CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 141:

  A penetration tester has written an application that performs a bit-by-bit XOR 0xFF operation on binaries prior to transmission over untrusted media. Which of the following BEST describes the action performed by this type of application?

  A. Hashing

  B. Key exchange

  C. Encryption

  D. Obfusication

  Correct Answer: D

• Question 142:

  An audit reported has identifies a weakness that could allow unauthorized personnel access to the facility at its main entrance and from there gain access to the network. Which of the following would BEST resolve the vulnerability?

  A. Faraday cage

  B. Air gap

  C. Mantrap

  D. Bollards

  Correct Answer: C

• Question 143:

  A Chief Information Officer (CIO) has decided it is not cost effective to implement safeguards against a known vulnerability. Which of the following risk responses does this BEST describe?

  A. Transference

  B. Avoidance

  C. Mitigation

  D. Acceptance

  Correct Answer: D

• Question 144:

  A security administrator installed a new network scanner that identifies new host systems on the network. Which of the following did the security administrator install?

  A. Vulnerability scanner

  B. Network-based IDS

  C. Rogue system detection

  D. Configuration compliance scanner

  Correct Answer: C

• Question 145:

  A security technician is configuring an access management system to track and record user actions. Which of the following functions should the technician configure?

  A. Accounting

  B. Authorization

  C. Authentication

  D. Identification

  Correct Answer: A

• Question 146:

  A remote intruder wants to take inventory of a network so exploits can be researched. The intruder is looking for information about software versions on the network. Which of the following techniques is the intruder using?

  A. Banner grabbing

  B. Port scanning

  C. Packet sniffing

  D. Virus scanning

  Correct Answer: A

• Question 147:

  A systems administrator found a suspicious file in the root of the file system. The file contains URLs, usernames, passwords, and text from other documents being edited on the system. Which of the following types of malware would generate such a file?

  A. Keylogger

  B. Rootkit

  C. Bot

  D. RAT

  Correct Answer: A

• Question 148:

  A computer emergency response team is called at midnight to investigate a case in which a mail server was restarted. After an initial investigation, it was discovered that email is being exfiltrated through an active connection. Which of the following is the NEXT step the team should take?

  A. Identify the source of the active connection

  B. Perform eradication of active connection and recover

  C. Performance containment procedure by disconnecting the server

  D. Format the server and restore its initial configuration

  Correct Answer: A

• Question 149:

  While working on an incident, Joe, a technician, finished restoring the OS and applications on a workstation from the original media Joe is about to begin copying the user's files back onto the hard drive. Which of the following incident response steps is Joe working on now?

  A.

  B. Recovery

  C. Eradication

  D. Containment

  E. Identification

  Correct Answer: A

• Question 150:

  An application was recently compromised after some malformed data came in via web form. Which of the following would MOST likely have prevented this?

  A. Input validation

  B. Proxy server

  C. Stress testing

  D. Encoding

  Correct Answer: A