CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 1231:

  A security analyst discovers that a company's username and password database was posted on an Internet forum. The username and passwords are stored in plain text. Which of the following would mitigate the damage done by this type of data exfiltration in the future?

  A. Create DLP controls that prevent documents from leaving the network
  B. Implement salting and hashing.
  C. Configure the web content filter to block access to the forum.
  D. Increase password complexity requirements.
  B. Implement salting and hashing.

• Question 1232:

  A security operations learn recently detected a breach of credentials. The team mitigated the risk and followed proper processes lo reduce risk. Which of the following processes would BEST help prevent this issue from happening again?

  A. Risk assessment
  B. Chain of custody
  C. Lessons learned
  D. Penetration test
  B. Chain of custody

• Question 1233:

  An organization is drafting an IRP and needs to determine which employees have the authority to take systems offline during an emergency situation. Which of the following is being outlined?

  A. Reporting and escalation procedures
  B. Permission auditing
  C. Roles and responsibilities
  D. Communication methodologies
  C. Roles and responsibilities

• Question 1234:

  A security engineer is analyzing the following line of JavaScript code that was found in a comment field on a web forum, which was recently involved in a security breach:

  Given the line of code above, which of the following BEST represents the attack performed during the breach?

  A. CSRF
  B. DDoS
  C. DoS
  D. XSS
  D. XSS

• Question 1235:

  An organization has decided to host its web application and database in the cloud. Which of the following BEST describes the security concerns for this decision?

  A. Access to the organization's servers could be exposed to other cloud-provider clients.
  B. The cloud vendor is a new attack vector within the supply chain.
  C. Outsourcing the code development adds risk to the cloud provider.
  D. Vendor support will cease when the hosting platforms reach EOL.
  B. The cloud vendor is a new attack vector within the supply chain.

• Question 1236:

  A company recently replaced its unsecure email server with a cloud-based email and collaboration solution that is managed and insured by a third party. Which of the following actions did the company take regarding risks related to its email and collaboration services?

  A. Transference
  B. Acceptance
  C. Mitigation
  D. Deterrence
  A. Transference

• Question 1237:

  An incident responder is preparing to acquire images and files from a workstation that has been compromised. The workstation is still powered on and running. Which of the following should be acquired LAST?

  A. Application files on hard disk
  B. Processor cache
  C. Processes in running memory
  D. Swap space
  A. Application files on hard disk

• Question 1238:

  A manufacturing company updates a policy that instructs employees not to enter a secure area in groups and requires each employee to swipe their badge to enter the area When employees continue to ignore the policy, a mantrap is installed. Which of the following BEST describe the controls that were implemented to address this issue? (Select TWO).

  A. Detective
  B. Administrative
  C. Deterrent
  D. Physical
  E. Corrective
  C. Deterrent
  E. Corrective

• Question 1239:

  An organization wants to implement a method to correct risks at the system/application layer. Which of the following is the BEST method to accomplish this goal?

  A. IDS/IPS
  B. IP tunneling
  C. Web application firewall
  D. Patch management
  C. Web application firewall

• Question 1240:

  DRAG DROP

  Drag and drop the correct protocol to its default port.

  Select and Place:

  

  

  ---

  FTP uses TCP port 21.

  Telnet uses port 23.

  SSH uses TCP port 22. All protocols encrypted by SSH, including SFTP, SHTTP, SCP, SExec, and slogin, also use TCP port 22. Secure Copy Protocol (SCP) is a secure filetransfer facility based on SSH and Remote Copy Protocol (RCP).

  Secure FTP (SFTP) is a secured alternative to standard File Transfer Protocol (FTP).

  SMTP uses TCP port 25.

  Port 69 is used by TFTP.

  SNMP makes use of UDP ports 161 and 162.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp. 42, 45, 51

  http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers