CompTIA RC0-501 Online Practice Questions and Exam Preparation

CompTIA RC0-501 Online Questions & Answers

• Question 191:

  A security analyst receives an alert from a WAF with the following payload:

  var data= "" ++ <../../../../../../etc/passwd>" Which of the following types of attacks is this?

  A. Cross-site request forgery
  B. Buffer overflow
  C. SQL injection
  D. JavaScript data insertion
  E. Firewall evasion scipt
  D. JavaScript data insertion

• Question 192:

  After an identified security breach, an analyst is tasked to initiate the IR process. Which of the following is the NEXT step the analyst should take?

  A. Recovery
  B. Identification
  C. Preparation
  D. Documentation
  E. Escalation
  B. Identification

• Question 193:

  When trying to log onto a company's new ticketing system, some employees receive the following message: Access denied: too many concurrent sessions. The ticketing system was recently installed on a small VM with only the recommended hardware specifications. Which of the following is the MOST likely cause for this error message?

  A. Network resources have been exceeded.
  B. The software is out of licenses.
  C. The VM does not have enough processing power.
  D. The firewall is misconfigured.
  C. The VM does not have enough processing power.

• Question 194:

  Which of the following is a document that contains detailed information about actions that include how something will be done, when the actions will be performed, and penalties for failure?

  A. MOU
  B. ISA
  C. BPA
  D. SLA
  D. SLA

• Question 195:

  During a monthly vulnerability scan, a server was flagged for being vulnerable to an Apache Struts explogt. Upon further investigation, the developer responsible for the server informs the security team that Apache Struts is not installed on the server. Which of the following BEST describes how the security team should reach to this incident?

  A. The finding is a false positive and can be disregarded
  B. The Struts module needs to be hardened on the server
  C. The Apache software on the server needs to be patched and updated
  D. The server has been compromised by malware and needs to be quarantined.
  A. The finding is a false positive and can be disregarded

• Question 196:

  A new hire wants to use a personally owned phone to access company resources. The new hire expresses concern about what happens to the data on the phone when they leave the company. Which of the following portions of the company's mobile device management configuration would allow the company data to be removed from the device without touching the new hire's data?

  A. Asset control
  B. Device access control
  C. Storage lock out
  D. Storage segmentation
  B. Device access control

• Question 197:

  A security analyst wants to harden the company's VoIP PBX. The analyst is worried that credentials may be intercepted and compromised when IP phones authenticate with the BPX. Which of the following would best prevent this from occurring?

  A. Implement SRTP between the phones and the PBX.
  B. Place the phones and PBX in their own VLAN.
  C. Restrict the phone connections to the PBX.
  D. Require SIPS on connections to the PBX.
  D. Require SIPS on connections to the PBX.

• Question 198:

  A security administrator has been assigned to review the security posture of the standard corporate system image for virtual machines. The security administrator conducts a thorough review of the system logs, installation procedures, and

  network configuration of the VM image. Upon reviewing the access logs and user accounts, the security administrator determines that several accounts will not be used in production.

  Which of the following would correct the deficiencies?

  A. Mandatory access controls
  B. Disable remote login
  C. Host hardening
  D. Disabling services
  C. Host hardening

• Question 199:

  A technician is configuring a wireless guest network. After applying the most recent changes the technician finds the new devices can no longer find the wireless network by name but existing devices are still able to use the wireless network. Which of the following security measures did the technician MOST likely implement to cause this Scenario?

  A. Deactivation of SSID broadcast
  B. Reduction of WAP signal output power
  C. Activation of 802.1X with RADIUS
  D. Implementation of MAC filtering
  E. Beacon interval was decreased
  A. Deactivation of SSID broadcast

• Question 200:

  The administrator installs database software to encrypt each field as it is written to disk. Which of the following describes the encrypted data?

  A. In-transit
  B. In-use
  C. Embedded
  D. At-rest
  B. In-use