CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 1211:

  An organization's employees currently use three different sets of credentials to access multiple internal resources. Management wants to make this process less complex. Which of the following would be the BEST option to meet this goal?

  A. Transitive trust
  B. Single sign-on
  C. Federation
  D. Secure token
  B. Single sign-on

• Question 1212:

  The help desk is receiving numerous password change alerts from users in the accounting department. These alerts occur multiple times on the same day for each of the affected users' accounts. Which of the following controls should be implemented to curtail this activity?

  A. Password Reuse
  B. Password complexity
  C. Password History
  D. Password Minimum age
  D. Password Minimum age

• Question 1213:

  A network administrator wants to ensure that users do not connect any unauthorized devices to the company network. Each desk needs to connect a VoIP phone and computer. Which of the following is the BEST way to accomplish this?

  A. Enforce authentication for network devices
  B. Configure the phones on one VLAN, and computers on another
  C. Enable and configure port channels
  D. Make users sign an Acceptable use Agreement
  A. Enforce authentication for network devices

• Question 1214:

  A security administrator needs to implement a system that detects possible intrusions based upon a vendor provided list. Which of the following BEST describes this type of IDS?

  A. Signature based
  B. Heuristic
  C. Anomaly-based
  D. Behavior-based
  A. Signature based

• Question 1215:

  The Chief Information Security Officer (CISO) at a large company tasks a security administrator to provide additional validation for website customers. Which of the following should the security administrator implement?

  A. HTTP
  B. DNSSEC
  C. 802.1X
  D. Captive portal
  D. Captive portal

• Question 1216:

  A systems administrator is installing and configuring an application service that requires access to read and write to log and configuration files on a local hard disk partition. The service must run as an account with authorization to interact with the file system. Which of the following would reduce the attack surface added by the service and account? (Choose two.)

  A. Use a unique managed service account.
  B. Utilize a generic password for authenticating.
  C. Enable and review account audit logs.
  D. Enforce least possible privileges for the account.
  E. Add the account to the local administrators group.
  F. Use a guest account placed in a non-privileged users group.
  A. Use a unique managed service account.
  D. Enforce least possible privileges for the account.

• Question 1217:

  A black hat hacker is enumerating a network and wants to remain covert during the process. The hacker initiates a vulnerability scan. Given the task at hand the requirement of being covert, which of the following statements BEST indicates that the vulnerability scan meets these requirements?

  A. The vulnerability scanner is performing an authenticated scan.
  B. The vulnerability scanner is performing local file integrity checks.
  C. The vulnerability scanner is performing in network sniffer mode.
  D. The vulnerability scanner is performing banner grabbing.
  C. The vulnerability scanner is performing in network sniffer mode.

• Question 1218:

  When configuring settings in a mandatory access control environment, which of the following specifies the subjects that can access specific data objects?

  A. Owner
  B. System
  C. Administrator
  D. User
  C. Administrator

• Question 1219:

  A security administrator plans to conduct a vulnerability scan on the network to determine if system applications are up to date. The administrator wants to limit disruptions to operations but not consume too many resources. Which of the following types of vulnerability scans should be conducted?

  A. Credentialed
  B. Non-Intrusive
  C. SYN
  D. Port
  B. Non-Intrusive

• Question 1220:

  A pass-the-hash attack is commonly used to:

  A. modify DNS records to point to a different domains.
  B. modify the IP address of the targeted computer.
  C. execute java script to capture user credentials.
  D. laterally move across the network.
  D. laterally move across the network.