Security Awareness SY0-701 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the primary purpose of security monitoring?

   • ATo replace the need for security policies
   • BTo detect and respond to security threats in real-time
   • CTo automate all security decisions
   • DTo increase network speed
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A security team is implementing monitoring to detect compromised accounts. They want to minimize false positives while still catching real threats. Which approach would best balance these goals?

   • ASet aggressive alerts for any login outside business hours
   • BDisable alerts and review logs monthly
   • CUse a UEBA tool that establishes individual baselines and alerts on significant deviations
   • DMonitor only for failed login attempts
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company is planning a phishing awareness campaign. The security team wants to measure the effectiveness of the training. They have a limited budget and cannot conduct frequent simulations. Which approach would provide the most meaningful measurement?

   • ASurvey employees about their confidence in identifying phishing emails
   • BConduct a baseline simulation before training and a follow-up simulation after training, comparing the click rates
   • CTrack the number of employees who complete the training module
   • DConduct a single simulation at the end of the training and measure the click rate
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   An organization has a diverse workforce, including employees with varying levels of technical expertise. The security team wants to provide user guidance that is effective for all employees. Which approach would be most inclusive and effective?

   • ARequire all employees to complete a technical quiz to ensure they understand the material
   • BFocus training on the most technical employees, as they are the primary target of attacks
   • CProvide a single, comprehensive training document for all employees
   • DOffer multiple training formats, such as videos, interactive modules, and in-person sessions, and allow employees to choose
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   An employee receives a phone call from someone claiming to be from IT, asking for their password to 'fix a problem'. The employee suspects this is a social engineering attempt. What should the employee do?

   • AAsk the caller for their employee ID to verify their identity
   • BProvide the password because the caller sounds legitimate
   • CHang up and report the call to the security team
   • DCall the IT department to verify if the caller is legitimate
   Reveal Solution Discussion Select an answer first