SY0-701 Exam Dumps | A security administrator needs to reduce the attack surface in the company ' s data centers. Which of

<< Prev Question Next Question >>

Question 286/329

A security administrator needs to reduce the attack surface in the company's data centers. Which of the following should the security administrator do to complete this task?

A. Implement a honeynet.

B. Define Group Policy on the servers.

C. Configure the servers for high availability.

D. Upgrade end-of-support operating systems.

Question List (329q): Question 1: A company purchased cyber insurance to address items listed ...; Question 2: The security operations center is researching an event conce...; Question 3: Which of the following should a security administrator adher...; Question 4: A security analyst wants to automate a task that shares data...; Question 5: Which of the following allows for the attribution of message...; Question 6: Which of the following activities are associated with vulner...; Question 7: Which of the following strategies most effectively protects ...; Question 8: Which of the following actions would reduce the number of fa...; Question 9: A company wants to track modifications to the code used to b...; Question 10: Employees sign an agreement that restricts specific activiti...; Question 11: An employee fell for a phishing scam, which allowed an attac...; Question 12: An external vendor recently visited a company ' s headquarte...; Question 13: A security audit of an organization revealed that most of th...; Question 14: A bank set up a new server that contains customers ' Pll. Wh...; Question 15: Which of the following considerations is the most important ...; Question 16: Which of the following examples would be best mitigated by i...; Question 17: A software developer would like to ensure. The source code c...; Question 18: A security administrator is deploying a DLP solution to prev...; Question 19: A systems administrator works for a local hospital and needs...; Question 20: Which of the following is the best way to validate the integ...; Question 21: Which of the following should an internal auditor check for ...; Question 22: A systems administrator notices that one of the systems crit...; Question 23: Which of the following threat actors is the most likely to u...; Question 24: An attacker posing as the Chief Executive Officer calls an e...; Question 25: A company implemented an MDM policy 10 mitigate risks after ...; Question 26: Which of the following is the act of proving to a customer t...; Question 27: A security team created a document that details the order in...; Question 28: Which of the following best describes the main difference be...; Question 29: An organization wants to deploy software in a container envi...; Question 30: Employees in the research and development business unit rece...; Question 31: An analyst identifies that multiple users have the same pass...; Question 32: A company ' s accounting department receives an urgent payme...; Question 33: A business uses Wi-Fi with content filleting enabled. An emp...; Question 34: Which of the following consequences would a retail chain mos...; Question 35: Which of the following vulnerabilities is associated with in...; Question 36: An administrator is creating a secure method for a contracto...; Question 37: Which of the following exercises should an organization use ...; Question 38: Which of the following is the best way to remove personal da...; Question 39: An organization wants to improve the company ' s security au...; Question 40: Which of the following provides the best protection against ...; Question 41: After a company was compromised, customers initiated a lawsu...; Question 42: A security engineer is installing an IPS to block signature-...; Question 43: Which of the following is the best way to improve the confid...; Question 44: Which of the following should be used to prevent changes to ...; Question 45: An organization is looking to optimize its environment and r...; Question 46: A company ' s antivirus solution is effective in blocking ma...; Question 47: While investigating a recent security breach an analyst find...; Question 48: Which of the following most accurately describes the order i...; Question 49: Various company stakeholders meet to discuss roles and respo...; Question 50: Which of the following data protection strategies can be use...; Question 51: A few weeks after deploying additional email servers, employ...; Question 52: A security analyst is creating base for the server team to f...; Question 53: Which of the following best explains how open service ports ...; Question 54: Which of the following would a security administrator use to...; Question 55: A site reliability engineer is designing a recovery strategy...; Question 56: Which of the following methods would most likely be used to ...; Question 57: An administrator learns that users are receiving large quant...; Question 58: A systems administrator is concerned users are accessing ema...; Question 59: Which of the following techniques would identify whether dat...; Question 60: A company identified the potential for malicious insiders to...; Question 61: An employee from the accounting department logs in to the we...; Question 