CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 1261:

  Which of the following types of security testing is the MOST cost-effective approach used to analyze existing code and identity areas that require patching?

  A. Black box
  B. Gray box
  C. White box
  D. Red team
  E. Blue team
  C. White box

• Question 1262:

  A security administrator has replaced the firewall and notices a number of dropped connections. After looking at the data the security administrator sees the following information that was flagged as a possible issue:

  "SELECT * FROM" and `1'='1'

  Which of the following can the security administrator determine from this?

  A. An SQL injection attack is being attempted
  B. Legitimate connections are being dropped
  C. A network scan is being done on the system
  D. An XSS attack is being attempted
  A. An SQL injection attack is being attempted

• Question 1263:

  Which of the following encryption methods does PKI typically use to securely project keys?

  A. Elliptic curve
  B. Digital signatures
  C. Asymmetric
  D. Obfuscation
  C. Asymmetric

• Question 1264:

  Which of the following BEST describes an attack where communications between two parties are intercepted and forwarded to each party with neither party being aware of the interception and potential modification to the communications?

  A. Spear phishing
  B. Main-in-the-middle
  C. URL hijacking
  D. Transitive access
  B. Main-in-the-middle

• Question 1265:

  A security administrator is evaluating three different services: radius, diameter, and Kerberos. Which of the following is a feature that is UNIQUE to Kerberos?

  A. It provides authentication services
  B. It uses tickets to identify authenticated users
  C. It provides single sign-on capability
  D. It uses XML for cross-platform interoperability
  B. It uses tickets to identify authenticated users

• Question 1266:

  After patching computers with the latest application security patches/updates, users are unable to open certain applications. Which of the following will correct the issue?

  A. Modifying the security policy for patch management tools
  B. Modifying the security policy for HIDS/HIPS
  C. Modifying the security policy for DLP
  D. Modifying the security policy for media control
  C. Modifying the security policy for DLP

• Question 1267:

  A technician is auditing network security by connecting a laptop to open hardwired jacks within the facility to verify they cannot connect. Which of the following is being tested?

  A. Layer 3 routing
  B. Port security
  C. Secure IMAP
  D. S/MIME
  B. Port security

• Question 1268:

  Which of the following implements a stream cipher?

  A. File-level encryption
  B. IKEv2 exchange
  C. SFTP data transfer
  D. S/MIME encryption
  D. S/MIME encryption

• Question 1269:

  A security analyst is performing a manual audit of captured data from a packet analyzer. The analyst looks forbase64 encoded strings and applies the filter http.authbasic. Which of the following describes what the analysts looking for?

  A. Unauthorized software
  B. Unencrypted credentials
  C. SSL certificate issues
  D. Authentication tokens
  D. Authentication tokens

• Question 1270:

  Which of the following would enhance the security of accessing data stored in the cloud? (Select TWO)

  A. Block level encryption
  B. SAML authentication
  C. Transport encryption
  D. Multifactor authentication
  E. Predefined challenge Question:s
  F. Hashing
  B. SAML authentication
  D. Multifactor authentication