CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 1261:

  After downloading third-party software, a user begins receiving continuous pop-up messages stating the Windows antivirus is outdated. The user is unable to access any files or programs until the subscription is renewed with Bitcoin. Which of the following types of attacks is being executed?

  A. Spyware

  B. Crypto-malware

  C. Adware

  D. Ransomware

  Correct Answer: D

• Question 1262:

  An organization would like to set up a more robust network access system. The network administrator suggests the organization move to a certificate-based authentication setup in which a client-side certificate is used while connecting. Which of the following EAP types should be used to meet these criteria?

  A. EAP-TLS

  B. EAP-FAST

  C. EAP-MD5

  D. EAP-TTLS

  Correct Answer: A

• Question 1263:

  Which of the following involves the use of targeted and highly crafted custom attacks against a population of users who may have access to a particular service or program?

  A. Hoaxing

  B. Spear phishing

  C. Vishing

  D. Phishing

  Correct Answer: B

• Question 1264:

  When building a hosted datacenter, which of the following is the MOST important consideration for physical security within the datacenter?

  A. Security guards

  B. Cameras

  C. Secure enclosures

  D. Biometrics

  Correct Answer: C

• Question 1265:

  An auditor requiring an organization to perform real-time validation of SSL certificates. Which of the following should the organization implement?

  A. OCSP

  B. CRL

  C. CSR

  D. KDC

  Correct Answer: A

• Question 1266:

  Which of the following is a resiliency strategy that allows a system to automatically adapt to workload changes?

  A. Fault tolerance

  B. Redundancy

  C. Elasticity

  D. High availability

  Correct Answer: C

• Question 1267:

  A penetration tester was able to connect to a company's internal network and perform scans and staged attacks for the duration of the testing period without being noticed. The SIEM did not alert the security team to the presence of the penetration tester's devices on the network. Which of the following would provide the security team with notification in a timely manner?

  A. Implement rogue system detection and sensors

  B. Create a trigger on the IPS and alert the security team when unsuccessful logins occur

  C. Decrease the correlation threshold for alerts on the SIEM

  D. Run a credentialed vulnerability scan

  Correct Answer: A

• Question 1268:

  A developer has just finished coding a custom web application and would like to test it for bugs by automatically injecting mailformed data into it. Which of the following is the developer looking to perform?

  A. Fuzzing

  B. Stress testing

  C. Sandboxing

  D. Normalization

  Correct Answer: A

• Question 1269:

  Which of the following is the BEST example of a reputation impact identified during a risk assessment?

  A. A bad software patch taking down the production systems

  B. A misconfigured firewall exposing intellectual property to the Internet

  C. An attacker defacing the e-commerce portal

  D. Malware collecting credentials for company bank accounts

  Correct Answer: C

• Question 1270:

  Which of the following types of vulnerability scans typically returns more detailed and thorough insights into actual system vulnerabilities?

  A. Non-credentialed

  B. Intrusive

  C. Credentialed

  D. Non-intrusive

  Correct Answer: C