62: Which of the following would be most useful in determining w...; Question 63: A systems administrator wants to use a technical solution to...; Question 64: At the start of a penetration test, the tester checks OSINT ...; Question 65: Which of the following aspects of the data management life c...; Question 66: An engineer moved to another team and is unable to access th...; Question 67: During a recent log review, an analyst discovers evidence of...; Question 68: A security analyst and the management team are reviewing the...; Question 69: Which of the following would most likely be used by attacker...; Question 70: Which of the following is required for an organization to pr...; Question 71: The Chief Information Security Officer (CISO) requires that ...; Question 72: Which of the following can automate vulnerability management...; Question 73: Which of the following are cases in which an engineer should...; Question 74: A customer has a contract with a CSP and wants to identify w...; Question 75: An administrator discovers that some files on a database ser...; Question 76: Which of the following is the best method to reduce the atta...; Question 77: Cadets speaking a foreign language are using company phone n...; Question 78: Which of the following is an example of a false negative vul...; Question 79: A systems administrator is auditing all company servers to e...; Question 80: A security analyst is reviewing alerts in the SIEM related t...; Question 81: Which of the following should be used to ensure an attacker ...; Question 82: A company wants to verify that the software the company is d...; Question 83: An administrator must replace an expired SSL certificate. Wh...; Question 84: Which of the following is a type of vulnerability that may r...; Question 85: A company with a high-availability website is looking to har...; Question 86: An organization would like to store customer data on a separ...; Question 87: Which of the following is the most common data loss path for...; Question 88: Which of the following is the best way to prevent data from ...; Question 89: An employee asks a security analyst to scan a suspicious ema...; Question 90: Which of the following best describe why a process would req...; Question 91: Which of the following organizational documents is most ofte...; Question 92: Which of the following teams combines both offensive and def...; Question 93: Which of the following tools is best for logging and monitor...; Question 94: An organization disabled unneeded services and placed a fire...; Question 95: Which of the following best practices gives administrators a...; Question 96: An administrator was notified that a user logged in remotely...; Question 97: The management team wants to assess the cybersecurity team '...; Question 98: An employee recently resigned from a company. The employee w...; Question 99: An organization has recently decided to implement SSO. The r...; Question 100: An administrator has identified and fingerprinted specific f...; Question 101: Which of the following is a benefit of vendor diversity?...; Question 102: A company makes a change during the appropriate change windo...; Question 103: A security analyst receives an alert from a web server that ...; Question 104: After creating a contract for IT contractors, the human reso...; Question 105: Which of the following describes the procedures a penetratio...; Question 106: Which of the following definitions best describes the concep...; Question 107: A company processes and stores sensitive data on its own sys...; Question 108: An administrator investigating an incident is concerned abou...; Question 109: Which of the following is a type of vulnerability that invol...; Question 110: A systems administrator is changing the password policy with...; Question 111: A company has a website in a server cluster. One server is e...; Question 112: A security team wants to work with the development team to e...; Question 113: An alert references attacks associated with a zero-day explo...; Question 114: Users at a company are reporting they are unable to access t...; Question 115: Which of the following is the best way to securely store an ...; Question 116: A penetration test identifies that an SMBvl Is enabled on mu...; Question 117: A company wants to reduce the time and expense associated wi...; Question 118: The executive management team is mandating the company devel...; Question 119: Which of the following solutions would most likely be used i...; Question 120: Which of the following is a directive managerial control?...; Question 121: A systems administrator needs to encrypt all data on employe...; Question 122: An enterprise has been experiencing attacks focused on explo...; Question 123: A business received a small grant to migrate its infrastruct...; Question 124: A systems administrator wants to prevent users from being ab...; Question 125: A systems administrator notices that the research and develo...; Question 126: A security analyst wants to better understand the behavior o...; Question 127: A malicious update was distributed to a common software plat...; Question 128: A security analyst receives an alert from a corporate endpoi...; Question 129: Which of the following is the most