Enterprise Infrastructure SY0-701 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company allows employees to use their personal smartphones to access corporate email. The security team is concerned about data leakage if a device is lost or stolen. Which endpoint security measure should the company implement to protect corporate data on these devices?

   • AMobile device management (MDM) with the ability to selectively wipe corporate data.
   • BA remote desktop application that allows employees to access corporate resources from their personal devices.
   • CA VPN client that encrypts traffic between the device and the corporate network.
   • DA strong screen lock policy that requires a complex PIN.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which security principle is implemented when a critical administrative task is split between two different employees so that no single individual has complete control?

   • AFail secure
   • BSeparation of duties
   • CDefense in depth
   • DLeast privilege
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   An organization implements a security awareness training program for all employees. What type of control is this?

   • AAdministrative control
   • BDetective control
   • CTechnical control
   • DPhysical control
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A security analyst notices unusual outbound traffic from a server in the DMZ to an external IP address on port 443. The traffic is occurring at regular intervals and the volume is increasing. Which security monitoring practice should the analyst use to investigate this activity?

   • AIgnore the traffic because port 443 is commonly used for legitimate HTTPS traffic.
   • BIncrease the logging level on the server to capture more detailed application logs.
   • CDisable the server's network interface to stop the traffic immediately.
   • DReview the firewall logs to identify the source and destination of the traffic.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company is designing a network for a new office. The network will have three departments: finance, HR, and IT. The company wants to ensure that the finance department cannot access the HR department's network, and vice versa. The IT department needs to be able to access all departments for support. Which network design should the company implement?

   • ACreate separate physical networks for each department with no connectivity between them.
   • BCreate separate VLANs for each department and configure ACLs to allow only necessary traffic between them.
   • CPlace all departments in the same subnet and use host-based firewalls to restrict access.
   • DUse a single flat network and rely on the operating system's file permissions to restrict access.
   Reveal Solution Discussion Select an answer first