Enterprise Infrastructure SY0-701 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which access control model assigns permissions to users based on their job function within the organization?

   • ADiscretionary access control (DAC)
   • BMandatory access control (MAC)
   • CAttribute-based access control (ABAC)
   • DRole-based access control (RBAC)
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company is designing a new network for a research lab that handles sensitive data. The lab has a requirement to allow external researchers to access a specific application, but the company wants to ensure that the researchers cannot access the internal network. The security team is considering placing the application in a DMZ. Which additional control should the security team implement to ensure that the researchers cannot access the internal network?

   • AConfigure the firewall to allow only the specific application port from the internet to the DMZ, and block all other traffic.
   • BPlace the application server on the internal network and use a reverse proxy to expose it to the internet.
   • CImplement a network access control (NAC) solution that checks the researchers' devices for compliance.
   • DUse a VPN for external researchers to access the application.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company is setting up a secure connection between its on-premises network and a cloud provider. The connection must be encrypted and should provide a dedicated, private connection that does not traverse the public internet. Which solution should the company use?

   • AA TLS tunnel through a web proxy.
   • BA site-to-site VPN over the internet.
   • CA dedicated private connection, such as Azure ExpressRoute or AWS Direct Connect.
   • DAn SSH tunnel between the on-premises router and the cloud gateway.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   An organization is implementing a new access control system for its data center. The system must ensure that only authorized personnel can enter the server room, and it must provide an audit trail of who entered and when. Which access control method should the organization use?

   • AA proximity card reader that logs each entry attempt.
   • BA keypad that requires a PIN code.
   • CA biometric scanner that grants access based on fingerprint recognition.
   • DA security guard who manually checks IDs and records entries in a logbook.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A healthcare organization is required to protect patient health information (PHI) from being transmitted outside the organization via email. Which data loss prevention (DLP) control should the organization implement?

   • AA policy that requires employees to manually encrypt emails containing PHI.
   • BA network DLP solution that scans outbound email for patterns that match PHI and blocks or encrypts the message.
   • CA host-based DLP solution that monitors file access on employee workstations.
   • DAn email encryption solution that encrypts all outbound email regardless of content.
   Reveal Solution Discussion Select an answer first