likely outcome if a large...; Question 130: A company is concerned with supply chain compromise of new s...; Question 131: Which of the following is an example of change management?...; Question 132: During an investigation, a security analyst discovers traffi...; Question 133: An organization has learned that its data is being exchanged...; Question 134: Visitors to a secured facility are required to check in with...; Question 135: An IT manager is putting together a documented plan describi...; Question 136: Which of the following are the most important considerations...; Question 137: A security analyst identifies an incident in the network. Wh...; Question 138: Which of the following would most likely be deployed to obta...; Question 139: Which of the following security principles most likely requi...; Question 140: Which of the following allows a systems administrator to tun...; Question 141: Various stakeholders are meeting to discuss their hypothetic...; Question 142: A security officer observes that a software development team...; Question 143: Which of the following techniques would attract the attentio...; Question 144: Which of the following is an algorithm performed to verify t...; Question 145: Which of the following activities should a systems administr...; Question 146: A certificate authority needs to post information about expi...; Question 147: In which of the following will unencrypted PLC management tr...; Question 148: Which of the following should a security analyst consider wh...; Question 149: An IT security team is concerned about the confidentiality o...; Question 150: After an audit, an administrator discovers all users have ac...; Question 151: An organization's internet-facing website was compromised wh...; Question 152: An accountant is transferring information to a bank over FTP...; Question 153: A company ' s online shopping website became unusable shortl...; Question 154: Which of the following best describes the practice of resear...; Question 155: Which of the following describes a situation where a user is...; Question 156: An analyst discovers a suspicious item in the SQL server log...; Question 157: After a series of account compromises and credential misuse,...; Question 158: A security administrator recently reset local passwords and ...; Question 159: Which of the following incident response activities ensures ...; Question 160: Which of the following is the most important element when de...; Question 161: An organization experiences a cybersecurity incident involvi...; Question 162: An organization issued new laptops to all employees and want...; Question 163: A small business initially plans to open common communicatio...; Question 164: A company is developing a business continuity strategy and n...; Question 165: In a rush to meet an end-of-year business goal, the IT depar...; Question 166: A company needs to provide administrative access to internal...; Question 167: Which of the following activities is the first stage in the ...; Question 168: A recent penetration test identified that an attacker could ...; Question 169: Which of the following is a type of vulnerability that refer...; Question 170: A company has begun labeling all laptops with asset inventor...; Question 171: A new vulnerability enables a type of malware that allows th...; Question 172: After failing an audit twice, an organization has been order...; Question 173: A user is attempting to patch a critical system, but the pat...; Question 174: Which of the following is a reason environmental variables a...; Question 175: During a SQL update of a database, a temporary field that wa...; Question 176: Which of the following attacks primarily targets insecure ne...; Question 177: After a security awareness training session, a user called t...; Question 178: While reviewing logs, a security administrator identifies th...; Question 179: Which of the following is an example of a certificate that i...; Question 180: A security analyst needs to improve the company's authentica...; Question 181: The Chief Information Security Officer wants to discuss opti...; Question 182: A software developer released a new application and is distr...; Question 183: A security analyst has determined that a security breach wou...; Question 184: Which of the following should a security operations center u...; Question 185: A company ' s end users are reporting that they are unable t...; Question 186: During the onboarding process, an employee needs to create a...; Question 187: A systems administrator needs to provide traveling employees...; Question 188: The physical security team at a company receives reports tha...; Question 189: A company plans to secure its systems by: Preventing users f...; Question 190: Which of the following best describes why me SMS DIP authent...; Question 191: An unknown source has attacked an organization's network mul...; Question 192: While reviewing a recent compromise, a forensics team discov...; Question 193: Which of the following would be the best ways to ensure only...; Question 194: Which of the following would help ensure a security analyst ...; Question 195: An organization has been experiencing issues with deleted ne...; Question 196: Which of the following techniques