CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 461:

  A manufacturer creates designs for very high security products that are required to be protected and controlled by government regulations. These designs are not accessible by corporate networks or the Internet. Which of the following is the BEST solution to protect these designs?

  A. An air gap

  B. A Faraday cage

  C. A shielded cable

  D. A demilitarized zone

  Correct Answer: B

• Question 462:

  Which of the following environments typically hosts the current version configurations and code, compares user-story responses and workflow, and uses a modified version of actual data for testing?

  A. Development

  B. Staging

  C. Production

  D. Test

  Correct Answer: A

• Question 463:

  A company uses wireless for ail laptops and keeps a very detailed record of its assets, along with a comprehensive list of devices that are authorized to be on the wireless network. The Chief Information Officer (CIO) is concerned about a script kiddie potentially using an unauthorized device to brute force the wireless PSK and obtain access to the internal network. Which of the following should the company implement to BEST prevent this from occurring?

  A. A BPDU guard

  B. WPA-EAP

  C. IP filtering

  D. A WIDS

  Correct Answer: D

• Question 464:

  An attacker is attempting to harvest user credentials on a client's website. A security analyst notices multiple attempts of random usernames and passwords. When the analyst types in a random username and password, the logon screen

  displays the following message:

  The username you entered does not exist.

  Which of the following should the analyst recommend be enabled?

  A. Input validation

  B. Obfuscation

  C. Error handling

  D. Username lockout

  Correct Answer: D

• Question 465:

  Which of the following often operates in a client-server architecture to act as a service repository, providing enterprise consumers access to structured threat Intelligence data?

  A. STIX

  B. CIRT

  C. OSINT

  D. TAXII

  Correct Answer: B

• Question 466:

  A systems analyst is responsible for generating a new digital forensics chain-of-custody form. Which of the following should the analyst include in this documentation? (Select TWO)

  A. The order of volatility

  B. A checksum

  C. The location of the artifacts

  D. The vendor's name

  E. The date and time

  F. A warning banner

  Correct Answer: BC

• Question 467:

  An analyst is concerned about data leaks and wants to restrict access to Internet services to authorized users only. The analyst also wants to control the actions each user can perform on each service Which of the following would be the

  BEST technology for me analyst to consider implementing?

  A. DLP

  B. VPC

  C. CASB

  D. ACL

  Correct Answer: A

• Question 468:

  A cybersecurity analyst needs to Implement secure authentication to third-party websites without users' passwords Which of the following would be the BEST way to achieve this objective?

  A. OAuth

  B. SSO

  C. SAML

  D. PAP

  Correct Answer: B

• Question 469:

  An organization with a low tolerance tor user inconvenience wants to protect laptop hard drives against loss of data theft Which of the following would be the MOST acceptable?

  A. SED

  B. HSU

  C. DLP

  D. TPM

  Correct Answer: C

• Question 470:

  A security analyst is looking for a solution to help communicate to the leadership team the severity levels of the organization's vulnerabilities. Which of the following would BEST meet this need?

  A. CVE

  B. SIEM

  C. SOAR

  D. CVSS

  Correct Answer: C