Computing Resources SY0-701 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the purpose of applying the latest security patches to an operating system?

   • ATo fix known vulnerabilities that could be exploited by attackers
   • BTo increase the processing speed of the CPU
   • CTo improve the visual appearance of the user interface
   • DTo add new features that were not present in the original version
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A security administrator is responsible for maintaining the security baseline for a large number of Windows servers. The baseline is defined in a Group Policy Object (GPO). A recent audit revealed that some servers have drifted from the baseline, meaning they no longer have the correct settings. The administrator needs to identify the servers that are non-compliant and bring them back into compliance. Which of the following is the MOST efficient approach?

   • AUse a security configuration management tool to scan the servers, report on non-compliance, and apply the baseline settings.
   • BForce a Group Policy update on all servers and assume they will be compliant.
   • CRebuild all non-compliant servers from a known-good image.
   • DManually check the settings on each server against the baseline and correct any discrepancies.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A software development team is adopting a DevOps approach and wants to integrate security into their CI/CD pipeline. They are concerned about vulnerabilities in third-party libraries used by their application. Which of the following is the MOST effective control to implement in the pipeline?

   • ARun a web application firewall (WAF) in front of the application to block attacks.
   • BPerform a manual code review of all third-party libraries before each release.
   • CUse a software composition analysis (SCA) tool to scan for known vulnerabilities in dependencies.
   • DSandbox the application in a container to isolate it from the host system.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security analyst needs to analyze a suspicious executable file that was found in an email attachment. The analyst wants to observe the file's behavior, such as network connections and file system changes, without risking infection of the corporate network. Which of the following is the BEST approach?

   • ARun the executable on a non-critical server and monitor its behavior.
   • BDecompile the executable to view its source code without executing it.
   • CUpload the file to an online multi-scanner to check for known malware signatures.
   • DExecute the file in a virtual machine with network access disabled and monitor its actions.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary security purpose of implementing a screen lock on a mobile device?

   • ATo encrypt all network traffic transmitted from the device
   • BTo prevent unauthorized access to the device when it is unattended
   • CTo prevent the device from being tracked by GPS
   • DTo automatically back up all data to the cloud
   Reveal Solution Discussion Select an answer first