CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 361:

  A vice president at a manufacturing organization is concerned about desktops being connected to the network. Employees need to log onto the desktops' local account to verify that a product is being created within specifications; otherwise, the desktops should be as isolated as possible. Which of the following is the BEST way to accomplish this?

  A. Put the desktops in the DMZ.

  B. Create a separate VLAN for the desktops.

  C. Air gap the desktops.

  D. Join the desktops to an ad-hoc network.

  Correct Answer: C

• Question 362:

  An incident involving a workstation that is potentially infected with a virus has occurred. The workstation may have sent confidential data to an unknown internet server. Which of the following should a security analyst do FIRST?

  A. Make a copy of everything in memory on the workstation.

  B. Turn off the workstation.

  C. Consult information security policy.

  D. Run a virus scan.

  Correct Answer: A

• Question 363:

  A web server, which is configured to use TLS with AES-GCM-256, SHA-384, and ECDSA, recently suffered an information loss breach. Which of the following is MOST likely the cause?

  A. Insufficient key bit length

  B. Weak cipher suite

  C. Unauthenticated encryption method

  D. Poor implementation

  Correct Answer: D

• Question 364:

  A company is evaluating cloud providers to reduce the cost of its internal IT operations. The company's aging systems are unable to keep up with customer demand. Which of the following cloud models will the company MOST likely select?

  A. PaaS

  B. SaaS

  C. IaaS

  D. BaaS

  Correct Answer: C

• Question 365:

  After a security incident, management is meeting with involved employees to document the incident and its aftermath. Which of the following BEST describes this phase of the incident response process?

  A. Lessons learned

  B. Recovery

  C. Identification

  D. Preparation

  Correct Answer: A

• Question 366:

  A user needs to send sensitive information to a colleague using PKI. Which of the following concepts apply when a sender encrypts the message hash with the sender's private key? (Select TWO)

  A. Non-repudiation

  B. Email content encryption

  C. Steganography

  D. Transport security

  E. Message integrity

  Correct Answer: AE

• Question 367:

  As part of a new BYOD rollout, a security analyst has been asked to find a way to securely store company data on personal devices. Which of the following would BEST help to accomplish this?

  A. Require the use of an eight-character PIN.

  B. Implement containerization of company data.

  C. Require annual AUP sign-off.

  D. Use geofencing tools to unlock devices while on the premises.

  Correct Answer: B

• Question 368:

  Which of the following is commonly done as part of a vulnerability scan?

  A. Exploiting misconfigured applications

  B. Cracking employee passwords

  C. Sending phishing emails to employees

  D. Identifying unpatched workstations

  Correct Answer: D

• Question 369:

  An organization recently moved its custom web applications to the cloud, and it is obtaining managed services of the back-end environment as part of its subscription. Which of the following types of services is this company now using?

  A. SaaS

  B. CASB

  C. IaaS

  D. PaaS

  Correct Answer: B

  Security Broker (CASB) gives you both visibility into your entire cloud stack and the security automation tool your IT team needs.

• Question 370:

  Users in a corporation currently authenticate with a username and password. A security administrator wishes to implement two-factor authentication to improve security. Which of the following authentication methods should be deployed to achieve this goal?

  A. PIN

  B. Security Question:

  C. Smart card

  D. Passphrase

  E. CAPTCHA

  Correct Answer: C