CompTIA RC0-501 Online Practice Questions and Exam Preparation

CompTIA RC0-501 Online Questions & Answers

• Question 221:

  A datacenter manager has been asked to prioritize critical system recovery priorities. Which of the following is the MOST critical for immediate recovery?

  A. Communications software
  B. Operating system software
  C. Weekly summary reports to management
  D. Financial and production software
  B. Operating system software

• Question 222:

  A company has a security policy that specifies all endpoint computing devices should be assigned a unique identifier that can be tracked via an inventory management system. Recent changes to airline security regulations have cause many

  executives in the company to travel with mini tablet devices instead of laptops. These tablet devices are difficult to tag and track. An RDP application is used from the tablet to connect into the company network.

  Which of the following should be implemented in order to meet the security policy requirements?

  A. Virtual desktop infrastructure (IDI)
  B. WS-security and geo-fencing
  C. A hardware security module (HSM)
  D. RFID tagging system
  E. MDM software
  F. Security Requirements Traceability Matrix (SRTM)
  E. MDM software

• Question 223:

  A computer on a company network was infected with a zero-day explogt after an employee accidently opened an email that contained malicious content. The employee recognized the email as malicious and was attempting to delete it, but accidently opened it. Which of the following should be done to prevent this scenario from occurring again in the future?

  A. Install host-based firewalls on all computers that have an email client installed
  B. Set the email program default to open messages in plain text
  C. Install end-point protection on all computers that access web email
  D. Create new email spam filters to delete all messages from that sender
  C. Install end-point protection on all computers that access web email

• Question 224:

  Which of the following encryption methods does PKI typically use to securely project keys?

  A. Elliptic curve
  B. Digital signatures
  C. Asymmetric
  D. Obfuscation
  B. Digital signatures

• Question 225:

  While performing surveillance activities, an attacker determines that an organization is using 802.1X to secure LAN access. Which of the following attack mechanisms can the attacker utilize to bypass the identified network security?

  A. MAC spoofing
  B. Pharming
  C. Xmas attack
  D. ARP poisoning
  A. MAC spoofing

• Question 226:

  A security guard has informed the Chief Information Security Officer that a person with a tablet has been walking around the building. The guard also noticed strange white markings in different areas of the parking lot. The person is attempting which of the following types of attacks?

  A. Jamming
  B. War chalking
  C. Packet sniffing
  D. Near field communication
  B. War chalking

• Question 227:

  A security analyst has been asked to perform a review of an organization's software development lifecycle. The analyst reports that the lifecycle does not contain a phase in which team members evaluate and provide critical feedback of another developer's code. Which of the following assessment techniques is BEST described in the analyst's report?

  A. Architecture evaluation
  B. Baseline reporting
  C. Whitebox testing
  D. Peer review
  D. Peer review

• Question 228:

  A security administrator is evaluating three different services: radius, diameter, and Kerberos. Which of the following is a feature that is UNIQUE to Kerberos?

  A. It provides authentication services
  B. It uses tickets to identify authenticated users
  C. It provides single sign-on capability
  D. It uses XML for cross-platform interoperability
  B. It uses tickets to identify authenticated users

• Question 229:

  A new firewall has been places into service at an organization. However, a configuration has not been entered on the firewall. Employees on the network segment covered by the new firewall report they are unable to access the network. Which of the following steps should be completed to BEST resolve the issue?

  A. The firewall should be configured to prevent user traffic form matching the implicit deny rule.
  B. The firewall should be configured with access lists to allow inbound and outbound traffic.
  C. The firewall should be configured with port security to allow traffic.
  D. The firewall should be configured to include an explicit deny rule.
  A. The firewall should be configured to prevent user traffic form matching the implicit deny rule.

• Question 230:

  During a recent audit, it was discovered that many services and desktops were missing security patches. Which of the following BEST describes the assessment that was performed to discover this issue?

  A. Network mapping
  B. Vulnerability scan
  C. Port Scan
  D. Protocol analysis
  B. Vulnerability scan