SY0-701 Exam Dumps | An organization plans to increase security controls for devices that connect to its internal network.

<< Prev Question Next Question >>

Question 211/407

An organization plans to increase security controls for devices that connect to its internal network. The additional security control must perform port-based authentication as part of the connection process. Which of the following should the organization implement?

A. EDR

B. SASE

C. 802.1X

D. WPA3

Question List (407q): Question 1: Which of the following is a vulnerability concern for end-of...; Question 2: After a recent ransomware attack on a company's system, an a...; Question 3: An employee receives a text message that appears to have bee...; Question 4: Which of the following is an example of memory injection?...; Question 5: The Chief Information Security Officer (CISO) has determined...; Question 6: Which of the following is best used to detect fraud by assig...; Question 7: Which of the following should be used to prevent changes to ...; Question 8: Which of the following data types best describes an AI tool ...; Question 9: A company plans to secure its systems by: Preventing users f...; Question 10: Which of the following agreements defines response time, esc...; Question 11: While a user reviews their email, a host gets infected by ma...; Question 12: A security analyst developed a script to automate a trivial ...; Question 13: Which of the following vulnerabilities is associated with in...; Question 14: A security analyst collects IOCs from a cybersecurity bullet...; Question 15: A security analyst is reviewing logs to identify the destina...; Question 16: An organization maintains intellectual property that it want...; Question 17: An organization conducts a self-evaluation with a phishing c...; Question 18: Visitors to a secured facility are required to check in with...; Question 19: Which of the following teams combines both offensive and def...; Question 20: A security engineer receives reports of unauthorized devices...; Question 21: Which of the following would be the best ways to ensure only...; Question 22: An IT security team is concerned about the confidentiality o...; Question 23: An administrator discovers a cross-site scripting vulnerabil...; Question 24: The security team notices that the Always On VPN solution so...; Question 25: Which of the following can be used to mitigate attacks from ...; Question 26: A legal department must maintain a backup from all devices t...; Question 27: Which of the following activities is included in the post-in...; Question 28: Which of the following describes how a risk event might affe...; Question 29: During an investigation, an incident response team attempts ...; Question 30: During a SQL update of a database, a temporary field used as...; Question 31: Which of the following should be used to aggregate log data ...; Question 32: Which of the following is a qualitative approach to risk ana...; Question 33: An organization wants a third-party vendor to do a penetrati...; Question 34: Which of the following is the most likely outcome if a large...; Question 35: Which of the following cryptographic solutions protects data...; Question 36: An enterprise is trying to limit outbound DNS traffic origin...; Question 37: An engineer has ensured that the switches are using the late...; Question 38: Which of the following is the stage in an investigation when...; Question 39: A penetration tester begins an engagement by performing port...; Question 40: For which of the following reasons would a systems administr...; Question 41: A security administrator is implementing encryption on all h...; Question 42: SIMULATION A recent black-box penetration test of http://exa...; Question 43: A company is considering an expansion of access controls for...; Question 44: An administrator must replace an expired SSL certificate. Wh...; Question 45: Which of the following roles, according to the shared respon...; Question 46: Which of the following prevents unauthorized modifications t...; Question 47: A security analyst is monitoring logs from the organization'...; Question 48: Which of the following best describes the concept of informa...; Question 49: A company relies on open-source software libraries to build ...; Question 50: A U.S.-based cloud-hosting provider wants to expand its data...; Question 51: A company's Chief Information Security Officer (CISO) wants ...; Question 52: Which of the following best practices gives administrators a...; Question 53: A company is considering an expansion of access controls for...; Question 54: Which of the following best describes a common use of OSINT?...; Question 55: An IT team rolls out a new management application that uses ...; Question 56: A financial institution would like to store its customer dat...; Question 57: Which of the following is an example of a certificate that i...; Question 58: A penetration tester must conduct a vulnerability assessment...; Question 59: A security administrator needs to protect the integrity of a...; Question 60: Which of the following threat actors is the most likely to u...; Question 61: An administrator wants to automate an account permissions up...; Question 62: Which of the following is a social engineering attack in whi...; Question 63: A security analyst discovers that a large number of employee...; Question 64: An analyst