SYO 701 INTRO TO SECURITY Module FC

188. Which of the following is the best way to secure an on-site data center against intrusion from an insider?

• A. Security cameras

• B. Access badge

• C. Firewalls

• D. Data encryption

27. Security controls in a data center are being reviewed to ensure data is properly protected and that human life considerations are included. Which of the following best describes how the controls should be set up?

• A. Safety controls should fail closed

• B. Safety controls should be redundant

• C. Safety controls should fail open

• D. Safety controls should be monitored continuously

157. A systems administrator wants to prevent users from being able to access data based on their responsibilities. The administrator also wants to apply the required access structure via a simplified format. Which of the following should the administrator apply to the site recovery resource group?

• A. RBAC

• B. ACL

• C. IAM

• D. SSO

52. Which of the following is most likely associated with introducing vulnerabilities on a corporate network by the deployment of unapproved software?

• A. Authorized Software Deployment

• B. Shadow IT

• C. Network Segmentation

• D. Regular Software Audits

225. A manager receives an email that contains a link to receive a refund. After hovering over the link, the manager notices that the domain's URL points to a suspicious link. Which of the following security practices helped the manager to identify the attack?

• A. End user training

• B. Regular software updates

• C. Strong password policies

• D. Multi-factor authentication

90. Several employees received a fraudulent text message from someone claiming to be the Chief Executive Officer (CEO). The message stated: "I'm in an airport right now with no access to email. I need you to buy gift cards for employee recognition awards. Please send the gift cards to following email address." Which of the following are the best responses to this situation? (Choose two).

• A. Ignore the message and do nothing.

• B. Add a smishing exercise to the annual company training.

• C. Issue a general email warning to the company.

• D. Respond to the message asking for more details.

120. An IT manager informs the entire help desk staff that only the IT manager and the help desk lead will have access to the administrator console of the help desk software. Which of the following security techniques is the IT manager setting up?

• A. Role-based access control

• B. Mandatory access control

• C. Least privilege

• D. Discretionary access control

141. A security administrator would like to protect data on employees' laptops. Which of the following encryption techniques should the security administrator use?

• A. File encryption

• B. Network encryption

• C. Full disk

• D. Database encryption

232. Which of the following threat vectors is most commonly utilized by insider threat actors attempting data exfiltration?

• A. Unidentified removable devices

• B. Encrypted email communications

• C. Cloud storage services

• D. Physical theft of hardware

189. An engineer moved to another team and is unable to access the new team's shared folders while still being able to access the shared folders from the former team. After opening a ticket, the engineer discovers that the account was never moved to the new group. Which of the following access controls is most likely causing the lack of access?

• A. Role-based

• B. Discretionary

• C. Mandatory

• D. Time-based