CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 1411:

  Drag the items on the left to show the different types of security for the shown devices. Not all fields need to be filled. Not all items need to be used.

  Select and Place:

  

  

  ---

  For mobile devices, at bare minimum you should have the following security measures in place: Screen lock, Strong password, Device encryption, Remote wipe/Sanitation, voice encryption, GPS tracking, Application control, Storage

  segmentation, Asset tracking as well as Device Access control.

  For servers in a data center your security should include: Fire extinguishers such as FM200 as part of fire suppression; Biometric, proximity badges, mantraps, HVAC, cable locks;

  these can all be physical security measures to control access to the server.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis, 2014, p. 418

• Question 1412:

  A systems administrator is attempting to recover from a catastrophic failure in the datacenter. To recover the domain controller, the systems administrator needs to provide the domain administrator credentials. Which of the following account types is the systems administrator using?

  A. Local account
  B. Guest account
  C. Service account
  D. User account
  C. Service account

• Question 1413:

  Joe, a user, reports to the help desk that he can no longer access any documents on his PC. He states that he saw a window appear on the screen earlier, but he closed it without reading it. Upon investigation, the technician sees high disk activity on Joe's PC. Which of the following types of malware is MOST likely indicated by these findings?

  A. Keylogger
  B. Trojan
  C. Rootkit
  D. Crypto-malware
  D. Crypto-malware

• Question 1414:

  A hospital has received reports from multiple patients that their PHI was stolen after completing forms on the hospital's website. Upon investigation, the hospital finds a packet analyzer was used to steal data Which of the following protocols would prevent this attack from reoccurring?

  A. SFTP
  B. HTTPS
  C. FTPS
  D. SRTP
  A. SFTP

• Question 1415:

  A penetration tester is testing passively for vulnerabilities on a company's network. Which of the following tools should the penetration tester use? (Select TWO).

  A. Zenmap
  B. Wireshark
  C. Nmap
  D. tcpdump
  E. Nikto
  F. Snort
  B. Wireshark
  C. Nmap

• Question 1416:

  A large financial services firm recently released information regarding a security breach within its corporate network that began several years before. During the time frame in which the breach occurred, indicators show an attacker gained administrative access to the network through a file download from a social media site and subsequently installed it without the user's knowledge. Since the compromise, the attacker was able to take command and control of the computer systems anonymously while obtaining sensitive corporate and personal employee information.

  Which of the following methods did the attacker MOST likely use to gain access?

  A. A bot
  B. A fileless virus
  C. A logic bomb
  D. A RAT
  A. A bot

• Question 1417:

  A security administrator receives notice that a third-party certificate authority has been compromised, and new certificates will need to be issued. Which of the following should the administrator submit to receive a new certificate?

  A. CRL
  B. OSCP
  C. PFX
  D. CSR
  E. CA
  D. CSR

• Question 1418:

  A small organization has implemented a rogue system detection solution. Which of the following BEST explains the organization's intent?

  A. To identify weak ciphers being used on the network
  B. To identify assets on the network that are subject to resource exhaustion
  C. To identify end-of-life systems still in use on the network
  D. To identify assets that are not authorized for use on the network
  D. To identify assets that are not authorized for use on the network

• Question 1419:

  Which of the following describes the maximum amount of time a mission essential function can operate without the systems it depends on before significantly impacting the organization?

  A. MTBF
  B. MTTR
  C. RTO
  D. RPO
  C. RTO

• Question 1420:

  A security analyst reviews the following output:

  

  The analyst loads the hash into the SIEM to discover if this hash is seen in other parts of the network. After inspecting a large number of files, the security analyst reports the following:

  

  Which of the following is the MOST likely cause of the hash being found in other areas?

  A. Jan Smith is an insider threat
  B. There are MD5 hash collisions
  C. The file is encrypted
  D. Shadow copies are present
  B. There are MD5 hash collisions