identifies that multiple users have the same pass...; Question 65: Which of the following is a prerequisite for a DLP solution?...; Question 66: A company asks a vendor to help its internal red team with a...; Question 67: A security analyst receives alerts about an internal system ...; Question 68: Which of the following is a common source of unintentional c...; Question 69: An attacker floods an organization's VoIP phone system with ...; Question 70: Which of the following would be best suited for constantly c...; Question 71: An administrator discovers that some files on a database ser...; Question 72: Which of the following security concepts is the best reason ...; Question 73: A security team receives reports about high latency and comp...; Question 74: A company is developing a critical system for the government...; Question 75: A company is in the process of migrating to cloud-based serv...; Question 76: An administrator must implement a solution that provides sec...; Question 77: Which of the following best distinguishes hacktivists from i...; Question 78: A security analyst must prevent remote users from accessing ...; Question 79: A security engineer configured a remote access VPN. The remo...; Question 80: A malicious insider from the marketing team alters records a...; Question 81: A Chief Security Officer signs off on a request to allow inb...; Question 82: Which of the following objectives is best achieved by a tabl...; Question 83: A security analyst is prioritizing vulnerability scan result...; Question 84: Which of the following risk management strategies should an ...; Question 85: A software developer released a new application and is distr...; Question 86: An analyst discovers a suspicious item in the SQL server log...; Question 87: A company is aware of a given security risk related to a spe...; Question 88: Which of the following aspects of the data management life c...; Question 89: A healthcare organization wants to provide a web application...; Question 90: A bank set up a new server that contains customers' Pll. Whi...; Question 91: An accounting clerk sent money to an attacker's bank account...; Question 92: An administrator has identified and fingerprinted specific f...; Question 93: Which of the following cryptographic methods is preferred fo...; Question 94: A new security regulation was announced that will take effec...; Question 95: Which of the following should be used to ensure an attacker ...; Question 96: A security analyst wants to better understand the behavior o...; Question 97: Various company stakeholders meet to discuss roles and respo...; Question 98: The Cruel Information Security Officer (CISO) asks a securit...; Question 99: A company decided to reduce the cost of its annual cyber ins...; Question 100: You are security administrator investigating a potential inf...; Question 101: A company uses multiple providers to send its marketing, int...; Question 102: A company discovers suspicious transactions that were entere...; Question 103: Which of the following best describes the practice of preser...; Question 104: A company needs to provide administrative access to internal...; Question 105: Which of the following could potentially be introduced at th...; Question 106: An organization wants to deploy software in a container envi...; Question 107: According to various privacy rules and regulations, users ha...; Question 108: Which of the following uses proprietary controls and is desi...; Question 109: After multiple phishing simul-ations, the Chief Security Off...; Question 110: A security administrator observed the following in a web ser...; Question 111: A security analyst finds a rogue device during a monthly aud...; Question 112: During a recent company safety stand-down, the cyber-awarene...; Question 113: Which of the following strategies most effectively protects ...; Question 114: A company processes a large volume of business-to-business t...; Question 115: A company's end users are reporting that they are unable to ...; Question 116: After multiple phishing simulations, the Chief Security Offi...; Question 117: A newly appointed board member with cybersecurity knowledge ...; Question 118: Which of the following are the most important considerations...; Question 119: A user downloads a patch from an unknown repository... FIM a...; Question 120: A systems administrator is working on a solution with the fo...; Question 121: Which of the following vulnerabilities is exploited when an ...; Question 122: A technician is opening ports on a firewall for a new system...; Question 123: The local administrator account for a company's VPN applianc...; Question 124: An administrator was notified that a user logged in remotely...; Question 125: A security team identifies a vulnerability in an application...; Question 126: An end-of-service server cannot be patched, but it still per...; Question 127: A company experiences a data loss event due to a stolen lapt...; Question 128: An organization is leveraging a VPN between its headquarters...; Question 129: A security analyst reviews domain activity logs and notices ...; Question 130: Which of the following describes effective change management...; Question 131: Which of the following is used to add extra complexity befor...; Question 132: An organization experiences a compromise in a cloud-hosted s...; Question 133: Which of the following metrics