CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 161:

  After entering a username and password, an administrator must draw a gesture on a touch screen. Which of the following demonstrates what the administrator is providing?

  A. Multifactor authentication
  B. Something you can do
  C. Biometrics
  D. Two-factor authentication
  B. Something you can do

• Question 162:

  In which of the following ways does phishing and smishing differ?

  A. One is primarily based on social engineering, and the other is based on evading spam filters
  B. One uses SMS as a delivery mechanism, and the other uses email
  C. Smishing relies on hard-wired connections and mobile code updates
  D. Phishing leverages poor email tagging to exploit SPIM settings
  B. One uses SMS as a delivery mechanism, and the other uses email

• Question 163:

  Exercising various programming responses for the purpose of gaming insight into a system's security posture without exploiting the system is BEST described as.

  A. passive security control testing.
  B. control gap analysis
  C. peer-conducted code review.
  D. non-intrusive scanning
  D. non-intrusive scanning

• Question 164:

  A developer is creating a new web application on a public cloud platform and wants to ensure the application can respond to increase in load while minimizing costs during periods of low usage. Which of the following strategies is MOST relevant to the use-case?

  A. Elasticity
  B. Redundancy
  C. High availability
  D. Non-persistence
  A. Elasticity

• Question 165:

  The Chief Security Officer (CSO) at a major hospital wants to implement SSO to help improve security in the environment and protect patient data, particularly at shared terminals. The Chief Risk Officer (CRO) is concerned that training and guidance have not been provided to frontline staff, and a risk analysis has not been performed. Which of the following is the MOST likely cause of the CRO's concerns?

  A. SSO would simplify username and password management, making it easier for hackers to guess accounts.
  B. SSO would reduce password fatigue, but staff would still need to remember more complex passwords.
  C. SSO would reduce the password complexity for frontline staff.
  D. SSO would reduce the resilience and availability of systems if the identity provider goes offline.
  D. SSO would reduce the resilience and availability of systems if the identity provider goes offline.

• Question 166:

  Which of the following enables sniffing attacks against a switched network?

  A. ARP poisoning
  B. IGMP snooping
  C. IP spoofing
  D. SYN flooding
  A. ARP poisoning

• Question 167:

  Technicians working with servers hosted at the company's datacenter are increasingly complaining of electric shocks when touching metal items which have been linked to hard drive failures. Which of the following should be implemented to correct this issue?

  A. Decrease the room temperature
  B. Increase humidity in the room
  C. Utilize better hot/cold aisle configurations
  D. Implement EMI shielding
  B. Increase humidity in the room

• Question 168:

  Which of the following impacts MOST likely results from poor exception handling?

  A. Widespread loss of confidential data
  B. Network-wide resource exhaustion
  C. Privilege escalation
  D. Local disruption of services
  D. Local disruption of services

• Question 169:

  After downloading third-party software, a user begins receiving continuous pop-up messages stating the Windows antivirus is outdated. The user is unable to access any files or programs until the subscription is renewed with Bitcoin. Which of the following types of attacks is being executed?

  A. Spyware
  B. Crypto-malware
  C. Adware
  D. Ransomware
  D. Ransomware

• Question 170:

  A computer forensics analyst collected a flash drive that contained a single file with 500 pages of text. Which of the following algorithms should the analyst use to validate the integrity of the file?

  A. 3DES
  B. AES
  C. MD5
  D. RSA
  C. MD5