SY0-701 Exam Dumps | An unknown source has attacked an organization's network multiple times. The organization has a firewall

<< Prev Question Next Question >>

Question 191/329

An unknown source has attacked an organization's network multiple times. The organization has a firewall but no other source of protection against these attacks. Which of the following is the best security item to add?

A. SIEM

B. Load balancer

C. UTM

D. IPS

Question List (329q): Question 1: A company purchased cyber insurance to address items listed ...; Question 2: The security operations center is researching an event conce...; Question 3: Which of the following should a security administrator adher...; Question 4: A security analyst wants to automate a task that shares data...; Question 5: Which of the following allows for the attribution of message...; Question 6: Which of the following activities are associated with vulner...; Question 7: Which of the following strategies most effectively protects ...; Question 8: Which of the following actions would reduce the number of fa...; Question 9: A company wants to track modifications to the code used to b...; Question 10: Employees sign an agreement that restricts specific activiti...; Question 11: An employee fell for a phishing scam, which allowed an attac...; Question 12: An external vendor recently visited a company ' s headquarte...; Question 13: A security audit of an organization revealed that most of th...; Question 14: A bank set up a new server that contains customers ' Pll. Wh...; Question 15: Which of the following considerations is the most important ...; Question 16: Which of the following examples would be best mitigated by i...; Question 17: A software developer would like to ensure. The source code c...; Question 18: A security administrator is deploying a DLP solution to prev...; Question 19: A systems administrator works for a local hospital and needs...; Question 20: Which of the following is the best way to validate the integ...; Question 21: Which of the following should an internal auditor check for ...; Question 22: A systems administrator notices that one of the systems crit...; Question 23: Which of the following threat actors is the most likely to u...; Question 24: An attacker posing as the Chief Executive Officer calls an e...; Question 25: A company implemented an MDM policy 10 mitigate risks after ...; Question 26: Which of the following is the act of proving to a customer t...; Question 27: A security team created a document that details the order in...; Question 28: Which of the following best describes the main difference be...; Question 29: An organization wants to deploy software in a container envi...; Question 30: Employees in the research and development business unit rece...; Question 31: An analyst identifies that multiple users have the same pass...; Question 32: A company ' s accounting department receives an urgent payme...; Question 33: A business uses Wi-Fi with content filleting enabled. An emp...; Question 34: Which of the following consequences would a retail chain mos...; Question 35: Which of the following vulnerabilities is associated with in...; Question 36: An administrator is creating a secure method for a contracto...; Question 37: Which of the following exercises should an organization use ...; Question 38: Which of the following is the best way to remove personal da...; Question 39: An organization wants to improve the company ' s security au...; Question 40: Which of the following provides the best protection against ...; Question 41: After a company was compromised, customers initiated a lawsu...; Question 42: A security engineer is installing an IPS to block signature-...; Question 43: Which of the following is the best way to improve the confid...; Question 44: Which of the following should be used to prevent changes to ...; Question 45: An organization is looking to optimize its environment and r...; Question 46: A company ' s antivirus solution is effective in blocking ma...; Question 47: While investigating a recent security breach an analyst find...; Question 48: Which of the following most accurately describes the order i...; Question 49: Various company stakeholders meet to discuss roles and respo...; Question 50: Which of the following data protection strategies can be use...; Question 51: A few weeks after deploying additional email servers, employ...; Question 52: A security analyst is creating base for the server team to f...; Question 53: Which of the following best explains how open service ports ...; Question 54: Which of the following would a security administrator use to...; Question 55: A site reliability engineer is designing a recovery strategy...; Question 56: Which of the following methods would most likely be used to ...; Question 57: An administrator learns that users are receiving large quant...; Question 58: A systems administrator is concerned users are accessing ema...; Question 59: Which of the following techniques would identify whether dat...; Question 60: A company identified the potential for malicious insiders to...; Question 61: An employee from the accounting department logs in to the we...; Question 62: Which of the following would be most useful in