CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 471:

  A systems engineer wants to leverage a cloud-based architecture with low latency between network- connected devices that also reduces the bandwidth that is required by performing analytics directly on the endpoints. Which of the following would BEST meet the requirements? (Select TWO).

  A. Private cloud
  B. SaaS
  C. Hybrid cloud
  D. laaS
  E. DRaaS
  F. Fog computing
  C. Hybrid cloud
  F. Fog computing

• Question 472:

  If a current private key is compromised, which of the following would ensure it cannot be used to decrypt all historical data?

  A. Perfect forward secrecy
  B. Elliptic-curve cryptography
  C. Key stretching
  D. Homomorphic encryption
  D. Homomorphic encryption

• Question 473:

  The Chief Executive Officer (CEO) of a major defense contracting company a traveling overseas for a conference. The CEO will be taking a laptop. Which of the following should the security administrator implement to ensure confidentiality of the data if the laptop were to be stolen or lost during the trip?

  A. Remote wipe
  B. Full device encryption
  C. BIOS password
  D. GPS tracking
  B. Full device encryption

• Question 474:

  Fuzzing is used to reveal which of the following vulnerabilities in web applications?

  A. Weak cipher suites
  B. Improper input handling
  C. DLL injection
  D. Certificate signing flaws
  B. Improper input handling

• Question 475:

  A user from the financial aid office is having trouble interacting with the finaid directory on the university's ERP system. The systems administrator who took the call ran a command and received the following output:

  

  Subsequently, the systems administrator has also confirmed the user is a member of the finaid group on the ERP system. Which of the following is the MOST likely reason for the issue?

  A. The permissions on the finaid directory should be drwxrwxrwx.
  B. The problem is local to the user, and the user should reboot the machine.
  C. The files on the finaid directory has an improper group assignment.
  D. The finaid directory should be d---rwx--
  A. The permissions on the finaid directory should be drwxrwxrwx.

• Question 476:

  A government contracting company Issues smartphones lo employees lo enable access lo corporate resources. Several employees will need to travel to a foreign country (or business purposes and will require access lo their phones. However, the company recently received intelligence that its intellectual property is highly desired by the same country's government. Which of the following MDM configurations would BEST reduce the risk of compromise while on foreign soil?

  A. Disable firmware OTA updates.
  B. Disable location services.
  C. Disable push notification services.
  D. Disable wipe.
  A. Disable firmware OTA updates.

• Question 477:

  A company wishes to move all of its services and applications to a cloud provider but wants to maintain full control of the deployment, access, and provisions of its services to its users. Which of the following BEST represents the required cloud deployment model?

  A. SaaS
  B. IaaS
  C. MaaS
  D. Hybrid
  E. Private
  A. SaaS

• Question 478:

  An actor downloads and runs a program against a corporate login page. The program imports a list of usernames and passwords, looking for a successful attempt. Which of the following terms BEST describes the actor in this situation?

  A. Script kiddie
  B. Hacktivist
  C. Cryptologist
  D. Security auditor
  A. Script kiddie

• Question 479:

  A security technician has been given the task of preserving emails that are potentially involved in a dispute between a company and a contractor. Which of the following BEST describes this forensic concept?

  A. Legal hold
  B. Chain of custody
  C. Order of volatility
  D. Data acquisition
  A. Legal hold

• Question 480:

  A company recently updated its website to increase sales. The new website uses PHP forms for leads and provides a directory with sales staff and their phone numbers. A systems administrator is concerned with the new website and provides the following log to support the concern:

  

  Which of the following is the systems administrator MOST likely to suggest to the Chief Information Security Officer (CISO) based on the above?

  A. Changing the account standard naming convention
  B. Implementing account lockouts
  C. Discontinuing the use of privileged accounts
  D. Increasing the minimum password length from eight to ten characters
  A. Changing the account standard naming convention