CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 541:

  A member of the human resources department received the following email message after sending an email containing benefit and tax information to a candidate:

  "Your message has been quarantined for the following policy violation: external potential_PII. Please contact the IT security administrator for further details". Which of the following BEST describes why this message was received?

  A. The DLP system flagged the message.
  B. The mail gateway prevented the message from being sent to personal email addresses.
  C. The company firewall blocked the recipient's IP address.
  D. The file integrity check failed for the attached files.
  A. The DLP system flagged the message.

• Question 542:

  An auditor is requiring an organization to perform real-time validation of SSL certificates. Which of the following should the organization implement?

  A. OCSP
  B. CRL
  C. CSR
  D. KDC
  C. CSR

• Question 543:

  During a penetration test, the tester performs a preliminary scan for any responsive hosts. Which of the following BEST explains why the tester is doing this?

  A. To determine if the network routes are improperly forwarding request packets
  B. To identify the total number of hosts and determine if the network can be victimized by a DoS attack
  C. To identify servers for subsequent scans and further investigation
  D. To identify the unresponsive hosts and determine if those could be used as zombies in a follow-up scan.
  C. To identify servers for subsequent scans and further investigation

• Question 544:

  A malicious actor recently penetrated a company's network and moved laterally to the datacenter. Upon investigation, a forensics firm wants to know what was in the memory on the compromised server. Which of the following files should be given to the forensics firm?

  A. Security
  B. Application
  C. Dump
  D. Syslog
  C. Dump

• Question 545:

  After a systems administrator installed and configured Kerberos services, several users experienced authentication issues. Which of the following should be installed to resolve these issues?

  A. RADIUS server
  B. NTLM service
  C. LDAP service
  D. NTP server
  D. NTP server

• Question 546:

  Which of the following is a compensating control that will BEST reduce the risk of weak passwords?

  A. Requiring the use of one-time tokens
  B. Increasing password history retention count
  C. Disabling user accounts after exceeding maximum attempts
  D. Setting expiration of user passwords to a shorter time
  A. Requiring the use of one-time tokens

• Question 547:

  A security engineer wants to add SSL to the public web server. Which of the following would be the FIRST step to implement the SSL certificate?

  A. Download the web certificate
  B. Install the intermediate certificate
  C. Generate a CSR
  D. Encrypt the private key
  C. Generate a CSR

• Question 548:

  A company is determining where to host a hot site, and one of the locations being considered is in another country. Which of the following should be considered when evaluating this option?

  A. Mean RTO
  B. Mean RPO
  C. Data sovereignty
  D. Data destruction laws
  E. Backup media recycling policies
  C. Data sovereignty

• Question 549:

  A company wants to configure its wireless network to require username and password authentication. Which of the following should the systems administrator Implement?

  A. WPS
  B. PEAP
  C. TKIP
  D. PKl
  A. WPS

• Question 550:

  A systems engineer is setting up a RADIUS server to support a wireless network that uses certificate authentication. Which of the following protocols must be supported by both the RADIUS server and the WAPs?

  A. CCMP
  B. TKIP
  C. WPS
  D. EAP
  D. EAP