determining w...; Question 63: A systems administrator wants to use a technical solution to...; Question 64: At the start of a penetration test, the tester checks OSINT ...; Question 65: Which of the following aspects of the data management life c...; Question 66: An engineer moved to another team and is unable to access th...; Question 67: During a recent log review, an analyst discovers evidence of...; Question 68: A security analyst and the management team are reviewing the...; Question 69: Which of the following would most likely be used by attacker...; Question 70: Which of the following is required for an organization to pr...; Question 71: The Chief Information Security Officer (CISO) requires that ...; Question 72: Which of the following can automate vulnerability management...; Question 73: Which of the following are cases in which an engineer should...; Question 74: A customer has a contract with a CSP and wants to identify w...; Question 75: An administrator discovers that some files on a database ser...; Question 76: Which of the following is the best method to reduce the atta...; Question 77: Cadets speaking a foreign language are using company phone n...; Question 78: Which of the following is an example of a false negative vul...; Question 79: A systems administrator is auditing all company servers to e...; Question 80: A security analyst is reviewing alerts in the SIEM related t...; Question 81: Which of the following should be used to ensure an attacker ...; Question 82: A company wants to verify that the software the company is d...; Question 83: An administrator must replace an expired SSL certificate. Wh...; Question 84: Which of the following is a type of vulnerability that may r...; Question 85: A company with a high-availability website is looking to har...; Question 86: An organization would like to store customer data on a separ...; Question 87: Which of the following is the most common data loss path for...; Question 88: Which of the following is the best way to prevent data from ...; Question 89: An employee asks a security analyst to scan a suspicious ema...; Question 90: Which of the following best describe why a process would req...; Question 91: Which of the following organizational documents is most ofte...; Question 92: Which of the following teams combines both offensive and def...; Question 93: Which of the following tools is best for logging and monitor...; Question 94: An organization disabled unneeded services and placed a fire...; Question 95: Which of the following best practices gives administrators a...; Question 96: An administrator was notified that a user logged in remotely...; Question 97: The management team wants to assess the cybersecurity team '...; Question 98: An employee recently resigned from a company. The employee w...; Question 99: An organization has recently decided to implement SSO. The r...; Question 100: An administrator has identified and fingerprinted specific f...; Question 101: Which of the following is a benefit of vendor diversity?...; Question 102: A company makes a change during the appropriate change windo...; Question 103: A security analyst receives an alert from a web server that ...; Question 104: After creating a contract for IT contractors, the human reso...; Question 105: Which of the following describes the procedures a penetratio...; Question 106: Which of the following definitions best describes the concep...; Question 107: A company processes and stores sensitive data on its own sys...; Question 108: An administrator investigating an incident is concerned abou...; Question 109: Which of the following is a type of vulnerability that invol...; Question 110: A systems administrator is changing the password policy with...; Question 111: A company has a website in a server cluster. One server is e...; Question 112: A security team wants to work with the development team to e...; Question 113: An alert references attacks associated with a zero-day explo...; Question 114: Users at a company are reporting they are unable to access t...; Question 115: Which of the following is the best way to securely store an ...; Question 116: A penetration test identifies that an SMBvl Is enabled on mu...; Question 117: A company wants to reduce the time and expense associated wi...; Question 118: The executive management team is mandating the company devel...; Question 119: Which of the following solutions would most likely be used i...; Question 120: Which of the following is a directive managerial control?...; Question 121: A systems administrator needs to encrypt all data on employe...; Question 122: An enterprise has been experiencing attacks focused on explo...; Question 123: A business received a small grant to migrate its infrastruct...; Question 124: A systems administrator wants to prevent users from being ab...; Question 125: A systems administrator notices that the research and develo...; Question 126: A security analyst wants to better understand the behavior o...; Question 127: A malicious update was distributed to a common software plat...; Question 128: A security analyst receives an alert from a corporate endpoi...; Question 129: Which of the following is the most likely outcome if a large...; Question 130: