CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 211:

  Ann is the IS manager for several new systems in which the classification of the systems' data are being decided. She is trying to determine the sensitivity level of the data being processed. Which of the following people should she consult to determine the data classification?

  A. Steward

  B. Custodian

  C. User

  D. Owner

  Correct Answer: D

• Question 212:

  A security administrator learns that PII, which was gathered by the organization, has been found in an open forum. As a result, several C-level executives found their identities were compromised, and they were victims of a recent whaling

  attack.

  Which of the following would prevent these problems in the future? (Select TWO).

  A. Implement a reverse proxy.

  B. Implement an email DLP.

  C. Implement a spam filter.

  D. Implement a host-based firewall.

  E. Implement a HIDS.

  Correct Answer: BC

• Question 213:

  A security manager is creating an account management policy for a global organization with sales personnel who must access corporate network resources while traveling all over the world. Which of the following practices is the security manager MOST likely to enforce with the policy? (Select TWO)

  A. Time-of-day restrictions

  B. Password complexity

  C. Location-based authentication

  D. Group-based access control

  E. Standard naming convention

  Correct Answer: BD

• Question 214:

  After a recent internal breach, a company decided to regenerate and reissue all certificates used in the transmission of confidential information. The company places the greatest importance on confidentiality and non-repudiation, and decided to generate dual key pairs for each client. Which of the following BEST describes how the company will use these certificates?

  A. One key pair will be used for encryption and decryption. The other will be used to digitally sign the data.

  B. One key pair will be used for encryption. The other key pair will provide extended validation.

  C. Data will be encrypted once by each key, doubling the confidentiality and non-repudiation strength.

  D. One key pair will be used for internal communication, and the other will be used for external communication.

  Correct Answer: A

• Question 215:

  A security analyst is attempting to break into a client's secure network. The analyst was not given prior information about the client, except for a block of public IP addresses that are currently in use. After network enumeration, the analyst's NEXT step is to perform:

  A. a risk analysis.

  B. a vulnerability assessment.

  C. a gray-box penetration test.

  D. an external security audit.

  E. a red team exercise.

  Correct Answer: C

• Question 216:

  A security architect has convened a meeting to discuss an organization's key management policy. The organization has a reliable internal key management system, and some argue that it would be best to manage the cryptographic keys internally as opposed to using a solution from a third party. The company should use:

  A. the current internal key management system.

  B. a third-party key management system that will reduce operating costs.

  C. risk benefits analysis results to make a determination.

  D. a software solution including secure key escrow capabilities.

  Correct Answer: C

• Question 217:

  Following the successful response to a data-leakage incident, the incident team lead facilitates an exercise that focuses on continuous improvement of the organization's incident response capabilities. Which of the following activities has the incident team lead executed?

  A. Lessons learned review

  B. Root cause analysis

  C. Incident audit

  D. Corrective action exercise

  Correct Answer: A

• Question 218:

  A software development manager is taking over an existing software development project. The team currently suffers from poor communication due to a long delay between requirements documentation and feature delivery. This gap is resulting in an above average number of security- related bugs making it into production. Which of the following development methodologies is the team MOST likely using now?

  A. Agile

  B. Waterfall

  C. Scrum

  D. Spiral

  Correct Answer: B

• Question 219:

  A forensic investigator has run into difficulty recovering usable files from a SAN drive. Which of the following SAN features might have caused the problem?

  A. Storage multipaths

  B. Deduplication

  C. iSCSI initiator encryption

  D. Data snapshots

  Correct Answer: B

• Question 220:

  A company offers SaaS, maintaining all customers' credentials and authenticating locally. Many large customers have requested the company offer some form of federation with their existing authentication infrastructures. Which of the following would allow customers to manage authentication and authorizations from within their existing organizations?

  A. Implement SAML so the company's services may accept assertions from the customers' authentication servers.

  B. Provide customers with a constrained interface to manage only their users' accounts in the company's active directory server.

  C. Provide a system for customers to replicate their users' passwords from their authentication service to the company's.

  D. Use SOAP calls to support authentication between the company's product and the customers' authentication servers.

  Correct Answer: A