are used to calculate the ris...; Question 134: In order to strengthen a password and prevent a hacker from ...; Question 135: A company installed cameras and added signs to alert visitor...; Question 136: Which of the following is a risk of conducting a vulnerabili...; Question 137: A Chief Information Security Officer would like to conduct f...; Question 138: During a penetration test, a vendor attempts to enter an una...; Question 139: A security analyst locates a potentially malicious video fil...; Question 140: Which of the following methods to secure credit card data is...; Question 141: An unexpected and out-of-character email message from a Chie...; Question 142: Which of the following security concepts is being followed w...; Question 143: An organization is developing a security program that convey...; Question 144: Which of the following best explains a concern with OS-based...; Question 145: A security analyst learns that an attack vector, used as par...; Question 146: Which of the following is most likely to be used as a just-i...; Question 147: Which of the following is the best way to securely store an ...; Question 148: Which of the following is most likely associated with introd...; Question 149: Which of the following should an organization focus on the m...; Question 150: A security analyst and the management team are reviewing the...; Question 151: An administrator investigating an incident is concerned abou...; Question 152: Which of the following security control types does an accept...; Question 153: An employee used a company's billing system to issue fraudul...; Question 154: Which of the following is the best reason to complete an aud...; Question 155: During a security incident, the security operations team ide...; Question 156: A smart lighting system is deployed in an office building. T...; Question 157: Which of the following is die most important security concer...; Question 158: Which of the following must be considered when designing a h...; Question 159: Which of the following risk management strategies is being u...; Question 160: A security technician determines that no additional patches ...; Question 161: An organization failed to account for the right-to-be-forgot...; Question 162: Which of the following actions best addresses a vulnerabilit...; Question 163: Which of the following methods will most likely be used to i...; Question 164: An employee emailed a new systems administrator a malicious ...; Question 165: An administrator needs to perform server hardening before de...; Question 166: A systems administrator is redesigning now devices will perf...; Question 167: A penetration tester was able to gain unauthorized access to...; Question 168: Which of the following tools can assist with detecting an em...; Question 169: Which of the following provides the details about the terms ...; Question 170: Various company stakeholders meet to discuss roles and respo...; Question 171: The management team notices that new accounts that are set u...; Question 172: An organization experiences a suspected data breach that aff...; Question 173: During a routine audit, an analyst discovers that a departme...; Question 174: A security analyst finds a rogue device during a monthly aud...; Question 175: Which of the following is an example of a data protection st...; Question 176: Which of the following is a reason environmental variables a...; Question 177: Select the appropriate attack and remediation from each drop...; Question 178: A security administrator wants to determine if the company's...; Question 179: A user needs to complete training at https://comptiatraining...; Question 180: A security analyst learns that an attack vector, which was u...; Question 181: A systems administrator discovers a system that is no longer...; Question 182: A government official receives a blank envelope containing p...; Question 183: Which of the following explains how organizations benefit fr...; Question 184: The Cyber Incident Response Team is reviewing an incident th...; Question 185: Which of the following architecture models ensures that crit...; Question 186: A systems administrator receives an alert that a company's i...; Question 187: Which of the following should be used to ensure that a new s...; Question 188: A company performs risk analysis on its equipment and estima...; Question 189: A security company informs its customers of a new vulnerabil...; Question 190: Which of the following would a systems administrator follow ...; Question 191: A security analyst reviews logs and finds a large number of ...; Question 192: A company expects its provider to ensure servers and network...; Question 193: Which of the following best explains how tokenization helps ...; Question 194: Which of the following allows for the attribution of message...; Question 195: The private key for a website was stolen, and a new certific...; Question 196: An organization has a new regulatory requirement to implemen...; Question 197: Which of the following should an organization use to protect...; Question 198: A new employee can select a particular make and model of an ...; Question 199: An organization would like to store customer data on a separ...; Question 200: A website user is locked out of an account after clicking an...; Question 201: Which of the following can automate vulnerability management...; Question 202: Which of