CompTIA RC0-501 Online Practice Questions and Exam Preparation

CompTIA RC0-501 Online Questions & Answers

• Question 171:

  A company is terminating an employee for misbehavior. Which of the following steps is MOST important in the process of disengagement from this employee?

  A. Obtain a list of passwords used by the employee.
  B. Generate a report on outstanding projects the employee handled.
  C. Have the employee surrender company identification.
  D. Have the employee sign an NDA before departing.
  C. Have the employee surrender company identification.

• Question 172:

  Which of the following are methods to implement HA in a web application server environment? (Select two.)

  A. Load balancers
  B. Application layer firewalls
  C. Reverse proxies
  D. VPN concentrators
  E. Routers
  A. Load balancers
  B. Application layer firewalls

• Question 173:

  A penetration tester is crawling a target website that is available to the public. Which of the following represents the actions the penetration tester is performing?

  A. URL hijacking
  B. Reconnaissance
  C. White box testing
  D. Escalation of privilege
  B. Reconnaissance

• Question 174:

  While reviewing the security controls in place for a web-based application, a security controls assessor notices that there are no password strength requirements in place. Because of this vulnerability, passwords might be easily discovered using a brute force attack. Which of the following password requirements will MOST effectively improve the security posture of the application against these attacks? (Select two)

  A. Minimum complexity
  B. Maximum age limit
  C. Maximum length
  D. Minimum length
  E. Minimum age limit
  F. Minimum re-use limit
  A. Minimum complexity
  D. Minimum length

• Question 175:

  An attacker wearing a building maintenance uniform approached a company's receptionist asking for access to a secure area. The receptionist asks for identification, a building access badge and checks the company's list approved maintenance personnel prior to granting physical access to the secure are.

  The controls used by the receptionist are in place to prevent which of the following types of attacks?

  A. Tailgating
  B. Shoulder surfing
  C. Impersonation
  D. Hoax
  C. Impersonation

• Question 176:

  A security analyst has received the following alert snippet from the HIDS appliance:

  

  Given the above logs, which of the following is the cause of the attack?

  A. The TCP ports on destination are all open
  B. FIN, URG, and PSH flags are set in the packet header
  C. TCP MSS is configured improperly
  D. There is improper Layer 2 segmentation
  B. FIN, URG, and PSH flags are set in the packet header

• Question 177:

  A systems administrator wants to protect data stored on mobile devices that are used to scan and record assets in a warehouse. The control must automatically destroy the secure container of mobile devices if they leave the warehouse. Which of the following should the administrator implement? (Select two.)

  A. Geofencing
  B. Remote wipe
  C. Near-field communication
  D. Push notification services
  E. Containerization
  A. Geofencing
  E. Containerization

• Question 178:

  When connected to a secure WAP, which of the following encryption technologies is MOST likely to be configured when connecting to WPA2-PSK?

  A. DES
  B. AES
  C. MD5
  D. WEP
  B. AES

• Question 179:

  Which of the following use the SSH protocol?

  A. Stelnet
  B. SCP
  C. SNMP
  D. FTPS
  E. SSL
  F. SFTP
  B. SCP
  F. SFTP

• Question 180:

  Users report the following message appears when browsing to the company's secure site: This website cannot be trusted. Which of the following actions should a security analyst take to resolve these messages? (Select two.)

  A. Verify the certificate has not expired on the server.
  B. Ensure the certificate has a .pfx extension on the server.
  C. Update the root certificate into the client computer certificate store.
  D. Install the updated private key on the web server.
  E. Have users clear their browsing history and relaunch the session.
  A. Verify the certificate has not expired on the server.
  C. Update the root certificate into the client computer certificate store.