SY0-801 exam questions

1. Question 1

   Single answer

   A company requires employees to digitally sign purchase orders before they are approved. Later, an employee claims they never submitted one of the orders.

   Which security principle prevents the employee from successfully denying they sent the document?

   • A

     Confidentiality

   • B

     Least privilege

   • C

     Non-repudiation

   • D

     Availability

   Reveal answer

   Correct answer

   • C

     Non-repudiation

   Explanation

   Non-repudiation provides proof that a specific individual performed an action, preventing them from denying they created or approved a digitally signed document.

2. Question 2

   Single answer

   One of the file servers of an organization has suffered an attack. The organization's IT administrator is searching the log files to understand what happened.

   What type of control are they implementing when carrying out the investigation?

   • A

     Operational

   • B

     Technical

   • C

     Detective

   • D

     Physical

   Reveal answer

   Correct answer

   • C

     Detective

   Explanation

   Detective controls help in uncovering issues and anomalies that have leady occurred. Therefore, log files being searched is a detective control.

3. Question 3

   Single answer

   A financial organization requires every employee to verify their identity and device health before accessing any application, even when connected to the corporate network.

   Which security model is being implemented?

   • A

     Implicit trust

   • B

     Zero trust

   • C

     Network segmentation

   • D

     Defense in depth

   Reveal answer

   Correct answer

   • B

     Zero trust

   Explanation

   Zero trust assumes no user or device is trusted by default. Every access request must be continuously verified regardless of its location.

4. Getting the hang of it? 95 more SY0-801 questions are waiting, each with its answer. Unlock them all

5. Question 4

   Single answer

   During a monthly team meeting, an IT manager instructs the mail administrator and network Administrator to create a standard operating procedure (SOP) that documents the required steps for performing routine administrative tasks. Once approved, the SOP provides specific instructions that employees are expected to follow.

   What type of control does the SOP represent?

   • A

     Directive

   • B

     Managerial

   • C

     Operational

   • D

     Technical

   Reveal answer

   Correct answer

   • A

     Directive

   Explanation

   A directive control provides policies, procedures, or instructions that guide employees on how tasks should be performed. The SOP documents the required steps that staff are expected to follow.

6. Question 5

   Single answer

   Which control type focuses on eliminating or minimizing potential threats before they can cause harm?

   • A

     Preventive

   • B

     Compensating

   • C

     Deterrent

   • D

     Corrective

   Reveal answer

   Correct answer

   • A

     Preventive

   Explanation

   Preventive controls are designed to prevent problems or risks from occurring by eliminating or minimizing potential threats.

7. Question 6 Locked Unlock to see this question
8. Question 7 Locked Unlock to see this question

Back to the SY0-801 exam page