CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 1081:

  An administrator needs to protect rive websites with SSL certificates Three of the websites have different domain names, and two of the websites share the domain name but have different subdomain prefixes. Which of the following SSL certificates should the administrator purchase to protect all the websites and be able to administer them easily at a later time?

  A. One SAN certificate

  B. One Unified Communications Certificate and one wildcard certificate

  C. One wildcard certificate and two standard certificates

  D. Five standard certificates

  Correct Answer: B

• Question 1082:

  Which of the following Is a resiliency strategy that allows a system to automatically adapt to workload changes?

  A. Fault tolerance

  B. Redundancy

  C. Elasticity

  D. High availability

  Correct Answer: C

• Question 1083:

  Which of the following can be used to increase the time needed to brute force a hashed password?

  A. BCRYPT

  B. ECDHE

  C. Elliptic curve

  D. Diffie-Hellman

  Correct Answer: A

• Question 1084:

  Which of the following impacts MOST likely result from poor exception handling?

  A. Widespread loss of condential data

  B. Network-wide resource exhaustion

  C. Privilege escalation

  D. Local disruption of services

  Correct Answer: A

• Question 1085:

  A developer is building a new web portal for internal use. The web portal will only the accessed by internal users and will store operational documents. Which of the following certicate types should the developer install if the company is MOST interested in minimizing costs?

  A. Wildcard

  B. Code signing

  C. Root

  D. Self-signed

  Correct Answer: A

• Question 1086:

  Which of the following is the main difference between symmetric end asymmetric cryptographic algorithms?

  A. The use of PKI in symmetric algorithms

  B. HSM-based key generation

  C. Only one Key used in symmetric algorithms

  D. Random vs pseudo-random key generation

  Correct Answer: C

• Question 1087:

  As a security measure, an organization has disabled all external media from accessing the network Since some users may have data that needs to be transferred to the network, which of the would BEST assist a security administrator with transferring the data while keeping the internal network secure?

  A. Upload the media in the DMZ

  B. Upload the data in a separate VLAN

  C. Contact the data custodian

  D. Use a standalone scanning system

  Correct Answer: A

• Question 1088:

  A security administrator wants to better prepare the incident response team for possible security events. The IRP has been updated and distributed to incident response team members. Which of the following is the BEST option to fulfill the administrator's objective?

  A. identify the members' roles and responsibilities.

  B. Select a backup/failover location.

  C. Determine the order of restoration.

  D. Conduct a tabletop test.

  Correct Answer: A

• Question 1089:

  Which of the following BEST describes why an air gap is a useful security control?

  A. It physically isolates two or more networks, therefore helping prevent cross contamination or accidental data spillage.

  B. It requires that files be transferred via USB instead of networks that are potentially vulnerable to hacking, therefore preventing virus infections.

  C. It requires multiple systems administrators with different credentials, therefore providing separation of duties.

  D. It provides physical space between two interlocking doors, therefore providing additional control from unauthorized entry.

  Correct Answer: A

• Question 1090:

  A security administrator is implementing a SIEM and needs to ensure events can be compared against each other based on when the events occurred and were collected. Which of the following does the administrator need to implement to ensure this can be accomplished?

  A. TOTP

  B. TKJP

  C. NTP

  D. HOTP

  Correct Answer: C