CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 151:

  A new Chief Information Officer (CIO) has been reviewing the badging and decides to write a policy that all employees must have their badges rekeyed at least annually. Which of the following controls BEST describes this policy?

  A. Physical

  B. Corrective

  C. Technical

  D. Administrative

  Correct Answer: D

• Question 152:

  A software developer is concerned about DLL hijacking in an application being written. Which of the following is the MOST viable mitigation measure of this type of attack?

  A. The DLL of each application should be set individually

  B. All calls to different DLLs should be hard-coded in the application

  C. Access to DLLs from the Windows registry should be disabled

  D. The affected DLLs should be renamed to avoid future hijacking

  Correct Answer: B

• Question 153:

  Two users must encrypt and transmit large amounts of data between them. Which of the following should they use to encrypt and transmit the data?

  A. Symmetric algorithm

  B. Hash function

  C. Digital signature

  D. Obfuscation

  Correct Answer: A

• Question 154:

  A security analyst is attempting to identify vulnerabilities in a customer's web application without impacting the system or its dat Which of the following BEST describes the vulnerability scanning concept performed?

  A. Aggressive scan

  B. Passive scan

  C. Non-credentialed scan

  D. Compliance scan

  Correct Answer: B

  Passive scanning is a method of vulnerability detection that relies on information gleaned from network data that is captured from a target computer without direct interaction. Packet sniffing applications can be used for passive scanning to reveal information such as operating system, known protocols running on non-standard ports and active network applications with known bugs. Passive scanning may be conducted by a network administrator scanning for security vulnerabilities or by an intruder as a preliminary to an active attack. For an intruder, passive scanning's main advantage is that it does not leave a trail that could alert users or administrators to their activities. For an administrator, the main advantage is that it doesn't risk causing undesired behavior on the target computer, such as freezes. Because of these advantages, passive scanning need not be limited to a narrow time frame to minimize risk or disruption, which means that it is likely to return more information. Passive scanning does have limitations. It is not as complete in detail as active vulnerability scanning and cannot detect any applications that are not currently sending out traffic; nor can it distinguish false information put out for obfuscation.

• Question 155:

  A recent internal audit is forcing a company to review each internal business unit's VMs because the cluster they are installed on is in danger of running out of computer resources. Which of the following vulnerabilities exist?

  A. Buffer overflow

  B. End-of-life systems

  C. System sprawl

  D. Weak configuration

  Correct Answer: C

• Question 156:

  User from two organizations, each with its own PKI, need to begin working together on a joint project. Which of the following would allow the users of the separate PKIs to work together without connection errors?

  A. Trust model

  B. Stapling

  C. Intermediate CA

  D. Key escrow

  Correct Answer: A

• Question 157:

  A security analyst is mitigating a pass-the-hash vulnerability on a Windows infrastructure. Given the requirement, which of the following should the security analyst do to MINIMIZE the risk?

  A. Enable CHAP

  B. Disable NTLM

  C. Enable Kerebos

  D. Disable PAP

  Correct Answer: B

• Question 158:

  A security analyst is reviewing an assessment report that includes software versions, running services, supported encryption algorithms, and permission settings. Which of the following produced the report?

  A. Vulnerability scanner

  B. Protocol analyzer

  C. Network mapper

  D. Web inspector

  Correct Answer: A

• Question 159:

  A Chief Information Officer (CIO) asks the company's security specialist if the company should spend any funds on malware protection for a specific server. Based on a risk assessment, the ARO value of a malware infection for a server is 5 and the annual cost for the malware protection is $2500. Which of the following SLE values warrants a recommendation against purchasing the malware protection?

  A. $500

  B. $1000

  C. $2000

  D. $2500

  Correct Answer: A

• Question 160:

  A stock trading company had the budget for enhancing its secondary datacenter approved. Since the main site is a hurricane-affected area and the disaster recovery site is 100 mi (161 km) away, the company wants to ensure its business is always operational with the least amount of man hours needed. Which of the following types of disaster recovery sites should the company implement?

  A. Hot site

  B. Warm site

  C. Cold site

  D. Cloud-based site

  Correct Answer: D