A company is concerned with supply chain compromise of new s...; Question 131: Which of the following is an example of change management?...; Question 132: During an investigation, a security analyst discovers traffi...; Question 133: An organization has learned that its data is being exchanged...; Question 134: Visitors to a secured facility are required to check in with...; Question 135: An IT manager is putting together a documented plan describi...; Question 136: Which of the following are the most important considerations...; Question 137: A security analyst identifies an incident in the network. Wh...; Question 138: Which of the following would most likely be deployed to obta...; Question 139: Which of the following security principles most likely requi...; Question 140: Which of the following allows a systems administrator to tun...; Question 141: Various stakeholders are meeting to discuss their hypothetic...; Question 142: A security officer observes that a software development team...; Question 143: Which of the following techniques would attract the attentio...; Question 144: Which of the following is an algorithm performed to verify t...; Question 145: Which of the following activities should a systems administr...; Question 146: A certificate authority needs to post information about expi...; Question 147: In which of the following will unencrypted PLC management tr...; Question 148: Which of the following should a security analyst consider wh...; Question 149: An IT security team is concerned about the confidentiality o...; Question 150: After an audit, an administrator discovers all users have ac...; Question 151: An organization's internet-facing website was compromised wh...; Question 152: An accountant is transferring information to a bank over FTP...; Question 153: A company ' s online shopping website became unusable shortl...; Question 154: Which of the following best describes the practice of resear...; Question 155: Which of the following describes a situation where a user is...; Question 156: An analyst discovers a suspicious item in the SQL server log...; Question 157: After a series of account compromises and credential misuse,...; Question 158: A security administrator recently reset local passwords and ...; Question 159: Which of the following incident response activities ensures ...; Question 160: Which of the following is the most important element when de...; Question 161: An organization experiences a cybersecurity incident involvi...; Question 162: An organization issued new laptops to all employees and want...; Question 163: A small business initially plans to open common communicatio...; Question 164: A company is developing a business continuity strategy and n...; Question 165: In a rush to meet an end-of-year business goal, the IT depar...; Question 166: A company needs to provide administrative access to internal...; Question 167: Which of the following activities is the first stage in the ...; Question 168: A recent penetration test identified that an attacker could ...; Question 169: Which of the following is a type of vulnerability that refer...; Question 170: A company has begun labeling all laptops with asset inventor...; Question 171: A new vulnerability enables a type of malware that allows th...; Question 172: After failing an audit twice, an organization has been order...; Question 173: A user is attempting to patch a critical system, but the pat...; Question 174: Which of the following is a reason environmental variables a...; Question 175: During a SQL update of a database, a temporary field that wa...; Question 176: Which of the following attacks primarily targets insecure ne...; Question 177: After a security awareness training session, a user called t...; Question 178: While reviewing logs, a security administrator identifies th...; Question 179: Which of the following is an example of a certificate that i...; Question 180: A security analyst needs to improve the company's authentica...; Question 181: The Chief Information Security Officer wants to discuss opti...; Question 182: A software developer released a new application and is distr...; Question 183: A security analyst has determined that a security breach wou...; Question 184: Which of the following should a security operations center u...; Question 185: A company ' s end users are reporting that they are unable t...; Question 186: During the onboarding process, an employee needs to create a...; Question 187: A systems administrator needs to provide traveling employees...; Question 188: The physical security team at a company receives reports tha...; Question 189: A company plans to secure its systems by: Preventing users f...; Question 190: Which of the following best describes why me SMS DIP authent...; Question 191: An unknown source has attacked an organization's network mul...; Question 192: While reviewing a recent compromise, a forensics team discov...; Question 193: Which of the following would be the best ways to ensure only...; Question 194: Which of the following would help ensure a security analyst ...; Question 195: An organization has been experiencing issues with deleted ne...; Question 196: Which of the following techniques would identify whether