CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 11:

  Which of the following authentication concepts is a gait analysis MOST closely associated?

  A. Somewhere you are
  B. Something you are
  C. Something you do
  D. Something you know
  C. Something you do

• Question 12:

  A company is implementing a remote access portal so employees can work remotely from home. The company wants to implement a solution that would securely integrate with a third party. Which of the following is the BEST solution?

  A. SAML
  B. RADIUS
  C. Secure token
  D. TACACS+
  B. RADIUS

• Question 13:

  Students at a residence hall are reporting Internet connectivity issues. The university's network administrator configured the residence hall's network to provide public IP addresses to all connected devices, but many student devices are receiving private IP addresses due to rogue devices. The network administrator verifies the residence hall's network is correctly configured and contacts the security administrator for help. Which of the following configurations should the security administrator suggest for implementation?

  A. Router ACLs
  B. BPDU guard
  C. Flood guard
  D. DHCP snooping
  D. DHCP snooping

• Question 14:

  A consultant has been tasked to assess a client's network. The client reports frequent network outages. Upon viewing the spanning tree configuration, the consultant notices that an old and law performing edge switch on the network has been elected to be the root bridge. Which of the following explains this scenario?

  A. The switch also serves as the DHCP server
  B. The switch has the lowest MAC address
  C. The switch has spanning tree loop protection enabled
  D. The switch has the fastest uplink port
  C. The switch has spanning tree loop protection enabled

• Question 15:

  Which of the following would MOST likely support the integrity of a voting machine?

  A. Asymmetric encryption
  B. Blockchain
  C. Transport Layer Security
  D. Perfect forward secrecy
  D. Perfect forward secrecy

• Question 16:

  A security analyst conducts a manual scan on a known hardened host that identifies many non- compliant items. Which of the following BEST describe why this has occurred? (Select TWO)

  A. Privileged-user certificated were used to scan the host
  B. Non-applicable plugins were selected in the scan policy
  C. The incorrect audit file was used
  D. The output of the report contains false positives
  E. The target host has been compromised
  B. Non-applicable plugins were selected in the scan policy
  D. The output of the report contains false positives

• Question 17:

  Proprietary information was sent by an employee to a distribution list that included external email addresses. Which of the following BEST describes the incident that occurred and the threat actor in this scenario?

  A. Social engineering by a hacktivist
  B. MITM attack by a script kiddle
  C. Unintentional disclosure by an insider
  D. Corporate espionage by a competitor
  C. Unintentional disclosure by an insider

• Question 18:

  When a malicious user is able to retrieve sensitive information from RAM, the programmer has failed to implement:

  A. session keys.
  B. encryption of data at rest
  C. encryption of data in use.
  D. ephemeral keys.
  D. ephemeral keys.

• Question 19:

  Ann a security analyst is monitoring the IDS console and noticed multiple connections from an internal host to a suspicious call back domain. Which of the following tools would aid her to decipher the network traffic?

  A. Vulnerability Scanner
  B. NMAP
  C. NETSTAT
  D. Packet Analyzer
  C. NETSTAT

• Question 20:

  Which of the following BEST explains the reason why a server administrator would place a document named password.txt on the desktop of an administrator account on a server?

  A. The document is a honeyfile and is meant to attract the attention of a cyberintruder.
  B. The document is a backup file if the system needs to be recovered.
  C. The document is a standard file that the OS needs to verify the login credentials.
  D. The document is a keylogger that stores all keystrokes should the account be compromised.
  A. The document is a honeyfile and is meant to attract the attention of a cyberintruder.