CompTIA RC0-501 Online Practice Questions and Exam Preparation

CompTIA RC0-501 Online Questions & Answers

• Question 241:

  A company is planning to encrypt the files in several sensitive directories of a file server with a symmetric key. Which of the following could be used?

  A. RSA
  B. TwoFish
  C. Diffie-Helman
  D. NTLMv2
  E. RIPEMD
  B. TwoFish

• Question 242:

  Malicious traffic from an internal network has been detected on an unauthorized port on an application server. Which of the following network-based security controls should the engineer consider implementing?

  A. ACLs
  B. HIPS
  C. NAT
  D. MAC filtering
  A. ACLs

• Question 243:

  A database backup schedule consists of weekly full backups performed on Saturday at 12:00 a.m. and daily differential backups also performed at 12:00 a.m. If the database is restored on Tuesday afternoon, which of the following is the number of individual backups that would need to be applied to complete the database recovery?

  A. 1
  B. 2
  C. 3
  D. 4
  B. 2

• Question 244:

  A technician suspects that a system has been compromised. The technician reviews the following log entry:

  WARNING- hash mismatch: C:\Window\SysWOW64\user32.dll WARNING- hash mismatch: C:\Window\SysWOW64\kernel32.dll Based solely ono the above information, which of the following types of malware is MOST likely installed on the

  system?

  A. Rootkit
  B. Ransomware
  C. Trojan
  D. Backdoor
  A. Rootkit

• Question 245:

  A Security Officer on a military base needs to encrypt several smart phones that will be going into the field. Which of the following encryption solutions should be deployed in this situation?

  A. Elliptic curve
  B. One-time pad
  C. 3DES
  D. AES-256
  D. AES-256

• Question 246:

  A security analyst is hardening an authentication server. One of the primary requirements is to ensure there is mutual authentication and delegation. Given these requirements, which of the following technologies should the analyst recommend and configure?

  A. LDAP services
  B. Kerberos services
  C. NTLM services
  D. CHAP services
  B. Kerberos services

• Question 247:

  When configuring settings in a mandatory access control environment, which of the following specifies the subjects that can access specific data objects?

  A. Owner
  B. System
  C. Administrator
  D. User
  C. Administrator

• Question 248:

  An organization wishes to provide better security for its name resolution services. Which of the following technologies BEST supports the deployment of DNSSEC at the organization?

  A. LDAP
  B. TPM
  C. TLS
  D. SSL
  E. PKI
  E. PKI

• Question 249:

  A company's AUP requires: Passwords must meet complexity requirements. Passwords are changed at least once every six months. Passwords must be at least eight characters long.

  An auditor is reviewing the following report:

  

  Which of the following controls should the auditor recommend to enforce the AUP?

  A. Account lockout thresholds
  B. Account recovery
  C. Password expiration
  D. Prohibit password reuse
  C. Password expiration

• Question 250:

  Joe, a technician, is working remotely with his company provided laptop at the coffee shop near his home. Joe is concerned that another patron of the coffee shop may be trying to access his laptop. Which of the following is an appropriate control to use to prevent the other patron from accessing Joe's laptop directly?

  A. full-disk encryption
  B. Host-based firewall
  C. Current antivirus definitions
  D. Latest OS updates
  B. Host-based firewall