CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 171:

  An active/passive configuration has an impact on:

  A. confidentiality

  B. integrity

  C. availability

  D. non-repudiation

  Correct Answer: C

• Question 172:

  Which of the following would provide additional security by adding another factor to a smart card?

  A. Token

  B. Proximity badge

  C. Physical key

  D. PIN

  Correct Answer: D

• Question 173:

  A Chief Information Officer (CIO) recently saw on the news that a significant security flaws exists with a specific version of a technology the company uses to support many critical application. The CIO wants to know if this reported vulnerability exists in the organization and, if so, to what extent the company could be harmed. Which of the following would BEST provide the needed information?

  A. Penetration test

  B. Vulnerability scan

  C. Active reconnaissance

  D. Patching assessment report

  Correct Answer: A

• Question 174:

  An organization is expanding its network team. Currently, it has local accounts on all network devices, but with growth, it wants to move to centrally managed authentication. Which of the following are the BEST solutions for the organization? (Select TWO)

  A. TACACS+

  B. CHAP

  C. LDAP

  D. RADIUS

  E. MSCHAPv2

  Correct Answer: AD

• Question 175:

  Which of the following refers to the term used to restore a system to its operational state?

  A. MTBF

  B. MTTR

  C. RTO

  D. RPO

  Correct Answer: B

• Question 176:

  A home invasion occurred recently in which an intruder compromised a home network and accessed a WiFIenabled baby monitor while the baby's parents were sleeping. Which of the following BEST describes how the intruder accessed the monitor?

  A. Outdated antivirus

  B. WiFi signal strength

  C. Social engineering

  D. Default configuration

  Correct Answer: D

• Question 177:

  A security engineer must install the same x.509 certificate on three different servers. The client application that connects to the server performs a check to ensure the certificate matches the host name. Which of the following should the security engineer use?

  A. Wildcard certificate

  B. Extended validation certificate

  C. Certificate chaining

  D. Certificate utilizing the SAN file

  Correct Answer: D

  SAN = Subject Alternate Names

• Question 178:

  An analyst receives an alert from the SIEM showing an IP address that does not belong to the assigned network can be seen sending packets to the wrong gateway. Which of the following network devices is misconfigured and which of the following should be done to remediate the issue?

  A. Firewall; implement an ACL on the interface

  B. Router; place the correct subnet on the interface

  C. Switch; modify the access port to trunk port

  D. Proxy; add the correct transparent interface

  Correct Answer: B

• Question 179:

  The help desk received a call after hours from an employee who was attempting to log into the payroll server remotely. When the help desk returned the call the next morning, the employee was able to log into the server remotely without incident. However, the incident occurred again the next evening. Which of the following BEST describes the cause of the issue?

  A. The password expired on the account and needed to be reset

  B. The employee does not have the rights needed to access the database remotely

  C. Time-of-day restrictions prevented the account from logging in

  D. The employee's account was locked out and needed to be unlocked

  Correct Answer: C

• Question 180:

  To help prevent one job role from having sufficient access to create, modify, and approve payroll data, which of the following practices should be employed?

  A. Least privilege

  B. Job rotation

  C. Background checks

  D. Separation of duties

  Correct Answer: D