Automation and Orchestration SY0-701 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which risk is associated with automating security responses?

   • AAutomation may inadvertently disrupt business operations
   • BAutomation always increases the workload for security analysts
   • CAutomation removes the need for incident response plans
   • DAutomation guarantees that all threats are detected
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A security team wants to automate the collection of logs from multiple sources. What is a common method to achieve this integration?

   • AUsing a SIEM platform that collects logs via connectors or agents
   • BCreating a new network segment for each log source
   • CManually exporting logs from each system daily
   • DDisabling logging on all systems to reduce data volume
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security team receives hundreds of alerts daily, many of which are false positives. Analysts spend significant time triaging these alerts. Which automation use case would most improve efficiency?

   • AAutomatically enrich alerts with threat intelligence and correlate them to reduce duplicate and false positives.
   • BAutomatically increase the volume of alerts by enabling more detection rules.
   • CAutomatically delete all alerts that are not marked as critical.
   • DAutomatically send all alerts to the most senior analyst for review.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A security team has a script that automatically updates firewall rules based on threat intelligence. The script has been running for a year without issues. Recently, the script started blocking legitimate traffic. Which action is most likely to resolve the issue?

   • AReview the threat intelligence feed for changes in data format or content that may have introduced false positives.
   • BReplace the script with a manual process to avoid errors.
   • CDisable the script and rely on the firewall's default rules.
   • DIncrease the frequency of the script's execution to update rules more often.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is a potential risk of using automation in security operations?

   • AAutomation always reduces the overall security posture
   • BAutomation may make incorrect decisions if not properly configured
   • CAutomation is always more expensive than manual processes
   • DAutomation eliminates the need for security policies
   Reveal Solution Discussion Select an answer first