Enterprise Security SY0-701 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company allows employees to connect personal laptops to the corporate Wi-Fi. The security team wants to ensure that only devices with up-to-date antivirus and a corporate-issued certificate can access the network. What should they implement?

   • AUse an IDS to monitor for devices without the certificate and alert the security team.
   • BConfigure a firewall rule to block all traffic from devices without a corporate certificate.
   • CImplement DNS filtering to block access to known malicious sites for non-compliant devices.
   • DDeploy a NAC solution that checks device posture (AV status and certificate) before granting network access.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is implementing a new policy to prevent sensitive data from leaving the network. They have a firewall and a DLP solution. The DLP solution can block data transfers, but the firewall is the only device that can inspect encrypted traffic. What is the most effective approach to enforce the policy?

   • AConfigure the firewall to decrypt and inspect outbound traffic, then forward it to the DLP for analysis.
   • BUse the firewall to block all outbound traffic to external IP addresses.
   • CConfigure the DLP to block all outbound traffic on port 443.
   • DDeploy an EDR solution on all endpoints to monitor for sensitive data in memory.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company has experienced a ransomware outbreak that spread rapidly across endpoints. The security team wants to improve detection and response capabilities to stop similar attacks in the future. They have a limited budget and need a solution that provides visibility across all endpoints and enables automated response. What should they deploy?

   • AInstall a network-based IDS to monitor traffic for ransomware signatures.
   • BImplement DNS filtering to block known ransomware domains.
   • CConfigure a firewall to block all inbound traffic from the internet.
   • DDeploy an EDR solution on all endpoints with automated containment capabilities.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A financial firm is required to prevent credit card numbers from being sent via email. They have a DLP solution that scans outbound email. However, employees are using webmail (e.g., Gmail) to send sensitive data. What should the security team configure to address this gap?

   • AAdd a DLP rule to inspect webmail traffic for credit card patterns and block or quarantine the message.
   • BDeploy an EDR solution on all endpoints to monitor for credit card data in memory.
   • CBlock all access to webmail sites using a firewall rule.
   • DConfigure the existing DLP to only scan email sent through the corporate email server.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which data classification would most likely be subject to a DLP policy that blocks transmission of credit card numbers?

   • ATop secret
   • BPublic
   • CInternal
   • DConfidential
   Reveal Solution Discussion Select an answer first