CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 521:

  A local coffee shop runs a small WiFi hotspot for its customers that utilizes WPA2-PSK. The coffee shop would like to stay current with security trends and wants to implement WPA3 to make its WiFi even more secure. Which of the following technologies should the coffee shop use in place of PSK?

  A. WEP

  B. EAP

  C. WPS

  D. SAE

  Correct Answer: D

• Question 522:

  After successfully breaking into several networks and infecting multiple machines with malware, hackers contact the network owners, demanding payment to remove the infection and decrypt files. The hackers threaten to publicly release information about the breach if they are not paid. Which of the following BEST describes these attackers?

  A. Gray hat hackers

  B. Organized crime

  C. Insiders

  D. Hacktivists

  Correct Answer: B

• Question 523:

  A company needs to fix some audit findings related to its physical security. A key finding was that multiple people could physically enter a location at the same time. Which of the following is the BEST control to address this audit finding?

  A. Faraday cage

  B. Mantrap

  C. Biometrics

  D. Proximity cards

  Correct Answer: B

• Question 524:

  A network administrator was concerned during an audit that users were able to use the same passwords the day after a password change policy took effect. The following settings are in place:

  Users must change their passwords every 30 days. Users cannot reuse the last 10 passwords.

  Which of the following settings would prevent users from being able to immediately reuse the same passwords?

  A. Minimum password age of five days

  B. Password history of ten passwords

  C. Password length greater than ten characters

  D. Complex passwords must be used

  Correct Answer: A

• Question 525:

  A security engineer at an offline government facility is concerned about the validity of an SSL certificate. The engineer wants to perform the fastest check with the least delay to determine if the certificate has been revoked. Which of the following would BEST meet these requirements?

  A. RA

  B. OCSP

  C. CRI

  D. CSR

  Correct Answer: B

• Question 526:

  In which of the following risk management strategies would cybersecurity insurance be used?

  A. Transference

  B. Avoidance

  C. Acceptance

  D. Mitigation

  Correct Answer: A

• Question 527:

  Which of the following BEST explains the reason why a server administrator would place a document named password.txt on the desktop of an administrator account on a server?

  A. The document is a honeyfile and is meant to attract the attention of a cyberintruder.

  B. The document is a backup file if the system needs to be recovered.

  C. The document is a standard file that the OS needs to verify the login credentials.

  D. The document is a keylogger that stores all keystrokes should the account be compromised.

  Correct Answer: A

• Question 528:

  A network administrator at a large organization is reviewing methods to improve the security of the wired LAN. Any security improvement must be centrally managed and allow corporate-owned devices to have access to the intranet but limit others to Internet access only. Which of the following should the administrator recommend?

  A. 802.1X utilizing the current PKI infrastructure

  B. SSO to authenticate corporate users

  C. MAC address filtering with ACLs on the router

  D. PAM for users account management

  Correct Answer: A

• Question 529:

  A security administrator suspects there may be unnecessary services running on a server. Which of the following tools will the administrator MOST likely use to confirm the suspicions?

  A. Nmap

  B. Wireshark

  C. Autopsy

  D. DNSEnum

  Correct Answer: A

• Question 530:

  A forensics investigator is examining a number of unauthorized payments that were reported on the company's website. Some unusual log entries show users received an email for an unwanted mailing attempt to unsubscribe. One of the users reported the email to the phishing team, and the forwarded email revealed the link to be:

  Click here to unsubscribe

  Which of the following will the forensics investigator MOST likely determine has occurred?

  A. SQL injection

  B. CSRF

  C. XSS

  D. XSRF

  Correct Answer: B