CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 281:

  A systems developer needs to provide machine-to-machine interface between an application and a database server in the production environment. This interface will exchange data once per day. Which of the following access control account practices would BEST be used in this situation?

  A. Establish a privileged interface group and apply read-write permission to the members of that group.

  B. Submit a request for account privilege escalation when the data needs to be transferred.

  C. Install the application and database on the same server and add the interface to the local administrator group.

  D. Use a service account and prohibit users from accessing this account for development work.

  Correct Answer: D

• Question 282:

  A security administrator needs to conduct a full inventory of all encryption protocols and cipher suites. Which of the following tools will the security administrator use to conduct this inventory MOST efficiently?

  A. tcpdump

  B. Protocol analyzer

  C. Netstat

  D. Nmap

  Correct Answer: D

• Question 283:

  A security administrator is investigating a possible account compromise. The administrator logs onto a desktop computer, executes the command notepad.exe c:\Temp\qkakforlkgfkja.1og, and reviews the following: Lee,\rI have completed the task that was assigned to me\rrespectfully\rJohn\r https://www.portal.com\rjohnuser\rilovemycat2 Given the above output, which of the following is the MOST likely cause of this compromise?

  A. Virus

  B. Worm

  C. Rootkit

  D. Keylogger

  Correct Answer: D

• Question 284:

  Which of the following command line tools would be BEST to identify the services running in a server?

  A. Traceroute

  B. Nslookup

  C. Ipconfig

  D. Netstat

  Correct Answer: D

• Question 285:

  A penetration tester is checking to see if an internal system is vulnerable to an attack using a remote listener. Which of the following commands should the penetration tester use to verify if this vulnerability exists? (Choose two.)

  A. tcpdump

  B. nc

  C. nmap

  D. nslookup

  E. tail

  F. tracert

  Correct Answer: BC

• Question 286:

  Which of the following is MOST likely caused by improper input handling?

  A. Loss of database tables

  B. Untrusted certificate warning

  C. Power off reboot loop

  D. Breach of firewall ACLs

  Correct Answer: A

• Question 287:

  A company recently implemented a new security system. In the course of configuration, the security administrator adds the following entry:

  #Whitelist USB\VID_13FEandPID_4127andREV_0100

  Which of the following security technologies is MOST likely being configured?

  A. Application whitelisting

  B. HIDS

  C. Data execution prevention

  D. Removable media control

  Correct Answer: D

• Question 288:

  Which of the following provides PFS?

  A. AES

  B. RC4

  C. DHE

  D. HMAC

  Correct Answer: C

• Question 289:

  A Chief Information Officer (CIO) is concerned that encryption keys might be exfiltrated by a contractor. The CIO wants to keep control over key visibility and management. Which of the following would be the BEST solution for the CIO to implement?"

  A. HSM

  B. CA

  C. SSH

  D. SSL

  Correct Answer: A

• Question 290:

  An employee opens a web browser and types a URL into the address bar. Instead of reaching the requested site, the browser opens a completely different site. Which of the following types of attacks have MOST likely occurred? (Choose two.)

  A. DNS hijacking

  B. Cross-site scripting

  C. Domain hijacking

  D. Man-in-the-browser

  E. Session hijacking

  Correct Answer: AE