost-effective way to rapidly exp...; Question 193: A company wants to protect a specialized legacy platform tha...; Question 194: A security consultant is working with a client that wants to...; Question 195: A systems administrator is concerned users are accessing ema...; Question 196: A network manager wants to protect the company's VPN by impl...; Question 197: Employees sign an agreement that restricts specific activiti...; Question 198: A security analyst must prevent remote users from accessing ...; Question 199: Which of the following is the most likely to be used to docu...; Question 200: A penetration test has demonstrated that domain administrato...; Question 201: After a security awareness training session, a user called t...; Question 202: A new employee can select a particular make and model of an ...; Question 203: A security analyst developed a script to automate a trivial ...; Question 204: A security team receives reports about high latency and comp...; Question 205: An MSSP manages firewalls for hundreds of clients. Which of ...; Question 206: Company A jointly develops a product with Company B, which i...; Question 207: A customer has a contract with a CSP and wants to identify w...; Question 208: A newly appointed board member with cybersecurity knowledge ...; Question 209: A systems administrator receives a text message from an unkn...; Question 210: Which of the following actions best addresses a vulnerabilit...; Question 211: Which of the following control types involves restricting IP...; Question 212: Which of the following must be considered when designing a h...; Question 213: Various company stakeholders meet to discuss roles and respo...; Question 214: Which of the following strategies most effectively protects ...; Question 215: The analyst wants to move data from production to the UAT se...; Question 216: Which of the following security controls are a company imple...; Question 217: A user downloads a patch from an unknown repository... FIM a...; Question 218: A systems administrator receives an alert that a company's i...; Question 219: A company is implementing a policy to allow employees to use...; Question 220: A business needs a recovery site but does not require immedi...; Question 221: An administrator assists the legal and compliance team with ...; Question 222: An employee from the accounting department logs in to the we...; Question 223: Which of the following examples would be best mitigated by i...; Question 224: The number of tickets the help desk has been receiving has i...; Question 225: Which of the following activities is the first stage in the ...; Question 226: Which of the following steps in the risk management process ...; Question 227: Which of the following security controls is a company implem...; Question 228: Users at a company are reporting they are unable to access t...; Question 229: Prior to implementing a design change, the change must go th...; Question 230: Which of the following can be used to compromise a system th...; Question 231: Which of the following is a preventive physical security con...; Question 232: An analyst discovers a suspicious item in the SQL server log...; Question 233: A company is considering an expansion of access controls for...; Question 234: A government official receives a blank envelope containing p...; Question 235: Which of the following security concepts is the best reason ...; Question 236: Which of the following is a type of vulnerability that may r...; Question 237: Employees located off-site must have access to company resou...; Question 238: Which of the following best describes the practice of resear...; Question 239: Which of the following is the best way to securely store an ...; Question 240: A security administrator is deploying a DLP solution to prev...; Question 241: An attacker posing as the Chief Executive Officer calls an e...; Question 242: A company requires hard drives to be securely wiped before s...; Question 243: A company expects its provider to ensure servers and network...; Question 244: A company installed cameras and added signs to alert visitor...; Question 245: Which of the following is the act of proving to a customer t...; Question 246: Which of the following is the most effective way to protect ...; Question 247: While reviewing a recent compromise, a forensics team discov...; Question 248: Which of the following is a reason why a forensic specialist...; Question 249: A security analyst is assessing several company firewalls. W...; Question 250: An organization is adopting cloud services at a rapid pace a...; Question 251: An administrator has identified and fingerprinted specific f...; Question 252: An organization recently updated its security policy to incl...; Question 253: A security analyst and the management team are reviewing the...; Question 254: Which of the following describes an executive team that is m...; Question 255: A company is using a legacy FTP server to transfer financial...; Question 256: At the start of a penetration test, the tester checks OSINT ...; Question 257: An administrator has configured a quarantine subnet for all ...; Question 258: A company receives an alert that a widely used network devic...; Question 259: Which of the following allows for the attribution of message...; Question 260: Which of the following considerations is the most important ...; Question 261: A company wants to verify that the software the company is d...; Question 262: A healthcare organization wants to provide a web application...; Question 263: Which of the following is the best reason to perform a table...; Question 264: Which of the following is the best way to consistently deter...; Question 265: Which of the following receives logs from various devices an...; Question 266: Which of the following best represents an application that d...; Question 267: Which of the following best describes the concept of informa...; Question 268: A security analyst is investigating an application server an...; Question 269: In a rush to meet an end-of-year business goal, the IT depar...; Question 270: Which of the following can be used to identify potential