would identify whether dat...; Question 197: Which of the following can best contribute to prioritizing p...; Question 198: During a penetration test in a hypervisor, the security engi...; Question 199: Which of the following is the most likely motivation for a h...; Question 200: Which vulnerability is most likely mitigated by setting up a...; Question 201: Employees are missing features on company-provided tablets, ...; Question 202: Which of the following can be used to mitigate attacks from ...; Question 203: Which of the following prevents unauthorized modifications t...; Question 204: A manufacturing organization receives the results from a pen...; Question 205: A security analyst receives an alert that there was an attem...; Question 206: Which solution is most likely used in the financial industry...; Question 207: An employee in the accounting department receives an email c...; Question 208: Which of the following describes the category of data that i...; Question 209: Which of the following would be the greatest concern for a c...; Question 210: A technician needs to apply a high-priority patch to a produ...; Question 211: A user sends an email that includes a digital signature for ...; Question 212: Which of the following is prevented by proper data sanitizat...; Question 213: Which of the following is the best mitigation for a zero-day...; Question 214: A security analyst is reviewing the security of a SaaS appli...; Question 215: A security analyst scans a company ' s public network and di...; Question 216: Which of the following risk management strategies should an ...; Question 217: Which of the following is a benefit of an RTO when conductin...; Question 218: After reviewing the following vulnerability scanning report:...; Question 219: A company discovers suspicious transactions that were entere...; Question 220: Which of the following would be the best way to handle a cri...; Question 221: Which of the following is used to validate a certificate whe...; Question 222: Which of the following should an organization focus on the m...; Question 223: Which of the following would best allow a company to prevent...; Question 224: Which of the following activities should be performed first ...; Question 225: During a SQL update of a database, a temporary field used as...; Question 226: A security report shows that during a two-week test period. ...; Question 227: A security team is reviewing the findings in a report that w...; Question 228: A security team purchases a tool for cloud security posture ...; Question 229: Which of the following activities is included in the post-in...; Question 230: Which of the following would best explain why a security ana...; Question 231: Which of the following is most likely associated with introd...; Question 232: A government worker secretly copies classified files that co...; Question 233: Which of the following would most likely prevent exploitatio...; Question 234: A new employee logs in to the email system for the first tim...; Question 235: Which of the following actions could a security engineer tak...; Question 236: A Chief Information Security Officer (CISO) wants to explici...; Question 237: A security administrator protects passwords by using hashing...; Question 238: A visitor plugs a laptop into a network jack in the lobby an...; Question 239: A security analyst sees an increase of vulnerabilities on wo...; Question 240: Which of the following phases of an incident response involv...; Question 241: Which of the following are the best for hardening end-user d...; Question 242: You are security administrator investigating a potential inf...; Question 243: A company is currently utilizing usernames and passwords, an...; Question 244: A Chief Information Security Officer (CISO) has developed in...; Question 245: An administrator is installing an SSL certificate on a new s...; Question 246: An employee clicks a malicious link in an email that appears...; Question 247: Which of the following vulnerabilities is exploited when an ...; Question 248: The Cruel Information Security Officer (CISO) asks a securit...; Question 249: Which of the following is a common source of unintentional c...; Question 250: Which of the following is the most likely reason a security ...; Question 251: Which of the following tasks is typically included in the BI...; Question 252: Which of the following data types best describes an AI tool ...; Question 253: Which of the following is a qualitative approach to risk ana...; Question 254: Which of the following hardening techniques must be applied ...; Question 255: A company ' s Chief Information Security Officer (CISO) want...; Question 256: The Chief Information Security Officer wants to put security...; Question 257: A company has yearly engagements with a service provider. Th...; Question 258: Which of the following are the best methods for hardening en...; Question 259: Which of the following would best explain why a security ana...; Question 260: The internal audit team determines a software application is...; Question 261: A systems administrator is creating a script that would save...; Question 262: A software development manager wants to ensure the authentic...; Question 263: A security analyst is prioritizing