CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 1141:

  Which of the following outcomes is a result of proper error-handling procedures in secure code?

  A. Execution continues with no notice or logging of the error condition.

  B. Minor fault conditions result in the system stopping to preserve state.

  C. The program runs through to completion with no detectable impact or output.

  D. All fault conditions are logged and do not result in a program crash.

  Correct Answer: D

• Question 1142:

  A company wishes to move all of its services and applications to a cloud provider but wants to maintain full control of the deployment, access, and provisions of its services to its users. Which of the following BEST represents the required cloud deployment model?

  A. SaaS

  B. IaaS

  C. MaaS

  D. Hybrid

  E. Private

  Correct Answer: A

• Question 1143:

  A systems administrator has created network file shares for each department with associated security groups for each role within the organization. Which of the following security concepts is the systems administrator implementing?

  A. Separation of duties

  B. Permission auditing

  C. Least privilege

  D. Standard naming conversation

  Correct Answer: C

• Question 1144:

  A technician has installed a new AAA server, which will be used by the network team to control access to a company's routers and switches. The technician completes the configuration by adding the network team members to the NETWORK_TEAM group, and then adding the NETWORK_TEAM group to the appropriate ALLOW_ACCESS access list. Only members of the network team should have access to the company's routers and switches.

  

  Members of the network team successfully test their ability to log on to various network devices configured to use the AAA server. Weeks later, an auditor asks to review the following access log sample:

  

  Which of the following should the auditor recommend based on the above information?

  A. Configure the ALLOW_ACCESS group logic to use AND rather than OR.

  B. Move the NETWORK_TEAM group to the top of the ALLOW_ACCESS access list.

  C. Disable groups nesting for the ALLOW_ACCESS group in the AAA server.

  D. Remove the DOMAIN_USERS group from ALLOW_ACCESS group.

  Correct Answer: D

• Question 1145:

  When accessing a popular website, a user receives a warming that the certificate for the website is not valid. Upon investigation, it was noted that the certificate is not revoked and the website is working fine for other users.

  Which of the following is the MOST likely cause for this?

  A. The certificate is corrupted on the server.

  B. The certificate was deleted from the local cache.

  C. The user needs to restart the machine.

  D. The system date on the user's device is out of sync.

  Correct Answer: D

• Question 1146:

  Datacenter employees have been battling alarms in a datacenter that has been experiencing hotter than normal temperatures. The server racks are designed so all 48 rack units are in use, and servers are installed in any manner in which the technician can get them installed.

  Which of the following practices would BEST alleviate the heat issues and keep costs low?

  A. Utilize exhaust fans.

  B. Use hot and cold aisles.

  C. Airgap the racks.

  D. Use a secondary AC unit.

  Correct Answer: B

• Question 1147:

  A security consultant is setting up a new electronic messaging platform and wants to ensure the platform supports message integrity validation.

  Which of the following protocols should the consultant recommend?

  A. S/MIME

  B. DNSSEC

  C. RADIUS

  D. 802.11x

  Correct Answer: A

• Question 1148:

  A security, who is analyzing the security of the company's web server, receives the following output:

  

  Which of the following is the issue?

  A. Code signing

  B. Stored procedures

  C. Access violations

  D. Unencrypted credentials

  Correct Answer: D

• Question 1149:

  Which of the following is an example of resource exhaustion?

  A. A penetration tester requests every available IP address from a DHCP server.

  B. An SQL injection attack returns confidential data back to the browser.

  C. Server CPU utilization peaks at 100% during the reboot process.

  D. System requirements for a new software package recommend having 12GB of RAM, but only BGB are available.

  Correct Answer: A

• Question 1150:

  A security analyst monitors the syslog server and notices the following:

  

  A. Memory leak

  B. Buffer overflow

  C. Null pointer deference

  D. Integer overflow

  Correct Answer: B