Automation and Orchestration SY0-701 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   When performing a cost-benefit analysis of automation, what should be included as a benefit?

   • AThe need for additional staff to manage the automation
   • BThe initial cost of purchasing automation software
   • CThe time saved by automating repetitive tasks
   • DThe risk of automation making errors
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security team wants to automate the response to phishing emails by automatically deleting them from user mailboxes. Which tool is best suited for this task?

   • AAn email security gateway that integrates with the mailbox system via APIs.
   • BA network intrusion detection system (IDS) that monitors traffic.
   • CA vulnerability scanner that checks for missing patches.
   • DA password manager that stores credentials.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security team has a script that automatically updates firewall rules based on threat intelligence feeds. The script was written six months ago and has not been updated. Which action is most important to ensure the script continues to work effectively?

   • AReview and update the script to accommodate changes in the threat intelligence feed format and firewall API.
   • BReplace the script with a manual process to avoid errors.
   • CIncrease the frequency of the script's execution to every hour.
   • DDocument the script's purpose but do not change it.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company uses a SIEM and a ticketing system. The security team wants to automatically create a ticket when the SIEM detects a critical alert. Which integration method is most appropriate?

   • AHave analysts manually create tickets after reviewing alerts.
   • BDisable critical alerts to avoid the need for tickets.
   • CConfigure the SIEM to send alerts to the ticketing system via its API.
   • DReplace the ticketing system with a spreadsheet.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security team wants to automate the quarantine of endpoints that exhibit signs of ransomware. Which risk is most important to mitigate before implementing this automation?

   • AThe automation might not run fast enough to stop the ransomware.
   • BThe automation might quarantine a critical server that is not actually infected, causing a service outage.
   • CThe automation might require additional storage for logs.
   • DThe automation might consume too much network bandwidth.
   Reveal Solution Discussion Select an answer first