CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 231:

  A penetration testing is preparing for a client engagement in which the tester must provide data that proves and validates the scanning tools' results. Which of the following is the best method for collecting this information?

  A. Set up the scanning system's firewall to permit and log all outbound connections
  B. Use a protocol analyzer to log all pertinent network traffic
  C. Configure network flow data logging on all scanning system
  D. Enable debug level logging on the scanning system and all scanning tools used.
  A. Set up the scanning system's firewall to permit and log all outbound connections

• Question 232:

  Which of the following systems, if compromised, may cause great danger to the integrity of water supplies and their chemical levels?

  A. UAV
  B. SCADA
  C. HVAC
  D. MFD
  B. SCADA

• Question 233:

  Which of the following would provide additional security by adding another factor to a smart card?

  A. Token
  B. Proximity badge
  C. Physical key
  D. PIN
  D. PIN

• Question 234:

  A security administrator is choosing an algorithm to generate password hashes. Which of the following would offer the BEST protection against offline brute force attacks?

  A. MD5
  B. 3DES
  C. AES
  D. SHA-1
  D. SHA-1

• Question 235:

  Which of the following types of attacks precedes the installation of a rootkit on a server?

  A. Pharming
  B. DDoS
  C. Privilege escalation
  D. DoS
  C. Privilege escalation

• Question 236:

  Joe, a security administrator, needs to extend the organization's remote access functionality to be used by staff while travelling. Joe needs to maintain separate access control functionalities for internal, external, and VOIP services. Which of the following represents the BEST access technology for Joe to use?

  A. RADIUS
  B. TACACS+
  C. Diameter
  D. Kerberos
  B. TACACS+

• Question 237:

  A systems administrator just issued the ssh-keygen -t rsa command on a Linux terminal. Which of the following BEST describes what the rsa portion of the command represents?

  A. A key generation algorithm
  B. A hashing algorithm
  C. A public key infrastructure type
  D. A certificate authority type
  A. A key generation algorithm

• Question 238:

  A security analyst wishes to scan the network to view potentially vulnerable systems the way an attacker would. Which of the following would BEST enable the analyst to complete the objective?

  A. Perform a non-credentialed scan.
  B. Conduct an intrusive scan.
  C. Attempt escalation of privilege.
  D. Execute a credentialed scan.
  A. Perform a non-credentialed scan.

• Question 239:

  In the event of a security incident, which of the following should be captured FIRST?

  A. An external hard drive
  B. System memory
  C. An internal hard drive
  D. Network interface data
  B. System memory

• Question 240:

  A stock trading company had the budget for enhancing its secondary datacenter approved. Since the main site is a hurricane-affected area and the disaster recovery site is 100 mi (161 km) away, the company wants to ensure its business is always operational with the least amount of man hours needed. Which of the following types of disaster recovery sites should the company implement?

  A. Hot site
  B. Warm site
  C. Cold site
  D. Cloud-based site
  D. Cloud-based site