Enterprise Security SY0-701 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company has a mix of Windows and Linux servers and wants to detect advanced threats that evade traditional antivirus. They want a solution that provides deep visibility into endpoint activity and can correlate events across multiple endpoints. What should they deploy?

   • AInstall a traditional antivirus on all servers.
   • BDeploy an XDR solution that integrates endpoint, network, and cloud data.
   • CConfigure a firewall to block all inbound traffic from the internet.
   • DDeploy a network-based IDS to monitor traffic for anomalies.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A security analyst notices that an intrusion detection system (IDS) is generating a high number of false positives. Which IDS configuration change would most directly reduce false positives?

   • ASwitch the IDS to a passive monitoring mode
   • BAdjust the sensitivity threshold or fine-tune the detection rules
   • CIncrease the logging level to capture more details
   • DDisable the IDS during peak hours
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   An organization wants to automatically block malicious traffic at the network perimeter. Which type of system should be configured to actively prevent the traffic?

   • AVulnerability scanner
   • BIntrusion prevention system (IPS)
   • CSecurity information and event management (SIEM) system
   • DIntrusion detection system (IDS)
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company wants to allow only company-owned laptops to access the internal network, while guests can only access the internet. They have a NAC solution. What should they configure?

   • AConfigure a firewall rule to block all traffic from guest devices.
   • BImplement DNS filtering to block internal resources for guest devices.
   • CUse an IDS to detect guest devices and alert the security team.
   • DCreate NAC policies that place company-owned devices in the internal network segment and guest devices in a restricted segment with internet-only access.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   A company wants to prevent employees from accessing known malicious websites. Which implementation would be most effective for this purpose?

   • ANetwork segmentation
   • BDNS filtering
   • CPort security
   • DEndpoint encryption
   Reveal Solution Discussion Select an answer first