CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 271:

  A junior systems administrator noticed that one of two hard drives in a server room had a red error notification. The administrator removed the hard drive to replace it but was unaware that the server was configured in an array. Which of the following configurations would ensure no data is lost?

  A. RAID 0
  B. RAID 1
  C. RAID 2
  D. RAID 3
  B. RAID 1

• Question 272:

  A company has had a BYOD policy in place for many years and now wants to roll out an MDM solution. The company has decided that end users who wish to utilize their personal devices for corporate use must opt in to the MDM solution. End users are voicing concerns about the company having access to their personal devices via the MDM solution. Which of the following should the company implement to ease these concerns?

  A. Sideloading
  B. Full device encryption
  C. Application management
  D. Containerization
  C. Application management

• Question 273:

  A security administrator has created a new group policy object that utilizes the trusted platform module to compute a hash of system files and compare the value to a known-good value. Which of the following security concepts is this an example of?

  A. Integrity measurement
  B. Secure baseline
  C. Sandboxing
  D. Immutable systems
  A. Integrity measurement

• Question 274:

  A network administrator wants to gather information on the security of the network servers in the DMZ. The administrator runs the following command:

  

  Which of the following actions is the administrator performing?

  A. Grabbing the web server banner
  B. Logging into the web server
  C. Harvesting cleartext credentials
  D. Accessing the web server management console
  A. Grabbing the web server banner

• Question 275:

  Which of the following BEST explains why sandboxing is a best practice for testing software from an untrusted vendor prior to an enterprise deployment?

  A. It allows the software to run in an unconstrained environment with full network access.
  B. It eliminates the possibility of privilege escalation attacks against the local VM host.
  C. It facilitates the analysis of possible malware by allowing it to run until resources are exhausted.
  D. It restricts the access of the software to a contained logical space and limits possible damage.
  D. It restricts the access of the software to a contained logical space and limits possible damage.

• Question 276:

  A commercial cyber-threat intelligence organization observes IoCs across a variety of unrelated customers. Prior to releasing specific threat intelligence to other paid subscribers, the organization is MOST likely obligated by contracts to:

  A. perform attribution to specific APTs and nation-state actors.
  B. anonymize any PII that is observed within the IoC data.
  C. add metadata to track the utilization of threat intelligence reports.
  D. assist companies with impact assessments based on the observed data.
  B. anonymize any PII that is observed within the IoC data.

• Question 277:

  Which of the following provides the ability to attest to the integrity of a system from the initiation of an incident to the time the incident is litigated?

  A. Chain of custody
  B. Data encryption
  C. Legal holds and preservation
  D. Screenshots and witness interviews
  A. Chain of custody

• Question 278:

  Which of the following access management concepts is MOST closely associated with the use of a password or PIN??

  A. Authorization
  B. Authentication
  C. Accounting
  D. Identification
  B. Authentication

• Question 279:

  Which of the following impacts MOST likely result from poor exception handling?

  A. Widespread loss of condential data
  B. Network-wide resource exhaustion
  C. Privilege escalation
  D. Local disruption of services
  A. Widespread loss of condential data

• Question 280:

  A systems engineer wants to leverage a cloud-based architecture with low latency between network-connected devices that also reduces the bandwidth that is required by performing analytics directly on the endpoints. Which of the following would BEST meet the requirements? (Choose two.)

  A. Private cloud
  B. SaaS
  C. Hybrid cloud
  D. IaaS
  E. DRaaS
  F. Fog computing
  A. Private cloud
  B. SaaS