dat...; Question 197: Which of the following can best contribute to prioritizing p...; Question 198: During a penetration test in a hypervisor, the security engi...; Question 199: Which of the following is the most likely motivation for a h...; Question 200: Which vulnerability is most likely mitigated by setting up a...; Question 201: Employees are missing features on company-provided tablets, ...; Question 202: Which of the following can be used to mitigate attacks from ...; Question 203: Which of the following prevents unauthorized modifications t...; Question 204: A manufacturing organization receives the results from a pen...; Question 205: A security analyst receives an alert that there was an attem...; Question 206: Which solution is most likely used in the financial industry...; Question 207: An employee in the accounting department receives an email c...; Question 208: Which of the following describes the category of data that i...; Question 209: Which of the following would be the greatest concern for a c...; Question 210: A technician needs to apply a high-priority patch to a produ...; Question 211: A user sends an email that includes a digital signature for ...; Question 212: Which of the following is prevented by proper data sanitizat...; Question 213: Which of the following is the best mitigation for a zero-day...; Question 214: A security analyst is reviewing the security of a SaaS appli...; Question 215: A security analyst scans a company ' s public network and di...; Question 216: Which of the following risk management strategies should an ...; Question 217: Which of the following is a benefit of an RTO when conductin...; Question 218: After reviewing the following vulnerability scanning report:...; Question 219: A company discovers suspicious transactions that were entere...; Question 220: Which of the following would be the best way to handle a cri...; Question 221: Which of the following is used to validate a certificate whe...; Question 222: Which of the following should an organization focus on the m...; Question 223: Which of the following would best allow a company to prevent...; Question 224: Which of the following activities should be performed first ...; Question 225: During a SQL update of a database, a temporary field used as...; Question 226: A security report shows that during a two-week test period. ...; Question 227: A security team is reviewing the findings in a report that w...; Question 228: A security team purchases a tool for cloud security posture ...; Question 229: Which of the following activities is included in the post-in...; Question 230: Which of the following would best explain why a security ana...; Question 231: Which of the following is most likely associated with introd...; Question 232: A government worker secretly copies classified files that co...; Question 233: Which of the following would most likely prevent exploitatio...; Question 234: A new employee logs in to the email system for the first tim...; Question 235: Which of the following actions could a security engineer tak...; Question 236: A Chief Information Security Officer (CISO) wants to explici...; Question 237: A security administrator protects passwords by using hashing...; Question 238: A visitor plugs a laptop into a network jack in the lobby an...; Question 239: A security analyst sees an increase of vulnerabilities on wo...; Question 240: Which of the following phases of an incident response involv...; Question 241: Which of the following are the best for hardening end-user d...; Question 242: You are security administrator investigating a potential inf...; Question 243: A company is currently utilizing usernames and passwords, an...; Question 244: A Chief Information Security Officer (CISO) has developed in...; Question 245: An administrator is installing an SSL certificate on a new s...; Question 246: An employee clicks a malicious link in an email that appears...; Question 247: Which of the following vulnerabilities is exploited when an ...; Question 248: The Cruel Information Security Officer (CISO) asks a securit...; Question 249: Which of the following is a common source of unintentional c...; Question 250: Which of the following is the most likely reason a security ...; Question 251: Which of the following tasks is typically included in the BI...; Question 252: Which of the following data types best describes an AI tool ...; Question 253: Which of the following is a qualitative approach to risk ana...; Question 254: Which of the following hardening techniques must be applied ...; Question 255: A company ' s Chief Information Security Officer (CISO) want...; Question 256: The Chief Information Security Officer wants to put security...; Question 257: A company has yearly engagements with a service provider. Th...; Question 258: Which of the following are the best methods for hardening en...; Question 259: Which of the following would best explain why a security ana...; Question 260: The internal audit team determines a software application is...; Question 261: A systems administrator is creating a script that would save...; Question 262: A software development manager wants to ensure the authentic...; Question 263: A security analyst is prioritizing vulnerability