CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 1161:

  A network administrator was provided the following output from a vulnerability scan:

  

  The network administrator has been instructed to prioritize remediation efforts based on overall risk to the enterprise. Which of the following plugin IDs should be remediated FIRST?

  A. 10
  B. 11
  C. 12
  D. 13
  E. 14
  D. 13

• Question 1162:

  An organization wishes to provide better security for its name resolution services.

  Which of the following technologies BEST supports the deployment of DNSSEC at the organization?

  A. LDAP
  B. TPM
  C. TLS
  D. SSL
  E. PKI
  E. PKI

• Question 1163:

  Which of the following cryptography algorithms will produce a fixed-length, irreversible output?

  A. AES
  B. 3DES
  C. RSA
  D. MD5
  D. MD5

• Question 1164:

  Attackers have been using revoked certificates for MITM attacks to steal credentials from employees of Company.com. Which of the following options should Company.com implement to mitigate these attacks?

  A. Captive portal
  B. OCSP stapling
  C. Object identifiers
  D. Key escrow
  E. Extended validation certificate
  B. OCSP stapling

• Question 1165:

  A company is implementing a tool to mask all PII when moving data from a production server to a testing server. Which of the following security techniques is the company applying?

  A. Data wiping
  B. Steganograpgy
  C. Data obfuscation
  D. Data sanitization
  D. Data sanitization

• Question 1166:

  An analysis of a threat actor, which has been active for several years, reveals the threat actor has high levels of funding, motivation, and sophistication. Which of the following types of threat actors does this BEST describe?

  A. Advanced persistent threat
  B. Hacktivist
  C. Organized crime
  D. Insider
  A. Advanced persistent threat

• Question 1167:

  An organization wishes to allow its users to select devices for business use but does not want to overwhelm the service desk with requests for too many different device types and models. Which of the following deployment models should the organization use to BEST meet these requirements?

  A. VDI environment
  B. CYOD model
  C. DAC mode
  D. BYOD model
  B. CYOD model

• Question 1168:

  An organization has decided to purchase an insurance policy because a risk assessment determined that the cost to remediate the risk Is greater than the five-year cost of the insurance policy. The organization is enabling risk:

  A. avoidance.
  B. acceptance.
  C. mitigation.
  D. transference.
  B. acceptance.

• Question 1169:

  An analyst is currently looking at the following output:

  

  Which of the following security issues has been discovered based on the output?

  A. Insider threat
  B. License compliance violation
  C. Unauthorized software
  D. Misconfigured admin permissions
  B. License compliance violation

• Question 1170:

  A systems administrator has isolated an infected system from the network and terminated the malicious process from executing. Which of the following should the administrator do NEXT according to the incident response process?

  A. Restore lost data from a backup.
  B. Wipe the system.
  C. Document the lessons learned.
  D. Determine the scope of impact.
  A. Restore lost data from a backup.