CompTIA RC0-501 Online Practice Questions and Exam Preparation

CompTIA RC0-501 Online Questions & Answers

• Question 121:

  A security administrator wants to implement a company-wide policy to empower data owners to manage and enforce access control rules on various resources. Which of the following should be implemented?

  A. Mandatory access control
  B. Discretionary access control
  C. Role based access control
  D. Rule-based access control
  B. Discretionary access control

• Question 122:

  The SSID broadcast for a wireless router has been disabled but a network administrator notices that unauthorized users are accessing the wireless network. The administer has determined that attackers are still able to detect the presence of

  the wireless network despite the fact the SSID has been disabled.

  Which of the following would further obscure the presence of the wireless network?

  A. Upgrade the encryption to WPA or WPA2
  B. Create a non-zero length SSID for the wireless router
  C. Reroute wireless users to a honeypot
  D. Disable responses to a broadcast probe request
  D. Disable responses to a broadcast probe request

• Question 123:

  A dumpster diver recovers several hard drives from a company and is able to obtain confidential data from one of the hard drives. The company then discovers its information is posted online. Which of the following methods would have MOST likely prevented the data from being exposed?

  A. Removing the hard drive from its enclosure
  B. Using software to repeatedly rewrite over the disk space
  C. Using Blowfish encryption on the hard drives
  D. Using magnetic fields to erase the data
  D. Using magnetic fields to erase the data

• Question 124:

  A company is developing a new system that will unlock a computer automatically when an authorized user sits in front of it, and then lock the computer when the user leaves. The user does not have to perform any action for this process to occur. Which of the following technologies provides this capability?

  A. Facial recognition
  B. Fingerprint scanner
  C. Motion detector
  D. Smart cards
  A. Facial recognition

• Question 125:

  Which of the following cryptographic attacks would salting of passwords render ineffective?

  A. Brute force
  B. Dictionary
  C. Rainbow tables
  D. Birthday
  C. Rainbow tables

• Question 126:

  An organization is moving its human resources system to a cloud services provider. The company plans to continue using internal usernames and passwords with the service provider, but the security manager does not want the service provider to have a company of the passwords. Which of the following options meets all of these requirements?

  A. Two-factor authentication
  B. Account and password synchronization
  C. Smartcards with PINS
  D. Federated authentication
  D. Federated authentication

• Question 127:

  Joe a website administrator believes he owns the intellectual property for a company invention and has been replacing image files on the company's public facing website in the DMZ. Joe is using steganography to hide stolen data. Which of the following controls can be implemented to mitigate this type of inside threat?

  A. Digital signatures
  B. File integrity monitoring
  C. Access controls
  D. Change management
  E. Stateful inspection firewall
  B. File integrity monitoring

• Question 128:

  A security administrator has been tasked with improving the overall security posture related to desktop machines on the network. An auditor has recently that several machines with confidential customer information displayed in the screens are left unattended during the course of the day. Which of the following could the security administrator implement to reduce the risk associated with the finding?

  A. Implement a clean desk policy
  B. Security training to prevent shoulder surfing
  C. Enable group policy based screensaver timeouts
  D. Install privacy screens on monitors
  C. Enable group policy based screensaver timeouts

• Question 129:

  Which of the following are the MAIN reasons why a systems administrator would install security patches in a staging environment before the patches are applied to the production server? (Select two.)

  A. To prevent server availability issues
  B. To verify the appropriate patch is being installed
  C. To generate a new baseline hash after patching
  D. To allow users to test functionality
  E. To ensure users are trained on new functionality
  A. To prevent server availability issues
  D. To allow users to test functionality

• Question 130:

  A Security administrator wants to implement strong security on the company smart phones and terminal servers located in the data center. Drag and Drop the applicable controls to each asset type. Instructions: Controls can be used multiple times and not all placeholders needs to be filled. When you have completed the simulation, Please select Done to submit.

  Select and Place:

  

  

  ---

  Cable locks are used as a hardware lock mechanism