Mitigation Techniques SY0-701 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company has a shared network drive containing project files. The sales team should have read/write access to the 'Sales' folder, but the marketing team should only have read access to the 'Marketing' folder. The IT administrator needs to configure permissions to enforce this separation. Which approach is the most appropriate?

   • ACreate a single security group for all employees and grant it full control over the entire shared drive.
   • BGrant the marketing team full control over the 'Sales' folder and the sales team read-only access to the 'Marketing' folder.
   • CPlace the 'Sales' and 'Marketing' folders on separate physical drives and share them with different share names.
   • DCreate separate security groups for the sales and marketing teams, and assign appropriate NTFS permissions to each group on their respective folders.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A security team wants to contain a malware infection by preventing it from spreading to other parts of the network. Which technique is most appropriate?

   • AChanging the system's hostname
   • BIsolating the infected system from the network
   • CApplying a new patch to the infected system
   • DIncreasing the system's processing power
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   An organization wants to ensure that all workstations have the same security settings, such as password policies and firewall rules. Which technique should be used?

   • APatch management
   • BNetwork segmentation
   • CConfiguration enforcement
   • DAccess control
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company's security policy requires that all laptops have full disk encryption enabled and that the screen locks after 5 minutes of inactivity. The IT team needs to ensure that all laptops comply with this policy. Which tool is best suited for this task?

   • AA network scanner that checks for open ports.
   • BA vulnerability scanner that identifies missing security patches.
   • CA mobile device management (MDM) solution that can push configuration profiles.
   • DA patch management tool that deploys software updates.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company's security team has identified a critical vulnerability in a third-party application used across the organization. The vendor has released a patch, but the IT team is concerned about application compatibility. The company cannot afford downtime. What is the best approach to manage this patch deployment?

   • ADo not deploy the patch and instead implement a workaround, such as disabling the vulnerable feature.
   • BDeploy the patch to all systems immediately to eliminate the vulnerability as quickly as possible.
   • CTest the patch in a staging environment that mirrors the production setup, then deploy it to a small pilot group before rolling out to the rest of the organization.
   • DDeploy the patch only to non-critical systems and leave critical systems unpatched.
   Reveal Solution Discussion Select an answer first