the following best explains why an organization wou...; Question 203: Which of the following most securely protects data at rest?...; Question 204: Which of the following describes the reason root cause analy...; Question 205: A security consultant is working with a client that wants to...; Question 206: Which of the following exercises should an organization use ...; Question 207: A vendor needs to remotely and securely transfer files from ...; Question 208: Which of the following examples would be best mitigated by i...; Question 209: Which of the following control types describes an alert from...; Question 210: After failing an audit twice, an organization has been order...; Question 211: An organization plans to increase security controls for devi...; Question 212: Which of the following activities should a systems administr...; Question 213: Which of the following is the final step of the modem respon...; Question 214: Which of the following Is a common, passive reconnaissance t...; Question 215: A security analyst is creating base for the server team to f...; Question 216: A company processes personal data from customers in multiple...; Question 217: Which of the following should a systems administrator use to...; Question 218: Which of the following is used to validate a certificate whe...; Question 219: Which of the following strategies should an organization use...; Question 220: A security analyst receives an alert from a web server that ...; Question 221: A security team is setting up a new environment for hosting ...; Question 222: One of a company's vendors sent an analyst a security bullet...; Question 223: Which of the following is the most relevant reason a DPO wou...; Question 224: A staff member finds a USB drive in the office's parking lot...; Question 225: A company has a website in a server cluster. One server is e...; Question 226: A penetration tester visits a client's website and downloads...; Question 227: Which of the following are the best security controls for co...; Question 228: Which of the following is best prevented by adding input val...; Question 229: A security manager is implementing MFA and patch management....; Question 230: A company wants to track modifications to the code that is u...; Question 231: A growing company would like to enhance the ability of its s...; Question 232: An organization is required to provide assurance that its co...; Question 233: An external security assessment report indicates a high clic...; Question 234: An organization's internet-facing website was compromised wh...; Question 235: A systems administrator notices that the research and develo...; Question 236: Which of the following provides the best protection against ...; Question 237: Which of the following would enable a data center to remain ...; Question 238: A security officer is implementing a security awareness prog...; Question 239: An employee fell for a phishing scam, which allowed an attac...; Question 240: The executive management team is mandating the company devel...; Question 241: Which of the following data recovery strategies will result ...; Question 242: An organization wants to limit potential impact to its log-i...; Question 243: Which of the following types of identification methods can b...; Question 244: Alerts from email protection systems and MSSPs must be enter...; Question 245: Which of the following would most likely be deployed to obta...; Question 246: Which of the following security controls is a company implem...; Question 247: An organization has been experiencing issues with deleted ne...; Question 248: Which of the following practices would be best to prevent an...; Question 249: A security analyst scans a company's public network and disc...; Question 250: Which of the following best describe why a process would req...; Question 251: An accountant is transferring information to a bank over FTP...; Question 252: In which of the following will unencrypted PLC management tr...; Question 253: After reviewing the following vulnerability scanning report:...; Question 254: An employee decides to collect PII data from the company's s...; Question 255: The Chief Information Officer (CIO) asked a vendor to provid...; Question 256: A security report shows that during a two-week test period. ...; Question 257: Which solution is most likely used in the financial industry...; Question 258: A company is concerned about the theft of client data from d...; Question 259: Which of the following should a technician perform to verify...; Question 260: Which of the following will harden access to a new database ...; Question 261: Which of the following is the act of proving to a customer t...; Question 262: A security analyst created a fake account and saved the pass...; Question 263: A security administrator protects passwords by using hashing...; Question 264: A company is utilizing an offshore team to help support the ...; Question 265: A company is discarding a classified storage array and hires...; Question 266: Which of the following architectures is most suitable to pro...; Question 267: A business needs a recovery site but does not require immedi...; Question 268: After a security awareness training session, a user called t...; Question 269: Which of the following threat actors would most likely defac...; Question 270: Which vulnerability is most likely mitigated by setting up a...; Question 