Alerting and Monitoring SY0-701 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   A server's disk usage has reached 95% capacity. Which monitoring metric is being observed?

   • AApplication response time
   • BResource utilization
   • CUser authentication success rate
   • DNetwork throughput
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security analyst is configuring a SIEM to monitor for potential data exfiltration. The analyst wants to detect when a large amount of data is transferred from an internal server to an external IP address. Which SIEM capability should the analyst use?

   • ACorrelation rules
   • BLog aggregation
   • CUser behavior analytics
   • DDashboard visualization
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which computing resource metric is most likely to indicate a memory leak in an application?

   • ANetwork traffic spikes
   • BDisk I/O remaining stable
   • CCPU usage remaining constant at 10%
   • DMemory usage steadily increasing over time
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Why is baseline analysis important for detecting security incidents?

   • AIt helps identify deviations from normal behavior that may indicate an attack
   • BIt encrypts data to prevent exfiltration
   • CIt automatically blocks all malicious traffic
   • DIt eliminates the need for log analysis
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is baseline analysis in the context of security monitoring?

   • AComparing two different systems' configurations
   • BEstablishing a reference point of normal system behavior to detect deviations
   • CEncrypting log files to protect them
   • DAnalyzing packet headers to identify protocols
   Reveal Solution Discussion Select an answer first