Online Access Free SY0-701 Practice Test

While updating the security awareness training, a security analyst wants to address issues created if vendors ' email accounts are compromised. Which of the following recommendations should the security analyst include in the training?

• A.Be alert to unexpected requests from familiar email addresses.
• B.Require that invoices be sent as attachments.
• C.Delete emails from unknown service provider partners.
• D.Refrain from clicking on images included in emails from new vendors.

Two companies are in the process of merging. The companies need to decide how to standardize their information security programs. Which of the following would best align the security programs?

• A.Shared deployment of CIS baselines
• B.Assessment of controls in a vulnerability report
• C.Both companies following the same CSF
• D.Joint cybersecurity best practices

An employee receives a text message from an unknown number claiming to be the company ' s Chief Executive Officer and asking the employee to purchase several gift cards. Which of the following types of attacks does this describe?

• A.Pretexting
• B.Vishing
• C.Phishing
• D.Smishing

The marketing department set up its own project management software without telling the appropriate departments. Which of the following describes this scenario?

• A.Data exfiltration
• B.Insider threat
• C.Service disruption
• D.Shadow IT

A company is concerned about the theft of client data from decommissioned laptops. Which of the following is the most cost-effective method to decrease this risk?

• A.Shredding
• B.Recycling
• C.Deletion
• D.Wiping