CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 381:

  A vulnerability scan is being conducted against a desktop system. The scan is looking for files, versions, and registry values known to be associated with system vulnerabilities. Which of the following BEST describes the type of scan being performed?

  A. Non-intrusive

  B. Authenticated

  C. Credentialed

  D. Active

  Correct Answer: C

• Question 382:

  Which of the following is the BEST choice for a security control that represents a preventive and corrective logical control at the same time?

  A. Security awareness training

  B. Antivirus

  C. Firewalls

  D. Intrusion detection system

  Correct Answer: B

• Question 383:

  Which of the following could occur when both strong and weak ciphers are configured on a VPN concentrator? (Select TWO)

  A. An attacker could potentially perform a downgrade attack.

  B. The connection is vulnerable to resource exhaustion.

  C. The integrity of the data could be at risk.

  D. The VPN concentrator could revert to L2TP.

  E. The IPSec payload reverted to 16-bit sequence numbers.

  Correct Answer: AE

• Question 384:

  A penetration tester harvests potential usernames from a social networking site. The penetration tester then uses social engineering to attempt to obtain associated passwords to gain unauthorized access to shares on a network server.

  Which of the following methods is the penetration tester MOST likely using?

  A. Escalation of privilege

  B. SQL injection

  C. Active reconnaissance

  D. Proxy server

  Correct Answer: C

• Question 385:

  An actor downloads and runs a program against a corporate login page. The program imports a list of usernames and passwords, looking for a successful attempt. Which of the following terms BEST describes the actor in this situation?

  A. Script kiddie

  B. Hacktivist

  C. Cryptologist

  D. Security auditor

  Correct Answer: A

• Question 386:

  An organization wants to utilize a common, Internet-based third-party provider for authorization and authentication. The provider uses a technology based on OAuth 2.0 to provide required services. To which of the following technologies is the provider referring?

  A. Open ID Connect

  B. SAML

  C. XACML

  D. LDAP

  Correct Answer: A

• Question 387:

  Which of the following is the BEST reason for salting a password hash before it is stored in a database?

  A. To prevent duplicate values from being stored

  B. To make the password retrieval process very slow

  C. To protect passwords from being saved in readable format

  D. To prevent users from using simple passwords for their access credentials

  Correct Answer: A

• Question 388:

  A security administrator wants to implement a logon script that will prevent MITM attacks on the local LAN. Which of the following commands should the security administrator implement within the script to accomplish this task?

  A. arp - s 192.168.1.1 00-3a-d1-fa-b1-06

  B. dig - [email protected] mypc.comptia.com

  C. nmap - A - T4 192.168.1.1

  D. tcpdump - lnv host 192.168.1.1 or either 00:3a:d1:fa:b1:06

  Correct Answer: A

• Question 389:

  Ann, a user, states that her machine has been behaving erratically over the past week. She has experienced slowness and input lag and found text files that appear to contain pieces of her emails or online conversations with coworkers. The technician runs a standard virus scan but detects nothing. Which of the following types of malware has infected the machine?

  A. Ransomware

  B. Rootkit

  C. Backdoor

  D. Keylogger

  Correct Answer: D

• Question 390:

  Which of the following allows an auditor to test proprietary-software compiled code for security flaws?

  A. Fuzzing

  B. Static review

  C. Code signing

  D. Regression testing

  Correct Answer: A