Enterprise Infrastructure SY0-701 Practice Questions (Page 7)

Questions 31–33

1. 31application · medium

   A company has a flat network where all workstations and servers are in the same subnet. After a malware infection spread quickly across the entire network, the security team wants to limit the impact of future infections. Which approach should the security team take?

   • AIncrease the frequency of antivirus signature updates on all workstations.
   • BImplement network segmentation by dividing the network into separate subnets based on department and function.
   • CEnable Windows Firewall on all workstations to block inbound traffic.
   • DDeploy a network-based intrusion detection system (NIDS) to monitor for malware signatures.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A company is using a public cloud provider to host a web application. The application is accessed by customers over the internet. The security team wants to ensure that the application is protected from common web attacks, such as SQL injection and cross-site scripting (XSS). Which cloud security control should the company implement?

   • AA network access control list (ACL) that restricts access to the application to specific IP addresses.
   • BA data loss prevention (DLP) policy that prevents sensitive data from being stored in the application.
   • CA web application firewall (WAF) that filters and monitors HTTP traffic.
   • DA virtual private network (VPN) that encrypts traffic between the customer and the application.
   Reveal Solution Discussion Select an answer first
3. 33application · medium

   A hospital is implementing a new system to protect patient records on employee laptops. The system must ensure that data is encrypted if a laptop is lost or stolen, and it must also provide a way to remotely wipe the device if necessary. Which control should the hospital implement?

   • AFull-disk encryption (FDE) with a centralized management console that supports remote wipe.
   • BA strong password policy and screen lock timeout.
   • CA data loss prevention (DLP) agent that blocks sensitive data from being emailed.
   • DA host-based intrusion detection system (HIDS) that alerts on unauthorized access attempts.
   Reveal Solution Discussion Select an answer first