271: As part of new compliance audit requirements, multiple serve...; Question 272: A security analyst has determined that a security breach wou...; Question 273: The security operations center is researching an event conce...; Question 274: An organization disabled unneeded services and placed a fire...; Question 275: Which of the following alert types is the most likely to be ...; Question 276: A company wants to reduce the time and expense associated wi...; Question 277: A penetration test has demonstrated that domain administrato...; Question 278: A marketing team launches a new AI solution that trains on s...; Question 279: Which of the following describes the understanding between a...; Question 280: A service provider wants a cost-effective way to rapidly exp...; Question 281: Which of the following best protects sensitive data in trans...; Question 282: A security practitioner completes a vulnerability assessment...; Question 283: Sine a recent upgrade (o a WLAN infrastructure, several mobi...; Question 284: The Chief Information Security Officer of an organization ne...; Question 285: An organization is building a new backup data center with co...; Question 286: An external vendor recently visited a company's headquarters...; Question 287: Following a security review, an organization must ensure use...; Question 288: A security engineer is working to address the growing risks ...; Question 289: A company is adding a clause to its AUP that states employee...; Question 290: A systems administrator is looking for a low-cost applicatio...; Question 291: An important patch for a critical application has just been ...; Question 292: The Chief Information Security Officer (CISO) of a medium-si...; Question 293: Which of the following describes a situation where a user is...; Question 294: An administrator finds that all user workstations and server...; Question 295: Which of the following is an example of implementing Zero Tr...; Question 296: A customer of a large company receives a phone call from som...; Question 297: Which of the following should be used to ensure a device is ...; Question 298: Which of the following must be considered when designing a h...; Question 299: A company is concerned about weather events causing damage t...; Question 300: A recent penetration test identified that an attacker could ...; Question 301: An organization experiences a cybersecurity incident involvi...; Question 302: A security engineer needs to quickly identify a signature fr...; Question 303: Which of the following types of vulnerabilities involves att...; Question 304: A security analyst notices an increase in port scans on the ...; Question 305: Which of the following is the most likely motivation for a h...; Question 306: The management team reports employees are missing features o...; Question 307: A security analyst investigates abnormal outbound traffic fr...; Question 308: A cybersecurity incident response team at a large company re...; Question 309: A company wants to track modifications to the code used to b...; Question 310: An analyst wants to move data from production to the UAT ser...; Question 311: A network manager wants to protect the company's VPN by impl...; Question 312: An administrator is reviewing a single server's security log...; Question 313: Which of the following methods would most likely be used to ...; Question 314: A systems administrator set up a perimeter firewall but cont...; Question 315: Which of the following best explains the role of compensatin...; Question 316: A company purchased cyber insurance to address items listed ...; Question 317: A software developer wishes to implement an application secu...; Question 318: An enterprise security team is researching a new security ar...; Question 319: Which of the following is the best method to reduce the atta...; Question 320: Which of the following practices would be best to prevent an...; Question 321: An organization determines that tenured employees have retai...; Question 322: While reviewing logs, a security administrator identifies th...; Question 323: Which of the following most accurately describes the order i...; Question 324: Which of the following would be the greatest concern for a c...; Question 325: During a recent log review, an analyst found evidence of suc...; Question 326: A manufacturing organization receives the results from a pen...; Question 327: Malware spread across a company's network after an employee ...; Question 328: Which of the following should a security analyst consider wh...; Question 329: A newly identified network access vulnerability has been fou...; Question 330: During a routine audit, an analyst discovers that a departme...; Question 331: A security administrator wants to implement a security infor...; Question 332: Which of the following elements of digital forensics should ...; Question 333: Which of the following is used to protect a computer from vi...; Question 334: Which of the following is an example of memory injection?...; Question 335: An engineer needs to ensure that a script has not been modif...; Question 336: Which of the following can be used to compromise a system th...; Question 337: Which of the following allows an exploit to go undetected by...; Question 338: A software developer would like to ensure. The source code c...; Question 339: Which of the following best explains how open service