Mitigation Techniques SY0-701 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A hospital's IT department manages hundreds of Windows workstations used by clinical staff. A recent audit found that many workstations have local administrator accounts with weak passwords, and some are missing critical security updates. The department needs a centralized solution to enforce a consistent security baseline across all devices. Which approach best addresses the audit findings?

   • ADeploy a new image to all workstations that includes strong local passwords, and disable automatic updates to prevent unexpected reboots during clinical hours.
   • BManually configure each workstation's local security policy and schedule a monthly reminder for staff to run Windows Update.
   • CImplement a network access control (NAC) solution that blocks devices from the network if they do not have the latest patches installed.
   • DUse a Group Policy Object (GPO) to enforce password complexity and account lockout policies, and configure Windows Update for Business to deploy patches automatically.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is a common system hardening technique?

   • AChanging default passwords and disabling default accounts
   • BGranting all users administrative rights
   • CDisabling the system's firewall
   • DEnabling all services that come with the operating system
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of system isolation?

   • ATo improve system performance by reducing network traffic
   • BTo simplify the process of applying software updates
   • CTo contain threats and prevent them from affecting other systems
   • DTo provide redundant network paths for high availability
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company has a policy that requires all employees to use multi-factor authentication (MFA) when accessing the corporate VPN. The IT team is configuring the VPN server. Which setting is most directly related to enforcing this access control policy?

   • ALimiting VPN access to specific IP addresses.
   • BSetting the VPN to use a pre-shared key for authentication.
   • CIntegrating the VPN with the company's identity provider and enabling MFA policies.
   • DConfiguring the VPN to require a certificate from the company's internal certificate authority.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A university has a public Wi-Fi network for students and a separate administrative network for staff. A student is suspected of attempting to access administrative systems. The security team wants to ensure that even if a student's device is compromised, it cannot reach the administrative network. Which control is most effective?

   • AUse MAC address filtering on the administrative network to only allow staff devices.
   • BRequire students to use a VPN to access the internet, and staff to use a different VPN.
   • CImplement a firewall rule that blocks all traffic from the student Wi-Fi subnet to the administrative network subnet.
   • DPlace the administrative network on a different physical location, such as a separate building.
   Reveal Solution Discussion Select an answer first