Enterprise Security SY0-701 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A healthcare organization is required to protect patient records from being copied to USB drives. They have a DLP solution and a NAC solution. What is the most effective way to enforce this policy?

   • AUse NAC to block all USB devices from connecting to the network.
   • BDeploy an EDR solution to monitor for USB usage and alert the security team.
   • CConfigure a firewall rule to block USB traffic.
   • DConfigure the DLP policy to block or encrypt data written to USB devices.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A company wants to ensure that only devices with up-to-date antivirus software can connect to the corporate network. Which technology should be configured to enforce this requirement?

   • ANetwork access control (NAC)
   • BVPN concentrator
   • CIntrusion detection system (IDS)
   • DFirewall
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A data loss prevention (DLP) policy is being modified to prevent sensitive data from leaving the organization via email. Which DLP action would directly achieve this?

   • AQuarantine the email for review
   • BBlock the email and notify the sender
   • CEncrypt the email and send it
   • DLog the email and allow it
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security analyst notices that the IPS is generating many false positives for a legitimate application that uses unusual network behavior. The false positives are causing the security team to ignore alerts. The IPS is also configured to block traffic that matches certain signatures. What should the analyst do to reduce false positives while maintaining protection?

   • ADisable the IPS and rely on the EDR for endpoint protection.
   • BBlock all traffic from the application's source IP.
   • CIncrease the IPS sensitivity to catch more threats.
   • DCreate an IPS exception for the application's source IP and port, and tune the signature sensitivity.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary benefit of using an extended detection and response (XDR) solution compared to a traditional EDR?

   • AIt provides visibility and correlation across multiple security layers (endpoint, network, email, etc.)
   • BIt is a hardware appliance that replaces the firewall
   • CIt only monitors endpoints and ignores other data sources
   • DIt eliminates the need for any other security tools
   Reveal Solution Discussion Select an answer first