Question 1

Which of the following provides the details about the terms of a test with a third-party penetration tester?

Options :

A : Rules of engagement

B : Supply chain analysis

C : Right to audit clause

D : Due diligence

Answer: A

Question 2

A network administrator wants to ensure that network traffic is highly secure while in transit. Which of the following actions best describes the actions the network administrator should take?

Options :

A : Ensure that NAC is enforced on all network segments, and confirm that firewalls have updated policies to block unauthorized traffic.

B : Ensure only TLS and other encrypted protocols are selected for use on the network, and only permit authorized traffic via secure protocols.

C : Configure the perimeter IPS to block inbound HTTPS directory traversal traffic, and verify that signatures are updated on a daily basis.

D : Ensure the EDR software monitors for unauthorized applications that could be used by threat actors, and configure alerts for the security team.

Answer: B

Question 3

A company wants to ensure secure remote access to its internal network. The company has only one public IP and would like to avoid making any changes to the current network setup. Which of the following solutions would best accomplish this goal?

Options :

A : PAT

B : IPSec VPN

C : Perimeter network

D : Reverse proxy

Answer: B

Question 4

A company is adding a clause to its AUP that states employees are not allowed to modify the operating system on mobile devices. Which of the following vulnerabilities is the organization addressing?

Options :

A : Cross-site scripting

B : Buffer overflow

C : Jailbreaking

D : Side loading

Answer: C

Question 5

Which type of risk analysis is subjective and can involve assigning values from a scale you create?

Options :

A : Qualitative

B : Quantitative

C : Consultative

D : Probabilistic

Answer: A

Free SY0-701 Mock Exam – Practice Online Confidently

Buying Options: