CompTIA RC0-501 Online Practice Questions and Exam Preparation

CompTIA RC0-501 Online Questions & Answers

• Question 201:

  A company wants to ensure that the validity of publicly trusted certificates used by its web server can be determined even during an extended internet outage. Which of the following should be implemented?

  A. Recovery agent
  B. Ocsp
  C. Crl
  D. Key escrow
  B. Ocsp

• Question 202:

  A security analyst observes the following events in the logs of an employee workstation: Given the information provided, which of the following MOST likely occurred on the workstation?

  

  A. Application whitelisting controls blocked an explogt payload from executing.
  B. Antivirus software found and quarantined three malware files.
  C. Automatic updates were initiated but failed because they had not been approved.
  D. The SIEM log agent was not turned properly and reported a false positive.
  A. Application whitelisting controls blocked an explogt payload from executing.

• Question 203:

  A security administrator is tasked with conducting an assessment made to establish the baseline security posture of the corporate IT infrastructure. The assessment must report actual flaws and weaknesses in the infrastructure. Due to the

  expense of hiring outside consultants, the testing must be performed using in-house or cheaply available resource. There cannot be a possibility of any requirement being damaged in the test.

  Which of the following has the administrator been tasked to perform?

  A. Risk transference
  B. Penetration test
  C. Threat assessment
  D. Vulnerability assessment
  D. Vulnerability assessment

• Question 204:

  Which of the following cryptographic algorithms is irreversible?

  A. RC4
  B. SHA-256
  C. DES
  D. AES
  B. SHA-256

• Question 205:

  An employer requires that employees use a key-generating app on their smartphones to log into corporate applications. In terms of authentication of an individual, this type of access policy is BEST defined as:

  A. Something you have.
  B. Something you know.
  C. Something you do.
  D. Something you are.
  A. Something you have.

• Question 206:

  An organization's primary datacenter is experiencing a two-day outage due to an HVAC malfunction. The node located in the datacenter has lost power and is no longer operational, impacting the ability of all users to connect to the alternate datacenter. Which of the following BIA concepts BEST represents the risk described in this scenario?

  A. SPoF
  B. RTO
  C. MTBF
  D. MTTR
  A. SPoF

• Question 207:

  Which of the following implements two-factor authentication?

  A. A phone system requiring a PIN to make a call
  B. At ATM requiring a credit card and PIN
  C. A computer requiring username and password
  D. A datacenter mantrap requiring fingerprint and iris scan
  B. At ATM requiring a credit card and PIN

• Question 208:

  A website administrator has received an alert from an application designed to check the integrity of the company's website. The alert indicated that the hash value for a particular MPEG file has changed. Upon further investigation, the media appears to be the same as it was before the alert. Which of the following methods has MOST likely been used?

  A. Cryptography
  B. Time of check/time of use
  C. Man in the middle
  D. Covert timing
  E. Steganography
  E. Steganography

• Question 209:

  The data backup window has expanded into the morning hours and has begun to affect production users. The main bottleneck in the process is the time it takes to replicate the backups to separate severs at the offsite data center. Which of the following uses of deduplication could be implemented to reduce the backup window?

  A. Implement deduplication at the network level between the two locations
  B. Implement deduplication on the storage array to reduce the amount of drive space needed
  C. Implement deduplication on the server storage to reduce the data backed up
  D. Implement deduplication on both the local and remote servers
  B. Implement deduplication on the storage array to reduce the amount of drive space needed

• Question 210:

  Which of the following should be used to implement voice encryption?

  A. SSLv3
  B. VDSL
  C. SRTP
  D. VoIP
  C. SRTP