Enterprise Security SY0-701 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company's DLP policy is blocking employees from sending a large file to a client via email. The file contains sensitive data, but the client is legitimate and needs the file. The security team wants to allow this transfer while still protecting the data. What should they do?

   • ADisable the DLP policy for the employee's email account.
   • BUse a secure file transfer solution that encrypts the file and requires authentication, and add a DLP exception for that solution.
   • CCompress the file and change the extension to avoid DLP detection.
   • DSend the file via a personal email account to bypass DLP.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A small business wants to prevent employees from accessing gambling and social media sites during work hours. They have a single firewall and no other security appliances. What is the most effective way to enforce this policy?

   • ADeploy an IDS to detect and alert when employees visit these sites.
   • BConfigure the firewall to block outbound traffic to the IP addresses of the gambling and social media sites.
   • CUse a DLP policy to block the transfer of data to these sites.
   • DImplement DNS filtering on the firewall to block the domains of the unwanted sites.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company's IDS is generating a high volume of alerts for legitimate internal scanning tools used by the security team. The alerts are drowning out real threats. The security team wants to reduce noise without losing visibility. What should they do?

   • ACreate an IDS rule to suppress alerts for the specific source IPs of the scanning tools.
   • BIncrease the sensitivity threshold for all IDS rules.
   • CMove the scanning tools to a different subnet and add a firewall rule to block their traffic.
   • DDisable the IDS entirely to stop the alerts.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company's IPS is blocking legitimate traffic from a business partner's IP range, causing disruption. The security team has verified that the traffic is benign. What should they do to resolve the issue while maintaining security?

   • AIncrease the IPS sensitivity to catch more threats.
   • BAdd an exception rule to the IPS to allow traffic from the partner's IP range.
   • CConfigure the firewall to block all traffic from the partner's IP range.
   • DDisable the IPS entirely to prevent further disruptions.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company wants to allow contractors to connect to the network, but only to a specific server. They have a NAC solution and a firewall. The contractors' devices are not managed by the company. What is the most secure way to provide this access?

   • AUse NAC to grant full network access to contractor devices.
   • BUse NAC to place contractor devices in a separate VLAN with a firewall rule that allows access only to the specific server.
   • CConfigure the firewall to block all traffic from contractor devices.
   • DAllow contractors to connect to the main network and rely on the firewall to block access to other resources.
   Reveal Solution Discussion Select an answer first