scan result...; Question 264: A security consultant needs secure, remote access to a clien...; Question 265: Which of the following should be used to select a label for ...; Question 266: A security analyst investigates an incident in which a Power...; Question 267: Which of the following should be used to ensure that a new s...; Question 268: An employee receives a text message from an unknown number c...; Question 269: A security officer is implementing a security awareness prog...; Question 270: A company is in the process of migrating to cloud-based serv...; Question 271: A company asks a vendor to help its internal red team with a...; Question 272: Which of the following is a technical security control?...; Question 273: Which of the following cryptographic methods is preferred fo...; Question 274: Which of the following would best prepare a security team fo...; Question 275: A Chief Information Security Officer would like to conduct f...; Question 276: The private key for a website was stolen, and a new certific...; Question 277: Which of the following security concepts is accomplished whe...; Question 278: An IT administrator needs to ensure data retention standards...; Question 279: During a routine audit, an analyst discovers that a departme...; Question 280: An administrator needs to perform server hardening before de...; Question 281: A security analyst determines that a security breach will ha...; Question 282: Which of the following is the most effective way to protect ...; Question 283: Which of the following is the main consideration when a lega...; Question 284: A company wants to use new Wi-Fi-enabled environmental senso...; Question 285: Which of the following describes an executive team that is m...; Question 286: A security administrator needs to reduce the attack surface ...; Question 287: A company is working with a vendor to perform a penetration ...; Question 288: Which of the following is a benefit of launching a bug bount...; Question 289: A security analyst learns that an attack vector, used as par...; Question 290: An organization is implementing a COPE mobile device managem...; Question 291: A security analyst is examining a penetration test report an...; Question 292: A company relies on open-source software libraries to build ...; Question 293: A company wants to ensure secure remote access to its intern...; Question 294: An organization maintains intellectual property that it want...; Question 295: Which of the following types of vulnerabilities involves att...; Question 296: The security operations center is researching an event conce...; Question 297: An analyst is evaluating the implementation of Zero Trust pr...; Question 298: Which of the following roles, according to the shared respon...; Question 299: Which of the following best represents how frequently an inc...; Question 300: Which of the following mitigation techniques would a securit...; Question 301: A systems administrator is creating a script that would save...; Question 302: An organization is leveraging a VPN between its headquarters...; Question 303: A user would like to install software and features that are ...; Question 304: A company performs a risk assessment on the information secu...; Question 305: While conducting a business continuity tabletop exercise, th...; Question 306: Which of the following is the best way to prevent an unautho...; Question 307: Which of the following best describes the concept of informa...; Question 308: A company wants to minimize the chance of its outgoing marke...; Question 309: A company is implementing a vendor ' s security tool in the ...; Question 310: Which of the following would best ensure a controlled versio...; Question 311: Which of the following describes the reason for using an MDM...; Question 312: Which of the following is a feature of a next-generation SIE...; Question 313: A nation-state attacker gains access to the email accounts o...; Question 314: Which of the following activities would involve members of t...; Question 315: Which of the following is a social engineering attack in whi...; Question 316: While troubleshooting a firewall configuration, a technician...; Question 317: The Chief Information Security Officer (CISO) has determined...; Question 318: Which of the following is the best safeguard to protect agai...; Question 319: Which of the following can best protect against an employee ...; Question 320: A security analyst investigates abnormal outbound traffic fr...; Question 321: A network security analyst monitors the network's IDS, which...; Question 322: Sine a recent upgrade (o a WLAN infrastructure, several mobi...; Question 323: A growing organization, which hosts an externally accessible...; Question 324: A security team is setting up a new environment for hosting ...; Question 325: A company needs to determine whether authentication weakness...; Question 326: An organization designs an inbound firewall with a fail-open...; Question 327: A security consultant is working with a client that wants to...; Question 328: An organization wants a third-party vendor to do a penetrati...; Question 329: A security practitioner completes a vulnerability assessment...

Question 191/329

LEAVE A REPLY

Download PDF File