CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 31:

  A bank uses a wireless network to transmit credit card purchases to a billing system. Which of the following would be MOST appropriate to protect credit card information from being accessed by unauthorized individuals outside of the premises?

  A. Air gap
  B. Infrared detection
  C. Faraday cage
  D. Protected distributions
  C. Faraday cage

• Question 32:

  DRAG DROP

  You have been tasked with designing a security plan for your company. Drag and drop the appropriate security controls on the floor plan-Instructions: All objects must be used and all place holders must be filled. Order does not matter. When you have completed the simulation, please select the Done button to submit.

  Select and Place:

  

  

  ---

  Cable locks - Adding a cable lock between a laptop and a desk prevents someone from picking it up and walking away

  Proximity badge + reader

  Safe is a hardware/physical security measure

  Mantrap can be used to control access to sensitive areas.

  CCTV can be used as video surveillance.

  Biometric reader can be used to control and prevent unauthorized access.

  Locking cabinets can be used to protect backup media, documentation and other physical artefacts.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis, 2014, p. 369

• Question 33:

  A user downloads and installs an MP3 converter, and runs the application. Upon running the application, the antivirus detects a new port in a listening state. Which of the following has the user MOST likely executed?

  A. RAT
  B. Worm
  C. Ransomware
  D. Bot
  A. RAT

• Question 34:

  The Chief Financial Officer (CFO) of an insurance company received an email from Ann, the company's Chief Executive Officer (CEO), requesting a transfer of $10,000 to an account. The email states Ann is on vacation and has lost her purse, containing cash and credit cards. Which of the following social-engineering techniques is the attacker using?

  A. Phishing
  B. Whaling
  C. Typo squatting
  D. Pharming
  B. Whaling

• Question 35:

  The help desk received a call from a user who was trying to access a set of files from the day before but received the following error message: File format not recognized. Which of the following types of malware MOST likely caused this to occur?

  A. Ransomware
  B. Polymorphic virus
  C. Rootkit
  D. Spyware
  A. Ransomware

• Question 36:

  A user receives a security alert pop-up from the host-based IDS, and a few minutes later notices a document on the desktop has disappeared and in its place is an odd filename with no icon image. When clicking on this icon, the user receives a system notification that it cannot find the correct program to use to open this file. Which of the following types of malware has MOST likely targeted this workstation?

  A. Rootkit
  B. Spyware
  C. Ransomware
  D. Remote-access Trojan
  C. Ransomware

• Question 37:

  An organization handling highly confidential information needs to update its systems. Which of the following is the BEST method to prevent data compromise?

  A. Wiping
  B. Degaussing
  C. Shredding
  D. Purging
  C. Shredding

• Question 38:

  A recent internal audit is forcing a company to review each internal business unit's VMs because the cluster they are installed on is in danger of running out of computer resources. Which of the following vulnerabilities exist?

  A. Buffer overflow
  B. End-of-life systems
  C. System sprawl
  D. Weak configuration
  C. System sprawl

• Question 39:

  Which of the following agreement types is a non-contractual agreement between two or more parties and outlines each party's requirements and responsibilities?

  A. BPA
  B. SLA
  C. MOU
  D. ISA
  C. MOU

• Question 40:

  Which of the following is an example of federated access management?

  A. Windows passing user credentials on a peer-to-peer network
  B. Applying a new user account with a complex password
  C. Implementing a AAA framework for network access
  D. Using a popular website login to provide access to another website
  D. Using a popular website login to provide access to another website