ExamNova

Threats, Vulnerabilities, and Mitigations

This domain carries 22% of the SY0-701 exam. Practise it with original questions that explain every answer option.

Practise this domain free

Certification
SY0-701
Exam weight
22%
Subdomains
5
Objectives
27

What this domain covers

Compare and Contrast Common Threat Actors and Motivations5 topics
Explain Common Threat Vectors and Attack Surfaces5 topics
Explain Various Types of Vulnerabilities6 topics
Given a Scenario, Analyze Indicators of Malicious Activity6 topics
Explain the Purpose of Mitigation Techniques Used to Secure the Enterprise5 topics

Example question from this domain

A genomics research facility is building an AI platform that analyzes sensitive patient sequencing data. The platform uses many open-source libraries for machine learning, statistics, and visualization. The team needs a control that proactively identifies hidden vulnerabilities and license-compliance issues in third-party dependencies during development. Which application security measure is MOST effective?

  • Software Composition Analysis (SCA)
  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
  • Penetration Testing (PT)

Software Composition Analysis (SCA) — Software Composition Analysis scans open-source and third-party components, maps versions, and compares them with vulnerability and license databases. That makes it the best choice for identifying supply-chain risk and compliance issues in dependencies during development.

Static Application Security Testing (SAST) — Static Application Security Testing analyzes source, bytecode, or binaries without execution. It can find flaws in first-party code, but it is not built to catalog open-source libraries or assess their known vulnerabilities and licenses.

Dynamic Application Security Testing (DAST) — Dynamic Application Security Testing probes a live application from the outside to find exploitable runtime issues. It does not provide visibility into internal library versions or license compliance for third-party components.

Penetration Testing (PT) — Penetration testing validates exploitable weaknesses in a deployed system, but it is not an automated way to track open-source components, identify known library vulnerabilities, or verify licensing during development.

Continue with SY0-701

All SY0-701 practiceAll certifications

Domain names and weightings follow the vendor's published exam guide. ExamNova questions are written in-house and are not exam dumps.