CompTIA RC0-501 Online Practice Questions and Exam Preparation

CompTIA RC0-501 Online Questions & Answers

• Question 151:

  A company has a data system with definitions for "Private" and "Public". The company's security policy outlines how data should be protected based on type. The company recently added the data type "Proprietary". Which of the following is the MOST likely reason the company added this data type?

  A. Reduced cost
  B. More searchable data
  C. Better data classification
  D. Expanded authority of the privacy officer
  C. Better data classification

• Question 152:

  Which of the following can be provided to an AAA system for the identification phase?

  A. Username
  B. Permissions
  C. One-time token
  D. Private certificate
  A. Username

• Question 153:

  Ann a security analyst is monitoring the IDS console and noticed multiple connections from an internal host to a suspicious call back domain. Which of the following tools would aid her to decipher the network traffic?

  A. Vulnerability Scanner
  B. NMAP
  C. NETSTAT
  D. Packet Analyzer
  C. NETSTAT

• Question 154:

  Ann, a security administrator, has been instructed to perform fuzz-based testing on the company's applications. Which of the following best describes what she will do?

  A. Enter random or invalid data into the application in an attempt to cause it to fault
  B. Work with the developers to eliminate horizontal privilege escalation opportunities
  C. Test the applications for the existence of built-in- back doors left by the developers
  D. Hash the application to verify it won't cause a false positive on the HIPS.
  A. Enter random or invalid data into the application in an attempt to cause it to fault

• Question 155:

  After correctly configuring a new wireless enabled thermostat to control the temperature of the company's meeting room, Joe, a network administrator determines that the thermostat is not connecting to the internet-based control system. Joe verifies that the thermostat received the expected network parameters and it is associated with the AP. Additionally, the other wireless mobile devices connected to the same wireless network are functioning properly. The network administrator verified that the thermostat works when tested at his residence. Which of the following is the MOST likely reason the thermostat is not connecting to the internet?

  A. The company implements a captive portal
  B. The thermostat is using the incorrect encryption algorithm
  C. the WPA2 shared likely is incorrect
  D. The company's DHCP server scope is full
  C. the WPA2 shared likely is incorrect

• Question 156:

  An application developer is designing an application involving secure transports from one service to another that will pass over port 80 for a request. Which of the following secure protocols is the developer MOST likely to use?

  A. FTPS
  B. SFTP
  C. SSL
  D. LDAPS
  C. SSL

• Question 157:

  A network administrator is attempting to troubleshoot an issue regarding certificates on a secure website. During the troubleshooting process, the network administrator notices that the web gateway proxy on the local network has signed all of the certificates on the local machine. Which of the following describes the type of attack the proxy has been legitimately programmed to perform?

  A. Transitive access
  B. Spoofing
  C. Man-in-the-middle
  D. Replay
  C. Man-in-the-middle

• Question 158:

  A user has attempted to access data at a higher classification level than the user's account is currently authorized to access. Which of the following access control models has been applied to this user's account?

  A. MAC
  B. DAC
  C. RBAC
  D. ABAC
  C. RBAC

• Question 159:

  An organization relies heavily on an application that has a high frequency of security updates. At present, the security team only updates the application on the first Monday of each month, even though the security updates are released as often as twice a week. Which of the following would be the BEST method of updating this application?

  A. Configure testing and automate patch management for the application.
  B. Configure security control testing for the application.
  C. Manually apply updates for the application when they are released.
  D. Configure a sandbox for testing patches before the scheduled monthly update.
  A. Configure testing and automate patch management for the application.

• Question 160:

  A black hat hacker is enumerating a network and wants to remain convert during the process. The hacker initiates a vulnerability scan. Given the task at hand the requirement of being convert, which of the following statements BEST indicates that the vulnerability scan meets these requirements?

  A. The vulnerability scanner is performing an authenticated scan.
  B. The vulnerability scanner is performing local file integrity checks.
  C. The vulnerability scanner is performing in network sniffer mode.
  D. The vulnerability scanner is performing banner grabbing.
  C. The vulnerability scanner is performing in network sniffer mode.