CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 1101:

  A company uses WPA2-PSK, and it appears there are multiple unauthorized connected to the wireless network. A technician suspects this is because the wireless passwords has been shared with unauthorized individuals. Which of the following should the technician implement to BEST reduce the risk of this happening in the future?

  A. Wireless guest isolation
  B. 802.1X
  C. WPS
  D. MAC address blacklist
  B. 802.1X

• Question 1102:

  A company uses WPA2-PSK. and it appears there are multiple unauthorized devices connected to the wireless network A technician suspects this is because the wireless password has been shared with unauthorized individuals. Which of the following should the technician implement to BEST reduce the risk of this happening in the future?

  A. Wireless guest isolation
  B. 802.1X
  C. WPS
  D. MAC address blacklist
  B. 802.1X

• Question 1103:

  A security analyst monitors the syslog server and notices the following:

  

  A. Memory leak
  B. Buffer overflow
  C. Null pointer deference
  D. Integer overflow
  B. Buffer overflow

• Question 1104:

  Joe, a user at a company, clicked an email link that led to a website that infected his workstation. Joe was connected to the network, and the virus spread to the network shares. The protective measures failed to stop this virus, and it has continued to evade detection. Which of the following should a security administrator implement to protect the environment from this malware?

  A. Install a definition-based antivirus.
  B. Implement an IDS/IPS.
  C. Implement a heuristic behavior-detection solution.
  D. Implement CASB to protect the network shares.
  B. Implement an IDS/IPS.

• Question 1105:

  Which of the following techniques can be bypass a user or computer's web browser privacy settings? (Select Two)

  A. SQL injection
  B. Session hijacking
  C. Cross-site scripting
  D. Locally shared objects
  E. LDAP injection
  B. Session hijacking
  C. Cross-site scripting

• Question 1106:

  Which of the following components of printers and MFDs are MOST likely to be used as vectors of compromise if they are improperly configured?

  A. Embedded web server
  B. Spooler
  C. Network interface
  D. LCD control panel
  A. Embedded web server

• Question 1107:

  HOTSPOT

  For each of the given items, select the appropriate authentication category from the dropdown choices. Instructions: When you have completed the simulation, please select the Done button to submit.

  Hot Area:

  

  

  ---

  Something you are includes fingerprints, retina scans, or voice recognition.

  Something you have includes smart cards, token devices, or keys.

  Something you know includes a passwords, codes, PINs, combinations, or secret phrases.

  Somewhere you are includes a physical location s or logical addresses, such as domain name, an IP address, or a MAC address.

  Something you do includes your typing rhythm, a secret handshake, or a private knock.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, p. 285

• Question 1108:

  Which of the following is MOST likely the security impact of continuing to operate end-of- life systems?

  A. Higher total cost of ownership due to support costs
  B. Denial of service due to patch availability
  C. Lack of vendor support for decommissioning
  D. Support for legacy protocols
  A. Higher total cost of ownership due to support costs

• Question 1109:

  A company wants to ensure that the validity of publicly trusted certificates used by its web server can be determined even during an extended internet outage. Which of the following should be implemented?

  A. Recovery agent
  B. Ocsp
  C. Crl
  D. Key escrow
  B. Ocsp

• Question 1110:

  A security administrator is adding a NAC requirement for all VPN users to ensure the co requirement?

  A. Implement a permanent agent.
  B. Install antivirus software.
  C. Use an agentless implementation.
  D. Implement PKI.
  A. Implement a permanent agent.