ports ...; Question 340: A business provides long-term cold storage services to banks...; Question 341: Which of the following involves an attempt to take advantage...; Question 342: Which of the following is the main consideration when a lega...; Question 343: Which of the following is the first step to take when creati...; Question 344: A company decided to reduce the cost of its annual cyber ins...; Question 345: Users at a company are reporting they are unable to access t...; Question 346: Which of the following tools is best for logging and monitor...; Question 347: An engineer needs to find a solution that creates an added l...; Question 348: A security administrator needs to reduce the attack surface ...; Question 349: Which of the following phases of an incident response involv...; Question 350: Which of the following is a reason an organization should us...; Question 351: A company wants to use new Wi-Fi-enabled environmental senso...; Question 352: A network engineer is increasing the overall security of net...; Question 353: Which of the following best explains a core principle of a Z...; Question 354: Which of the following hardening techniques must be applied ...; Question 355: In an effort to reduce costs, a company is implementing a st...; Question 356: An organization issued new laptops to all employees and want...; Question 357: An organization needs to monitor its users' activities to pr...; Question 358: During a penetration test in a hypervisor, the security engi...; Question 359: A company deploys a new server that a client must be able to...; Question 360: A bank insists all of its vendors must prevent data loss on ...; Question 361: An employee clicked a malicious link in an email and downloa...; Question 362: The Chief Information Security Officer wants to discuss opti...; Question 363: After creating a contract for IT contractors, the human reso...; Question 364: A company is redesigning its infrastructure and wants to red...; Question 365: An administrator has configured a quarantine subnet for all ...; Question 366: Which of the following would be the most appropriate way to ...; Question 367: Which of the following would be the best way to handle a cri...; Question 368: An organization designs an inbound firewall with a fail-open...; Question 369: Which of the following should a security operations center u...; Question 370: Which of the following is a benefit of an RTO when conductin...; Question 371: Which of the following is the best way to improve the confid...; Question 372: A new employee logs in to the email system for the first tim...; Question 373: Which of the following is the best way to secure an on-site ...; Question 374: In a rush to meet an end-of-year business goal, the IT depar...; Question 375: A security analyst investigates an incident in which a Power...; Question 376: A company is expanding its threat surface program and allowi...; Question 377: Which of the following activities should be included as part...; Question 378: A penetration test identifies that an SMBvl Is enabled on mu...; Question 379: An attacker forces an internal company employee to inject ma...; Question 380: The security operations center is researching an event conce...; Question 381: Which of the following consequences would a retail chain mos...; Question 382: A small business uses kiosks on the sales floor to display p...; Question 383: After completing an annual external penetration test, a comp...; Question 384: Which of the following best represents how frequently an inc...; Question 385: A security operations center determines that the malicious a...; Question 386: Which of the following control types involves restricting IP...; Question 387: Which of the following is a primary security concern for a c...; Question 388: A company is implementing a policy to allow employees to use...; Question 389: A security analyst is investigating an application server an...; Question 390: A security team wants to work with the development team to e...; Question 391: Which of the following is an example of a false negative vul...; Question 392: Which of the following mitigation techniques would a securit...; Question 393: Which of the following describes a security alerting and mon...; Question 394: After an audit, an administrator discovers all users have ac...; Question 395: Which of the following tasks is typically included in the BI...; Question 396: Which of the following should a systems administrator use to...; Question 397: A program manager wants to ensure contract employees can onl...; Question 398: Which of the following best describes the purpose of using d...; Question 399: Which of the following is a directive managerial control?...; Question 400: A software development manager wants to ensure the authentic...; Question 401: Which of the following risk analysis attributes measures the...; Question 402: Which of the following agreement types defines the time fram...; Question 403: Which of the following should a security team do first befor...; Question 404: An office wants to install a Wi-Fi network. The security tea...; Question 405: A company prevented direct access from the database administ...; Question 406: A growing organization, which hosts an externally accessible...; Question 407: Which of the following is a preventive physical security con...

Question 211/407

LEAVE A REPLY

Download PDF File