CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 171:

  A help desk technician receives a phone call from an individual claiming to be an employee of the organization and requesting assistance to access a locked account. The help desk technician asks the individual to provide proof of identity before access can be granted. Which of the following types of attack is the caller performing?

  A. Phishing
  B. Shoulder surfing
  C. Impersonation
  D. Dumpster diving
  C. Impersonation

• Question 172:

  When used together, which of the following qualify as two-factor authentication?

  A. Password and PIN
  B. Smart card and PIN
  C. Proximity card and smart card
  D. Fingerprint scanner and iris scanner
  B. Smart card and PIN

• Question 173:

  A company occupies the third floor of a leased building that has other tenants. The path from the demarcation point to the company's controlled space runs through unsecured areas managed by other companies. Which of the following could be used to protect the company's cabling as it passes through uncontrolled spaces?

  A. Plenum-rated cables
  B. Cable locks
  C. Conduits
  D. Bayonet Neill-Concelman
  B. Cable locks

• Question 174:

  When considering a third-party cloud service provider, which of the following criteria would be the BEST to include in the security assessment process? (Select two.)

  A. Use of performance analytics
  B. Adherence to regulatory compliance
  C. Data retention policies
  D. Size of the corporation
  E. Breadth of applications support
  B. Adherence to regulatory compliance
  C. Data retention policies

• Question 175:

  An administrator is beginning an authorized penetration test of a corporate network. Which of the following tools would BEST assist in identifying potential attacks?

  A. Netstat
  B. Honey pot
  C. Company directory
  D. Nmap
  D. Nmap

• Question 176:

  Which of the following access management concepts is MOST closely associated with the use of a password or PIN?

  A. Authorization
  B. Authentication
  C. Accounting
  D. Identification
  B. Authentication

• Question 177:

  During an audit, the auditor requests to see a copy of the identified mission-critical applications as well as their disaster recovery plans. The company being audited has an SLA around the applications it hosts With which of the following is the auditor MOST likely concerned?

  A. ARO/ALE
  B. MTTR/MTBF
  C. RTO/RPO
  D. Risk assessment
  C. RTO/RPO

• Question 178:

  Which of the following outcomes is a result of proper error-handling procedures in secure code?

  A. Execution continues with no notice or logging of the error condition.
  B. Minor fault conditions result in the system stopping to preserve state.
  C. The program runs through to completion with no detectable impact or output.
  D. All fault conditions are logged and do not result in a program crash.
  D. All fault conditions are logged and do not result in a program crash.

• Question 179:

  A technician wants to configure a wireless router at a small office that manages a family-owned dry cleaning business. The router will support five laptops, personal smartphones, a wireless printer, and occasional guests. Which of the following wireless configurations is BEST implemented in this scenario?

  A. Single SSID with WPA2-Enterprise
  B. 802.1X with a guest VLAN
  C. Dual SSID with WPA2-PSK
  D. Captive portal with two-factor authentication
  C. Dual SSID with WPA2-PSK

• Question 180:

  A network administrator needs to prevent users from accessing the accounting department records. All users are connected to the same Layer 2 device and access the Internet through the same router. Which of the following should be implemented to segment the accounting department from the rest of the users?

  A. Implement VLANs and an ACL.
  B. Install a firewall and create a DMZ.
  C. Create a site-to-site VPN.
  D. Enable MAC address filtering.
  A. Implement VLANs and an ACL.