CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 341:

  A technician has been asked to document which services are running on each of a collection of 200 servers. Which of the following tools BEST meets this need while minimizing the work required?

  A. Nmap

  B. Nslookup

  C. Netcat

  D. Netstat

  Correct Answer: A

• Question 342:

  An organization wants to deliver streaming audio and video from its home office to remote locations all over the world. It wants the stream to be delivered securely and protected from intercept and replay attacks. Which of the following protocols is BEST suited for this purpose?

  A. SSH

  B. SIP

  C. S/MIME

  D. SRTP

  Correct Answer: D

• Question 343:

  A security technician has been given the task of preserving emails that are potentially involved in a dispute between a company and a contractor. Which of the following BEST describes this forensic concept?

  A. Legal hold

  B. Chain of custody

  C. Order of volatility

  D. Data acquisition

  Correct Answer: A

• Question 344:

  A security technician has been assigned data destruction duties. The hard drives that are being disposed of contain highly sensitive information. Which of the following data destruction techniques is MOST appropriate?

  A. Degaussing

  B. Purging

  C. Wiping

  D. Shredding

  Correct Answer: A

  Hard drive degaussing is a highly advanced technology used to sanitize hard drives before disposal or reuse. Degaussers come in various types and sizes, with varying effectiveness as well. A professional data destruction service selects the

  most appropriate degausser for the job based on prevailing circumstances.

  Degaussing is fast and effective, and it ensures that you're compliant with data regulations.

• Question 345:

  A security administrator is investigating many recent incident of credential theft for users accessing the company's website, despite the hosting web server requiring HTTPS for access. The server's logs show the website leverages the HTTO POST method for carrying user authentication details. Which of the following is the MOST likely reason for compromise?

  A. The HTTP POST method is not protected by HTTPS.

  B. The web server is running a vulnerable SSL configuration.

  C. The company does not support DNSSEC.

  D. The HTTP response is susceptible to sniffing.

  Correct Answer: A

• Question 346:

  An organization requires employees to insert their identification cards into a reader so chips embedded in the cards can be read to verify their identities prior to accessing computing resources. Which of the following BEST describes this authentication control?

  A. TPM

  B. Token

  C. Proximity card

  D. CAC

  Correct Answer: C

• Question 347:

  Which of the following terms BEST describes an exploitable vulnerability that exists but has not been publicly disclosed yet?

  A. Design weakness

  B. Zero-day

  C. Logic bomb

  D. Trojan

  Correct Answer: B

• Question 348:

  A security analyst is performing a BIA.

  The analyst notes that In a disaster, failover systems must be up and running within 30 minutes.

  The failover systems must use backup data that Is no older than one hour Which of the following should the analyst include In the business continuity plan?

  A. A maximum MTTR of 30 minutes

  B. A maximum MTBF of 30 minutes

  C. A maximum RTO of 60 minutes

  D. A maximum RPO of 60 minutes

  E. An SLA guarantee of 60 minutes

  Correct Answer: E

• Question 349:

  Legal authorities notify a company that its network has been compromised for the second time in two years. The investigation shows the attackers were able to use the same vulnerability on different systems in both attacks. Which of the following would have allowed the security team to use historical information to protect against the second attack?

  A. Key risk indicators

  B. Lessons learned

  C. Recovery point objectives

  D. Tabletop exercise

  Correct Answer: B

• Question 350:

  A small company's Chief Executive Officer (CEO) has asked its Chief Security Officer (CSO) to improve the company's security posture quickly with regard to targeted attacks. Which of the following should the CSO conduct FIRST?

  A. Survey threat feeds from services inside the same industry.

  B. Purchase multiple threat feeds to ensure diversity and implement blocks for malicious traffic

  C. Conduct an internal audit against industry best practices to perform a qualitative analysis.

  D. Deploy a UTM solution that receives frequent updates from a trusted industry vendor.

  Correct Answer: A