stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
BOOK YOUR SEAT CHALLANGE SYO-701 Endgame DAY 4 (JUNE 2025) AM Flashcards | StudBud
Explore
/
BOOK YOUR SEAT CHALLANGE SYO-701 Endgame DAY 4 (JUNE 2025) AM
BOOK YOUR SEAT CHALLANGE SYO-701 Endgame DAY 4 (JUNE 2025) AM
49 terms
·
StudBud Administration
·
137 plays
Imported from external platform
Flashcards
49 cards
F
Practice quiz
P
Host live
L
Questions
49
Answers
1
In which river delta's would you see salt-water crocodiles? (choose 2)
River Nile
Darwin River, Northern territory
Hudson bay
Rhine
2
An organisation's Internet-facing website was compromised when an attacker exploited a buffer overflow. What mitigates?
TLS
SD-Wan
NGFW
WAF
3
When you receive a SMS text based phishing message, it is known as:
Smishing
Pretexting
Spoofing
Vishing
4
An unsecure wireless network can lead to:
Biometric failure
On-path attacks
Strong encryption
Physical damage
5
Which of the following can be used to compromise a system that is running a RTOS in a SCADA network?
Ransomware
Memory injection
Replay attack
Cross site scripting
6
Which side of the road do you drive on when visiting the Emerald Isle?
in the gutter
right
down the middle
left
7
A data classification initiative discovered that sensitive data could be
EXFILTATED
from the environment. What protects
XDR
DMARC
DLP
SPF
8
A HR user was able to exfiltrate sensitive company data using HTTP over port 53. What could have blocked this?
WAF utilizing SSL decryption
SD-WAN utilizing IPSec
UTM utilizing a threat feed
NGFW utilizing application inspection
9
What part of change management BEST ensures a technician cannot implement an un-sanctioned set of updates?
Testing Results
Approval Process
Backout Plan
Impact Analysis
10
Which of the following methods would most likely be used to identify legacy systems?
Vulnerability scan
Bug bounty program
Package monitoring
Dynamic analysis
11
Which authentication factor is associated with "
something you are
" choose 2
Smard Card
Tired
Fingerprint
FIDO device
PIN
Iris Scan
12
You need to improve the company’s authentication policy following a password audit. Choose two
Something you have
Complexity
Biometrics
Least privilege
Security keys
Length
13
In which country will you find Koala Bears
Japan
Australia
Thailand
China
14
What passive reconnaissance technique is employed by penetration testers in the early phases of an engagement?
Pivoting
Open-source intelligence
Post scanning
Exploit validation
15
A customer is moving all services into the cloud using an IaaS model. There is a breach due to a missing O/S patch.
The customer is responsible for the patching
The Data Controller is responsible for the patching
The CSP is responsible for the patching
Microsoft is responsible for the patching
16
What tactic involves fabricated scenarios?
Pretexting
Smishing
Spoofing
Vishing
17
A systems admin is working on a defense-in-depth strategy & needs to restrict activity from employees after hours
Attribute-based restrictions
Role-based restrictions
Mandatory restrictions
Time-of-day restrictions
18
What BEST allows for rapid provisioning of SaaS applications to support scaling?
Virtualisation
Containers
Employ more datacenter staff
Increase network bandwith
19
Which of the following architectures is most suitable to provide redundancy to critical business processes?
Concrete under-pinning
Cloud native
Network enabled
Multi-tenant
20
Customers want a provider to verify its security controls are secure & have requested an independent opinion?
Perform an annual assessment
Provide a third-party attestation report
Hire a vendor to perform a penetration test
Allow each client the right to audit
21
Which authentication factor is associated with "
something you know
" choose 2
Fingerprint
Iris Scan
Smard Card
FIDO device
Password
PIN
22
During a penetration test a vendor attempts to enter an unauthorised area using an access badge. What is the test?
Physical
Defensive
Offensive
Passive
23
What is the tallest mountain in Scotland?
Ben Nevis
Mount Everest
Mount Fuji
Mount Okinawa
24
An alert was configured to notify the security team if a fake password spreadsheet is opened.
Honeyfile
Honeypot
Honeytoken
Honeynet
25
Which authentication factor is associated with "
something you have
" choose 2
Iris Scan
PIN
Tired
Fingerprint
FIDO device
Smard Card
26
Effective application security includes:
Ignoring errors
Open-source libraries
Input validation
Hardcoded passwords
27
What BEST protects a network from insider threat actors, stealing company data through external cloud storage?
DLP
PROXY
NIDS
NIPS
28
Which of the following is the best way to secure an on-site data center against intrusion from an insider?
Motion sensor
Access badge
Video surveillance
Bollards
29
What would best help reduce the number of visits to external "
password strength checking
" websites in the future?
Introduce a campaign to recognize phishing attempts.
Restrict internet access for the employees who disclosed credentials
Implement a deny list of websites.
Block all outbound traffic from the intranet.
30
When you receive a e-mail based message on a pretext to update important account settings, it is known as:
Vishing
Phishing
Smishing
Spoofing
31
What best to prevent root kits being installed on endpoints?
NIDS
EDR
FDE
Cloud Storage
32
What is the correct term for a group Baboons?
A Herd
A Congress
A Team
A Pack
33
A malicious update was distributed by a common software platform and disabled services at many organisations.
Supply chain
Insider threats
DDoS attack
Rogue employee
34
Which logs should be analyzed to identify the hosts impacted by a remote command and control server? (Choose 2)
Firewall
Network
Authentication
Database
Application
DHCP
35
Which security concept is being followed when implementing a product that offers protection against DDoS attacks?
Confidentiality
Availability
Integrity
Non-repudiation
36
Email scam targeting companies is:
Smishing
Vishing
Pretexting
Business email compromise
37
Which of the following is a benefit of launching a bug bounty programme? (Choose 2)?
Reduced cost of managing the programme
Increase security awareness of the workforce
Improved patch management process
Improved reputation for the organisation
Reduction in the number of zero-day vulnerabilities
Quicker discovery of vulnerabilities
38
What type of network will most likely use un-secure protocols and legacy systems?
CLOUD DATACENTER
SCADA
Research Lab
BANK
39
What would be used to detect an employee who is emailing a customer list to a personal account before leaving a company?
FIM
DLP
EDR
IDS
40
Which penetration testing team is focused only on trying to compromise an organization using an attacker's tactics?
Red
White
Blue
Purple
41
Which of the following alert types is the most likely to be ignored over time
True negative
False positive
True positive
False negative
42
What is crucial for securing IoT devices?
One-time passwords
Regular updates
Physical locks
Avoiding use
43
A security engineer is installing an IPS to block signature-based attacks in the environment. What mode is BEST?
Audit
Monitor
Sensor
Active
44
In which country will you find the most towns/cities called Moscow?
Russia
Moldova
USA
Ukraine
45
What is it when source code is hidden inside an audio file?
Watermarking
E-Mail Attachment
Steganography
Secure Coding
46
A disaster recovery location that allows the company to immediately continue operations in an alternate site?
Warm
Hot
Cold
Luke Warm
47
Which of the following best describes configuring devices to log to an offsite location for possible future reference?
SCAP
Log aggregation
DLP
Archiving
48
Which of the following should a security analyst use to help the IDS detect behavioral attacks in the future?
Reputation
Trends
Honeypot
Signatures
49
A malicious update was distributed by a common software platform and disabled services at many organisations.
This is a Rogue employee
This is Supply chain attack
This is DDoS attack
This is Insider threats