CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 1181:

  After a ransomware attack. a forensics company needs to review a cryptocurrency transaction between the victim and the attacker. Which of the following will the company MOST likely review to trace this transaction?

  A. The public ledger
  B. The NetFlow data
  C. A checksum
  D. The event log
  D. The event log

• Question 1182:

  A security administrator learns that PII, which was gathered by the organization, has been found in an open forum. As a result, several C-level executives found their identities were compromised, and they were victims of a recent whaling

  attack.

  Which of the following would prevent these problems in the future? (Select TWO).

  A. Implement a reverse proxy.
  B. Implement an email DLP.
  C. Implement a spam filter.
  D. Implement a host-based firewall.
  E. Implement a HIDS.
  B. Implement an email DLP.
  C. Implement a spam filter.

• Question 1183:

  Which of the following is commonly used for federated identity management across multiple organizations?

  A. SAML
  B. Active Directory
  C. Kerberos
  D. LDAP
  A. SAML

• Question 1184:

  Buffer overflow can be avoided using proper:

  A. memory leak prevention
  B. memory reuse
  C. input validation
  D. implementation of ASLR
  C. input validation

• Question 1185:

  Anne, the Chief Executive Officer (CEO), has reported that she is getting multiple telephone calls from someone claiming to be from the helpdesk. The caller is asking to verify her network authentication credentials because her computer is broadcasting across the network. This is MOST likely which of the following types of attacks?

  A. Vishing
  B. Impersonation
  C. Spim
  D. Scareware
  A. Vishing

• Question 1186:

  A company is examining possible locations for a hot site. Which of the following considerations is of MOST concern if the replication technology being used is highly sensitive to network latency?

  A. Connection to multiple power substations
  B. Location proximity to the production site
  C. Ability to create separate caged space
  D. Positioning of the site across international borders
  B. Location proximity to the production site

• Question 1187:

  Which of the following development models entails several iterative and incremental software development methodologies such as Scrum?

  A. Spiral
  B. Waterfall
  C. Agile
  D. Rapid
  C. Agile

• Question 1188:

  A consultant is configuring a vulnerability scanner for a large, global organization in multiple countries. The consultant will be using a service account to scan systems with administrative privileges on a weekly basis, but there is a concern that hackers could gain access to the account and pivot throughout the global network. Which of the following would be BEST to help mitigate this concern?

  A. Create different accounts for each region, each configured with push MFA notifications.
  B. Create one global administrator account and enforce Kerberos authentication.
  C. Create different accounts for each region, limit their logon times, and alert on risky logins.
  D. Create a guest account for each region, remember the last ten passwords, and block password reuse.
  A. Create different accounts for each region, each configured with push MFA notifications.

• Question 1189:

  A website administrator has received an alert from an application designed to check the integrity of the company's website. The alert indicated that the hash value for a particular MPEG file has changed. Upon further investigation, the media appears to be the same as it was before the alert. Which of the following methods has MOST likely been used?

  A. Cryptography
  B. Time of check/time of use
  C. Man in the middle
  D. Covert timing
  E. Steganography
  E. Steganography

• Question 1190:

  The Chief information Officer (CIO) has decided to add two-factor authentication along with the use of passwords when logging on to the network. Which of the following should be implemented to BEST accomplish this requirement?

  A. Require users to enter a PIN
  B. Require users to set complex passwords
  C. Require users to insert a smart card when logging on
  D. Require the system to use a CAPTCHA
  C. Require users to insert a smart card when logging on