CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 1361:

  Which of the following is an important step to take BEFORE moving any installation packages from a test environment to production?

  A. Roll back changes in the test environment
  B. Verify the hashes of files
  C. Archive and compress the files
  D. Update the secure baseline
  B. Verify the hashes of files

• Question 1362:

  A security auditor is performing a vulnerability scan to find out if mobile applications used in the organization are secure. The auditor discovers that one application has been accessed remotely with no legitimate account credentials. After investigating, it seems the application has allowed some users to bypass authentication of that application. Which of the following types of malware allow such a compromise to take place? (Choose two.)

  A. RAT
  B. Ransomware
  C. Worm
  D. Trojan
  E. Backdoor
  A. RAT
  E. Backdoor

• Question 1363:

  Recently several employees were victims of a phishing email that appeared to originate from the company president. The email claimed the employees would be disciplined if they did not click on a malicious link in the message. Which of the following principles of social engineering made this attack successful?

  A. Authority
  B. Spamming
  C. Social proof
  D. Scarcity
  A. Authority

• Question 1364:

  An organization was recently compromised by an attacker who used a server certificate with the company's domain issued by an irrefutable ca. Which of the following should be used to mitigate this risk in the future?

  A. OCSP
  B. DNSSEC
  C. Corticated pinning
  D. Key escrow
  B. DNSSEC

• Question 1365:

  A network administrator is setting up wireless access points in all the conference rooms and wants to authenticate devices using PKI. Which of the following should the administrator configure?

  A. A captive portal
  B. PSK
  C. 802.1X
  D. WPS
  D. WPS

• Question 1366:

  During an audit, the auditor requests to see a copy of the identified mission-critical applications as well as their disaster recovery plans. The company being audited has an SLA around the applications it hosts. With which of the following is the auditor MOST likely concerned?

  A. ARO/ALE
  B. MTTR/MTBF
  C. RTO/RPO
  D. Risk assessment
  C. RTO/RPO

• Question 1367:

  Which of the following specifically describes the exploitation of an interactive process to access otherwise restricted areas of the OS?

  A. Privilege escalation
  B. Pivoting
  C. Process affinity
  D. Buffer overflow
  A. Privilege escalation

• Question 1368:

  A security engineer wants to further secure a sensitive VLAN on the network by introducing MFA. Which of the following is the BEST example of this?

  A. PSK and PIN
  B. RSA token and password
  C. Fingerprint scanner and voice recognition
  D. Secret question and CAPTCHA
  B. RSA token and password

• Question 1369:

  An administrator is testing the collision resistance of different hashing algorithms. Which of the following is the strongest collision resistance test?

  A. Find two identical messages with different hashes
  B. Find two identical messages with the same hash
  C. Find a common has between two specific messages
  D. Find a common hash between a specific message and a random message
  A. Find two identical messages with different hashes

• Question 1370:

  A network administrator is configuring a honeypot in a company's DMZ To provide a method for hackers to access the system easily, the company needs to configure a plaintext authentication method that will send only the username and password to a service in the honeypot. Which of the following protocols should the company use?

  A. OAuth
  B. PAP
  C. RADIUS
  D. Shibboleth
  B. PAP