CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 1121:

  During a routine check, a security analyst discovered the script responsible for the backup of the corporate file server has been changed to the following:

  

  Which of the following BEST describes the type of malware the analyst discovered?

  A. Keylogger
  B. Rootkit
  C. RAT
  D. Logic bomb
  D. Logic bomb

• Question 1122:

  Which of the following is a benefit of credentialed vulnerability scans?

  A. Credentials provide access to scan documents to identify possible data theft.
  B. The vulnerability scanner is able to inventory software on the target.
  C. A scan will reveal data loss in real time.
  D. Black-box testing can be performed.
  B. The vulnerability scanner is able to inventory software on the target.

• Question 1123:

  An application developer has neglected to include input validation checks in the design of the company's new web application. An employee discovers that repeatedly submitting large amounts of data, including custom code to an application will allow the execution of the custom code at the administrator level. Which of the following BEST identifies this application attack?

  A. Cross-site scripting
  B. Clickjacking
  C. Buffer overflow
  D. Replay
  C. Buffer overflow

• Question 1124:

  A security team has downloaded a public database of the largest collection of password dumps on the Internet. This collection contains the cleartext credentials of every major breach for the last four years. The security team pulls and compares users' credentials to the database and discovers that more than 30% of the users were still using passwords discovered in this list. Which of the following would be the BEST combination to reduce the risks discovered?

  A. Password length, password encryption, password complexity
  B. Password complexity, least privilege, password reuse
  C. Password reuse, password complexity, password expiration
  D. Group policy, password history, password encryption
  A. Password length, password encryption, password complexity

• Question 1125:

  A security administrator needs to conduct a full inventory of all encryption protocols and cipher suites. Which of the following tools will the security administrator use to conduct this inventory MOST efficiently?

  A. tcpdump
  B. Protocol analyzer
  C. Netstat
  D. Nmap
  D. Nmap

• Question 1126:

  The Chief Technology Officer (CTO) of a company, Ann, is putting together a hardware budget for the next 10 years. She is asking for the average lifespan of each hardware device so that she is able to calculate when she will have to replace

  each device.

  Which of the following categories BEST describes what she is looking for?

  A. ALE
  B. MTTR
  C. MTBF
  D. MTTF
  D. MTTF

• Question 1127:

  A critical enterprise component whose loss or destruction would significantly impede business operations or have an outsized impact on corporate revenue is known as:

  A. a single point of failure
  B. critical system infrastructure
  C. proprietary information.
  D. a mission-essential function
  D. a mission-essential function

• Question 1128:

  Which of the following controls does a mantrap BEST represent?

  A. Deterrent
  B. Detective
  C. Physical
  D. Corrective
  C. Physical

• Question 1129:

  Which of the following are used to increase the computing time it takes to brute force a password using an offline attack? (Select TWO)

  A. XOR
  B. PBKDF2
  C. bcrypt
  D. HMAC
  E. RIPEMD
  B. PBKDF2
  C. bcrypt

• Question 1130:

  While reviewing the security controls in place for a web-based application, a security controls assessor notices that there are no password strength requirements in place. Because of this vulnerability, passwords might be easily discovered using a brute force attack. Which of the following password requirements will MOST effectively improve the security posture of the application against these attacks? (Select two)

  A. Minimum complexity
  B. Maximum age limit
  C. Maximum length
  D. Minimum length
  E. Minimum age limit
  F. Minimum re-use limit
  A. Minimum complexity
  D. Minimum length