CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 1321:

  A company has noticed multiple instances of proprietary information on public websites. It has also observed an increase in the number of email messages sent to random employees containing malicious links and PDFs. Which of the following changes should the company make to reduce the risks associated with phishing attacks? (Select TWO)

  A. Install an additional firewall
  B. Implement a redundant email server
  C. Block access to personal email on corporate systems
  D. Update the X.509 certificates on the corporate email server
  E. Update corporate policy to prohibit access to social media websites
  F. Review access violation on the file server
  C. Block access to personal email on corporate systems
  E. Update corporate policy to prohibit access to social media websites

• Question 1322:

  An external contractor, who has not been given information about the software or network architecture, is conducting a penetration test. Which of the following BEST describes the test being performed?

  A. Black box
  B. White box
  C. Passive reconnaissance
  D. Vulnerability scan
  A. Black box

• Question 1323:

  A security administrator is tasked with implementing centralized management of all network devices. Network administrators will be required to logon to network devices using their LDAP credentials. All command executed by network administrators on network devices must fall within a preset list of authorized commands and must be logged to a central facility. Which of the following configuration commands should be implemented to enforce this requirement?

  A. LDAP server 10.55.199.3
  B. CN=company, CN=com, OU=netadmin, DC=192.32.10.233
  C. SYSLOG SERVER 172.16.23.50
  D. TACAS server 192.168.1.100
  B. CN=company, CN=com, OU=netadmin, DC=192.32.10.233

• Question 1324:

  A systems administrator wants to generate a self-signed certificate for an internal website. Which of the following steps should the systems administrator complete prior to installing the certificate on the server?

  A. Provide the private key to a public CA.
  B. Provide the public key to the internal CA.
  C. Provide the public key to a public CA.
  D. Provide the private key to the internal CA.
  E. Provide the public/private key pair to the internal CA
  F. Provide the public/private key pair to a public CA.
  D. Provide the private key to the internal CA.

• Question 1325:

  A customer calls a technician and needs to remotely connect to a web server to change some code manually. The technician needs to configure the user's machine with protocols to connect to the Unix web server, which is behind a firewall. Which of the following protocols does the technician MOST likely need to configure?

  A. SSH
  B. SFTP
  C. HTTPS
  D. SNMP
  A. SSH

• Question 1326:

  A mobile application developer wants to secure an application that transmits sensitive information. Which of the following should the developer implement to prevent SSL MITM attacks?

  A. Stapling
  B. Chaining
  C. Signing
  D. Pinning
  D. Pinning

• Question 1327:

  An organization's Chief Executive Officer (CEO) directs a newly hired computer technician to install an OS on the CEO's personal laptop. The technician performs the installation, and a software audit later in the month indicates a violation of the EULA occurred as a result.

  Which of the following would address this violation going forward?

  A. Security configuration baseline
  B. Separation of duties
  C. AUP
  D. NDA
  C. AUP

• Question 1328:

  A systems administrator wants to implement a secure wireless network requiring wireless clients to pre-register with the company and install a PKI client certificate prior to being able to connect to the wireless network.

  Which of the following should the systems administrator configure?

  A. EAP-TTLS
  B. EAP-TLS
  C. EAP-FAST
  D. EAP with PEAP
  E. EAP with MSCHAPv2
  A. EAP-TTLS
  C. EAP-FAST

• Question 1329:

  In which of the following risk management strategies would cybersecurity insurance be used?

  A. Transference
  B. Avoidance
  C. Acceptance
  D. Mitigation
  A. Transference

• Question 1330:

  A technician is evaluating a security appliance solution. The company needs a system that continues to pass traffic if the system crashes. Which of the following appliance feature would BEST meet the company's needs?

  A. Fall closed.
  B. Fall Secure
  C. Fall Safe
  D. Fall open
  D. Fall open