CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 421:

  In determining when it may be necessary to perform a credentialed scan against a system instead of a noncredentialed scan, which of the following requirements is MOST likely to influence this decision?

  A. The scanner must be able to enumerate the host OS of devices scanned.
  B. The scanner must be able to footprint the network.
  C. The scanner must be able to check for open ports with listening services.
  D. The scanner must be able to audit file system permissions
  D. The scanner must be able to audit file system permissions

• Question 422:

  The process of applying a salt and cryptographic hash to a password then repeating the process many times is known as which of the following?

  A. Collision resistance
  B. Rainbow table
  C. Key stretching
  D. Brute force attack
  C. Key stretching

• Question 423:

  An organization wants to conduct secure transactions of large data files. Before encrypting and exchanging the data files, the organization wants to ensure a secure exchange of keys. Which of the following algorithms is appropriate for securing the key exchange?

  A. DES
  B. Blowfish
  C. DSA
  D. Diffie-Hellman
  E. 3DES
  D. Diffie-Hellman

• Question 424:

  A cybersecurity administrator needs to add disk redundancy for a critical server. The solution must have a two-drive failure for better fault tolerance. Which of the following RAID levels should the administrator select?

  B. 1
  C. 5
  D. 6
  B. 1

• Question 425:

  A company hires a third-party firm to conduct an assessment of vulnerabilities exposed to the Internet. The firm informs the company that an exploit exists for an FTP server that had a version installed from eight years ago. The company has

  decided to keep the system online anyway, as no upgrade exists form the vendor.

  Which of the following BEST describes the reason why the vulnerability exists?

  A. Default configuration
  B. End-of-life system
  C. Weak cipher suite
  D. Zero-day threats
  B. End-of-life system

• Question 426:

  Due to regulatory requirements, server in a global organization must use time synchronization. Which of the following represents the MOST secure method of time synchronization?

  A. The server should connect to external Stratum 0 NTP servers for synchronization
  B. The server should connect to internal Stratum 0 NTP servers for synchronization
  C. The server should connect to external Stratum 1 NTP servers for synchronization
  D. The server should connect to external Stratum 1 NTP servers for synchronization
  B. The server should connect to internal Stratum 0 NTP servers for synchronization

• Question 427:

  Some call center representatives `workstations were recently updated by a contractor, who was able to collect customer information from the call center workstations. Which of the following types of malware was installed on the call center users' systems?

  A. Adware
  B. Logic bomb
  C. Trojan
  D. Spyware
  D. Spyware

• Question 428:

  An organization's policy requires users to create passwords with an uppercase letter, lowercase letter, number, and symbol. This policy is enforced with technical controls, which also prevents users from using any of their previous 12

  passwords. The quantization does not use single sign-on, nor does it centralize storage of passwords.

  The incident response team recently discovered that passwords for one system were compromised. Passwords for a completely separate system have NOT been compromised, but unusual login activity has been detected for that separate

  system. Account login has been detected for users who are on vacation.

  Which of the following BEST describes what is happening?

  A. Some users are meeting password complexity requirements but not password length requirements.
  B. The password history enforcement is insufficient, and old passwords are still valid across many different systems.
  C. Some users are reusing passwords, and some of the compromised passwords are valid on multiple systems.
  D. The compromised password file has been brute-force hacked, and the complexity requirements are not adequate to mitigate this risk.
  D. The compromised password file has been brute-force hacked, and the complexity requirements are not adequate to mitigate this risk.

• Question 429:

  A security analyst wants to prevent current employees who previously worked in different departments from accessing resources that are no longer necessary for their present job roles. Which of the following policies would meet this objective?

  A. Job rotation
  B. Discretionary account
  C. Least privilege
  D. Mandatory vacation
  E. Separation of duties
  C. Least privilege

• Question 430:

  A security auditor is putting together a report for the Chief Executive Officer (CEO) on personnel security and its impact on the security posture of the whole organization. Which of the following would be the MOST important factor to consider when it comes to personnel security?

  A. Insider threats
  B. Privilege escalation
  C. Hacktivist
  D. Phishing through social media
  E. Corporate espionage
  A. Insider threats