CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 101:

  A company has had a BYOD policy in place for many years and now wants to roll out an MDM solution. The company has decided that end users who wish to utilize their personal devices for corporate use must opt in to the MDM solution. End users are voicing concerns about the company having access to their personal devices via the MDM solution. Which of the following should the company implement to ease these concerns?

  A. Sideloading
  B. Full device encryption
  C. Application management
  D. Containerization
  D. Containerization

• Question 102:

  A developer has just finished coding a custom web application and would like to test it for bugs by automatically injecting mailformed data into it. Which of the following is the developer looking to perform?

  A. Fuzzing
  B. Stress testing
  C. Sandboxing
  D. Normalization
  A. Fuzzing

• Question 103:

  Which of the following involves the use of targeted and highly crafted custom attacks against a population of users who may have access to a particular service or program?

  A. Hoaxing
  B. Spear phishing
  C. Vishing
  D. Phishing
  B. Spear phishing

• Question 104:

  An organization's file server has been virtualized to reduce costs. Which of the following types of backups would be MOST appropriate for the particular file server?

  A. Snapshot
  B. Full
  C. Incremental
  D. Differential
  C. Incremental

• Question 105:

  Which of the following terms BEST describes an exploitable vulnerability that exists but has not been publicly disclosed yet?

  A. Design weakness
  B. Zero-day
  C. Logic bomb
  D. Trojan
  B. Zero-day

• Question 106:

  A Chief Information Officer (CIO) recently saw on the news that a significant security flaws exists with a specific version of a technology the company uses to support many critical application. The CIO wants to know if this reported vulnerability exists in the organization and, if so, to what extent the company could be harmed. Which of the following would BEST provide the needed information?

  A. Penetration test
  B. Vulnerability scan
  C. Active reconnaissance
  D. Patching assessment report
  A. Penetration test

• Question 107:

  A government agency with sensitive information wants to virtualize its infrastructure. Which of the following cloud deployment models BEST fits the agency's needs?

  A. Public
  B. Community
  C. Private
  D. Hybrid
  B. Community

• Question 108:

  A computer forensics analyst collected a flash drive that contained a single file with 500 pages of text. Which of the following algorithms should the analyst use to validate the integrity of the file?

  A. 3DES
  B. AES
  C. MD5
  D. RSA
  C. MD5

• Question 109:

  A security guard has informed the Chief Information Security Officer that a person with a tablet has been walking around the building. The guard also noticed strange white markings in different areas of the parking lot. The person is attempting which of the following types of attacks?

  A. Jamming
  B. War chalking
  C. Packet sniffing
  D. Near field communication
  B. War chalking

• Question 110:

  A manufacturer creates designs for very high security products that are required to be protected and controlled by government regulations. These designs are not accessible by corporate networks or the Internet. Which of the following is the BEST solution to protect these designs?

  A. An air gap
  B. A Faraday cage
  C. A shielded cable
  D. A demilitarized zone
  B. A Faraday cage