Fundamental Concepts SY0-701 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is a common method used to provide non-repudiation for an electronic transaction?

   • AUsing a digital signature
   • BHashing the transaction data
   • CEncrypting the transaction with a symmetric key
   • DUsing a VPN connection
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a key component of a zero trust architecture?

   • APerimeter firewall only
   • BMicro-segmentation
   • CImplicit trust for internal users
   • DSingle sign-on (SSO) only
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A software company distributes updates to customers. They need to ensure that the updates are authentic, have not been tampered with, and that customers can verify the source. Which control should they implement?

   • AUse a checksum for the updates.
   • BPublish a hash of the updates on the website.
   • CEncrypt the updates with a symmetric key.
   • DSign the updates with a code signing certificate.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A hospital's electronic health record (EHR) system must be available 24/7 for patient care. They are concerned about ransomware attacks that could encrypt data and make it unavailable. They also need to ensure that patient data remains confidential. Which strategy best balances availability and confidentiality?

   • AMaintain offline, encrypted backups and implement an incident response plan.
   • BDisable encryption on backups to speed up restoration.
   • CUse a honeypot to detect ransomware and rely on it to prevent encryption.
   • DKeep backups on the same network for quick access.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A healthcare organization stores patient records in a cloud database. To meet regulatory requirements, they must ensure that only authorized medical staff can view the records and that the records are encrypted both at rest and in transit. Which combination of controls best addresses these requirements?

   • AUse multi-factor authentication (MFA) for all users and encrypt the database with transparent data encryption (TDE), but do not configure network encryption.
   • BImplement role-based access control (RBAC) and enable TLS for data in transit, but leave data at rest unencrypted to simplify access.
   • CProvide all staff with full database access and rely on network segmentation to protect the data.
   • DApply RBAC to restrict access to authorized staff, enable TLS for data in transit, and use encryption for data at rest.
   Reveal Solution Discussion Select an answer first