CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 441:

  A software development company needs to augment staff by hiring consultants for a high- stakes project The project has the following requirements: Consultants will have access to flighty confidential, proprietary data.

  Consultants will not be provided with company-owned assets.

  Work needs to start Immediately.

  Consultants will be provided with Internal email addresses for communications.

  Which of the following solutions is the BEST method lor controlling data exfiltration during this project?

  A. Require that all consultant activity be restricted to a secure VDI environment.
  B. Require the consultants to sign an agreement stating they will only use the company- provided email address for communications during the project.
  C. Require updated antivirus. USB blocking, and a host-based firewall on all consultant devices.
  D. Require the consultants to conned to the company VPN when accessing confidential resources.
  C. Require updated antivirus. USB blocking, and a host-based firewall on all consultant devices.

• Question 442:

  Users are attempting to access a company's website but are transparently redirected to another websites. The users confirm the URL is correct. Which of the following would BEST prevent this issue in the futue?

  A. DNSSEC
  B. HTTPS
  C. IPSec
  D. TLS/SSL
  A. DNSSEC

• Question 443:

  An organization uses SSO authentication for employee access to network resources. When an employee resigns, as per the organization's security policy, the employee's access to all network resources is terminated immediately. Two weeks later, the former employee sends an email to the help desk for a password reset to access payroll information from the human resources server. Which of the following represents the BEST course of action?

  A. Approve the former employee's request, as a password reset would give the former employee access to only the human resources server.
  B. Deny the former employee's request, since the password reset request came from an external email address.
  C. Deny the former employee's request, as a password reset would give the employee access to all network resources.
  D. Approve the former employee's request, as there would not be a security issue with the former employee gaining access to network resources.
  C. Deny the former employee's request, as a password reset would give the employee access to all network resources.

• Question 444:

  Which of the following enables a corporation to extend local security policies to corporate resources hosted in a CSP's infrastructure?

  A. PKI
  B. CRL
  C. Directory services
  D. CASB
  E. VDI
  D. CASB

• Question 445:

  An organization with a low tolerance tor user inconvenience wants to protect laptop hard drives against loss of data theft Which of the following would be the MOST acceptable?

  A. SED
  B. HSU
  C. DLP
  D. TPM
  C. DLP

• Question 446:

  An auditor requiring an organization to perform real-time validation of SSL certificates. Which of the following should the organization implement?

  A. OCSP
  B. CRL
  C. CSR
  D. KDC
  A. OCSP

• Question 447:

  A technician is recommending preventive physical security controls for a server room. Which of the technician MOST likely recommend? (Select Two).

  A. Geofencing
  B. Video Surveillance
  C. Protected cabinets
  D. Mantrap
  E. Key exchange
  F. Authorized personnel signage
  C. Protected cabinets
  D. Mantrap

• Question 448:

  Which of the following would provide a safe environment for an application to access only the resources needed to function while not having access to run at the system level?

  A. Sandbox
  B. Honeypot
  C. GPO
  D. DMZ
  A. Sandbox

• Question 449:

  A user wants to send a confidential message to a customer to ensure unauthorized users cannot access the information. Which of the following can be used to ensure the security of the document while in transit and at rest?

  A. BCRYPT
  B. PGP
  C. FTPS
  D. S/MIME
  B. PGP

• Question 450:

  Which of the following must be intact for evidence to be admissible in court?

  A. Chain of custody
  B. Order of volatility
  C. Legal hold
  D. Preservation
  A. Chain of custody