vulnerability scan result...; Question 264: A security consultant needs secure, remote access to a clien...; Question 265: Which of the following should be used to select a label for ...; Question 266: A security analyst investigates an incident in which a Power...; Question 267: Which of the following should be used to ensure that a new s...; Question 268: An employee receives a text message from an unknown number c...; Question 269: A security officer is implementing a security awareness prog...; Question 270: A company is in the process of migrating to cloud-based serv...; Question 271: A company asks a vendor to help its internal red team with a...; Question 272: Which of the following is a technical security control?...; Question 273: Which of the following cryptographic methods is preferred fo...; Question 274: Which of the following would best prepare a security team fo...; Question 275: A Chief Information Security Officer would like to conduct f...; Question 276: The private key for a website was stolen, and a new certific...; Question 277: Which of the following security concepts is accomplished whe...; Question 278: An IT administrator needs to ensure data retention standards...; Question 279: During a routine audit, an analyst discovers that a departme...; Question 280: An administrator needs to perform server hardening before de...; Question 281: A security analyst determines that a security breach will ha...; Question 282: Which of the following is the most effective way to protect ...; Question 283: Which of the following is the main consideration when a lega...; Question 284: A company wants to use new Wi-Fi-enabled environmental senso...; Question 285: Which of the following describes an executive team that is m...; Question 286: A security administrator needs to reduce the attack surface ...; Question 287: A company is working with a vendor to perform a penetration ...; Question 288: Which of the following is a benefit of launching a bug bount...; Question 289: A security analyst learns that an attack vector, used as par...; Question 290: An organization is implementing a COPE mobile device managem...; Question 291: A security analyst is examining a penetration test report an...; Question 292: A company relies on open-source software libraries to build ...; Question 293: A company wants to ensure secure remote access to its intern...; Question 294: An organization maintains intellectual property that it want...; Question 295: Which of the following types of vulnerabilities involves att...; Question 296: The security operations center is researching an event conce...; Question 297: An analyst is evaluating the implementation of Zero Trust pr...; Question 298: Which of the following roles, according to the shared respon...; Question 299: Which of the following best represents how frequently an inc...; Question 300: Which of the following mitigation techniques would a securit...; Question 301: A systems administrator is creating a script that would save...; Question 302: An organization is leveraging a VPN between its headquarters...; Question 303: A user would like to install software and features that are ...; Question 304: A company performs a risk assessment on the information secu...; Question 305: While conducting a business continuity tabletop exercise, th...; Question 306: Which of the following is the best way to prevent an unautho...; Question 307: Which of the following best describes the concept of informa...; Question 308: A company wants to minimize the chance of its outgoing marke...; Question 309: A company is implementing a vendor ' s security tool in the ...; Question 310: Which of the following would best ensure a controlled versio...; Question 311: Which of the following describes the reason for using an MDM...; Question 312: Which of the following is a feature of a next-generation SIE...; Question 313: A nation-state attacker gains access to the email accounts o...; Question 314: Which of the following activities would involve members of t...; Question 315: Which of the following is a social engineering attack in whi...; Question 316: While troubleshooting a firewall configuration, a technician...; Question 317: The Chief Information Security Officer (CISO) has determined...; Question 318: Which of the following is the best safeguard to protect agai...; Question 319: Which of the following can best protect against an employee ...; Question 320: A security analyst investigates abnormal outbound traffic fr...; Question 321: A network security analyst monitors the network's IDS, which...; Question 322: Sine a recent upgrade (o a WLAN infrastructure, several mobi...; Question 323: A growing organization, which hosts an externally accessible...; Question 324: A security team is setting up a new environment for hosting ...; Question 325: A company needs to determine whether authentication weakness...; Question 326: An organization designs an inbound firewall with a fail-open...; Question 327: A security consultant is working with a client that wants to...; Question 328: An organization wants a third-party vendor to do a penetrati...; Question 329: A security practitioner completes a vulnerability assessment...

Question 286/329

LEAVE A REPLY

Download PDF File