CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 291:

  When implementing automation with IoT devices, which of the following should be considered FIRST to keep the network secure?

  A. Z-Wave compatibility
  B. Network range
  C. Zigbee configuration
  D. Communication protocols
  D. Communication protocols

• Question 292:

  A company is evaluating cloud providers to reduce the cost of its internal IT operations. The company's aging systems are unable to keep up with customer demand. Which of the following cloud models will the company MOST likely select?

  A. PaaS
  B. SaaS
  C. IaaS
  D. BaaS
  C. IaaS

• Question 293:

  A security administrator needs an external vendor to correct an urgent issue with an organization's physical access control system (PACS). The PACS does not currently have internet access because it is running a legacy operation system. Which of the following methods should the security administrator select the best balances security and efficiency?

  A. Temporarily permit outbound internet access for the pacs so desktop sharing can be set up
  B. Have the external vendor come onsite and provide access to the PACS directly
  C. Set up VPN concentrator for the vendor and restrict access to the PACS using desktop sharing
  D. Set up a web conference on the administrator's pc; then remotely connect to the pacs
  C. Set up VPN concentrator for the vendor and restrict access to the PACS using desktop sharing

• Question 294:

  Several systems and network administrators are determining how to manage access to a facility and enable managers to allow after-hours access. Which of the following access control methods should managers use to assign after-hours access to the employees?

  A. Rule-based access control
  B. Discretionary access control
  C. Mandatory access control
  D. Role-based access control
  A. Rule-based access control

• Question 295:

  Which of the following is the proper order for logging a user into a system from the first step to the last step?

  A. Identification, authentication, authorization
  B. Identification, authorization, authentication
  C. Authentication, identification, authorization
  D. Authentication, identification, authorization
  E. Authorization, identification, authentication
  A. Identification, authentication, authorization

• Question 296:

  Which of the following identity access methods creates a cookie on the first login to a central authority to allow logins to subsequent applications without re-entering credentials?

  A. Multifactor authentication
  B. Transitive trust
  C. Federated access
  D. Single sign-on
  D. Single sign-on

• Question 297:

  Which of the following would provide a safe environment for an application to access only the resources needed to function while not having access to run at the system level?

  A. Sandbox
  B. Honeypot
  C. GPO
  D. DMZ
  A. Sandbox

• Question 298:

  A buffer overflow can result in:

  A. loss of data caused by unauthorized command execution
  B. privilege escalation caused by TPM override.
  C. reduced key strength due to salt manipulation
  D. repeated use of one-time keys.
  B. privilege escalation caused by TPM override.

• Question 299:

  Which of the following threat actors is motivated primarily by a desire for personal recognition and a sense of accomplishment?

  A. A script kiddie
  B. A hacktivist
  C. An insider threat
  D. An industrial saboteur
  A. A script kiddie

• Question 300:

  A developer has incorporated routines into the source code for controlling the length of the input passed to the program. Which of the following types of vulnerabilities is the developer protecting the code against?

  A. DLL injection
  B. Memory leak
  C. Buffer overflow
  D. Pointer dereference
  C. Buffer overflow