att...; Question 271: A company identified the potential for malicious insiders to...; Question 272: A systems administrator is redesigning now devices will perf...; Question 273: A newly identified network access vulnerability has been fou...; Question 274: Which of the following can be used to mitigate attacks from ...; Question 275: Which of the following is a type of vulnerability that invol...; Question 276: Which of the following is the best safeguard to protect agai...; Question 277: Which of the following would be the best way to handle a cri...; Question 278: A security engineer needs to quickly identify a signature fr...; Question 279: While reviewing logs, a security administrator identifies th...; Question 280: Which of the following incident response activities ensures ...; Question 281: Which of the following outlines the configuration, maintenan...; Question 282: An organization has issues with deleted network share data a...; Question 283: Which of the following security controls would best guard a ...; Question 284: A technician is opening ports on a firewall for a new system...; Question 285: During a penetration test, a vendor attempts to enter an una...; Question 286: An organization experiences a cybersecurity incident involvi...; Question 287: An administrator is installing an SSL certificate on a new s...; Question 288: Which of the following is used to protect a computer from vi...; Question 289: An engineer needs to ensure that a script has not been modif...; Question 290: Which of the following allows an exploit to go undetected by...; Question 291: Which of the following roles, according to the shared respon...; Question 292: A company is expanding its threat surface program and allowi...; Question 293: A company is in the process of migrating to cloud-based serv...; Question 294: A security analyst finds a rogue device during a monthly aud...; Question 295: Which of the following describes effective change management...; Question 296: Which of the following best describes why me SMS DIP authent...; Question 297: An organization implemented cloud-managed IP cameras to moni...; Question 298: After reviewing the following vulnerability scanning report:...; Question 299: Which of the following digital forensics activities would a ...; Question 300: Which of the following is the main consideration when a lega...; Question 301: Which of the following hardening techniques must be applied ...; Question 302: Which of the following describes the difference between encr...; Question 303: A systems administrator is working on a solution with the fo...; Question 304: Which of the following is used to validate a certificate whe...; Question 305: A security manager is implementing MFA and patch management....; Question 306: A company's online shopping website became unusable shortly ...; Question 307: An IT security team is concerned about the confidentiality o...; Question 308: An administrator is reviewing a single server's security log...; Question 309: A security administrator is reissuing a former employee's la...; Question 310: Which of the following activities uses OSINT?...; Question 311: A security analyst needs to propose a remediation plan 'or e...; Question 312: An organization's internet-facing website was compromised wh...; Question 313: A systems administrator needs to ensure the secure communica...; Question 314: Which of the following can a security director use to priori...; Question 315: Which of the following is a hardware-specific vulnerability?...; Question 316: An employee receives a text message that appears to have bee...; Question 317: A systems administrator needs to provide traveling employees...; Question 318: Which of the following would best prepare a security team fo...; Question 319: Which of the following vulnerabilities is exploited when an ...; Question 320: Which of the following best protects sensitive data in trans...; Question 321: Which of the following would most likely prevent exploitatio...; Question 322: Which of the following should an organization focus on the m...; Question 323: Which of the following is a common data removal option for c...; Question 324: An employee in the accounting department receives an email c...; Question 325: A company discovered its data was advertised for sale on the...; Question 326: Which of the following phases of an incident response involv...; Question 327: The management team reports employees are missing features o...; Question 328: A forensic engineer determines that the root cause of a comp...; Question 329: A security team installs an IPS on an organization's network...; Question 330: A company wants to reduce the time and expense associated wi...; Question 331: A financial institution would like to store its customer dat...; Question 332: Which of the following is the most likely benefit of conduct...; Question 333: A company's accounts payable clerk receives a message from a...; Question 334: A security analyst wants to automate a task that shares data...; Question 335: Which security controls is a company implementing by deployi...; Question 336: A company is implementing a vendor's security tool in the cl...; Question 337: Which of the following is the best way to improve the confid...; Question 338: A company is utilizing an offshore team to help support the ...; Question 339: A security officer is implementing a security awareness prog...; Question 340: An alert references attacks associated with a zero-day explo...; Question 341: The local administrator account for a company's VPN applianc...; Question 342: Which of the following is the phase in the incident response...; Question 343: A site reliability engineer is designing a recovery strategy...; Question 344: A spoofed identity was detected for a digital certificate. W...; Question 345: A company wants to update its disaster recovery plan to incl...; Question 346: A security administrator observed the following in a web ser...; Question 347: Which of the following methods to secure credit card data is...; Question 348: During a routine audit, an analyst discovers that a departme...

Question 68/348

LEAVE A REPLY

Download PDF File