CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 541:

  A cryptographer has developed a new proprietary hash function for a company and solicited employees to test the function before recommending its implementation. An employee takes the plaintext version of a document and hashes it, then changes the original plaintext document slightly and hashes it, and continues repeating this process until two identical hash values are produced from two different documents. Which of the following BEST describes this cryptographic attack?

  A. Brute force

  B. Known plaintext

  C. Replay

  D. Collision

  Correct Answer: D

• Question 542:

  An organization is drafting an IRP and needs to determine which employees have the authority to take systems offline during an emergency situation. Which of the following is being outlined?

  A. Reporting and escalation procedures

  B. Permission auditing

  C. Roles and responsibilities

  D. Communication methodologies

  Correct Answer: C

• Question 543:

  A systems administrator is installing and configuring an application service that requires access to read and write to log and configuration files on a local hard disk partition. The service must run as an account with authorization to interact with the file system. Which of the following would reduce the attack surface added by the service and account? (Choose two.)

  A. Use a unique managed service account.

  B. Utilize a generic password for authenticating.

  C. Enable and review account audit logs.

  D. Enforce least possible privileges for the account.

  E. Add the account to the local administrators group.

  F. Use a guest account placed in a non-privileged users group.

  Correct Answer: AD

• Question 544:

  A security team has downloaded a public database of the largest collection of password dumps on the Internet. This collection contains the cleartext credentials of every major breach for the last four years. The security team pulls and compares users' credentials to the database and discovers that more than 30% of the users were still using passwords discovered in this list. Which of the following would be the BEST combination to reduce the risks discovered?

  A. Password length, password encryption, password complexity

  B. Password complexity, least privilege, password reuse

  C. Password reuse, password complexity, password expiration D. Group policy, password history, password encryption

  Correct Answer: C

• Question 545:

  To further secure a company's email system, an administrator is adding public keys to DNS records in the company's domain. Which of the following is being used?

  A. PFS

  B. SPF

  C. DMARC

  D. DNSSEC

  Correct Answer: D

• Question 546:

  An incident response analyst in a corporate security operations center receives a phone call from an SOC analyst. The SOC analyst explains the help desk recently reimaged a workstation that was suspected of being infected with an unknown type of malware; however, even after reimaging, the host continued to generate SIEM alerts. Which of the following types of malware is MOST likely responsible for producing the SIEM alerts?

  A. Ransomware

  B. Logic bomb

  C. Rootkit

  D. Adware

  Correct Answer: C

• Question 547:

  During a risk assessment, results show that a fire in one of the company's datacenters could cost up to $20 million in equipment damages and lost revenue. As a result, the company insures the datacenter for up to $20 million damages for the cost of $30,000 a year. Which of the following risk response techniques has the company chosen?

  A. Transference

  B. Avoidance

  C. Mitigation

  D. Acceptance

  Correct Answer: A

• Question 548:

  A technician is designing a solution that will be required to process sensitive information, including classified government data. The system needs to be common criteria certified. Which of the following should the technician select?

  A. Security baseline

  B. Hybrid cloud solution

  C. Open-source software applications

  D. Trusted operating system

  Correct Answer: D

• Question 549:

  While testing a new vulnerability scanner, a technician becomes concerned about reports that list security concerns that are not present on the systems being tested. Which of the following BEST describes this flaw?

  A. False positives

  B. Crossover error rate

  C. Uncredentialed scan

  D. Passive security controls

  Correct Answer: A

• Question 550:

  During a forensic investigation, which of the following must be addressed FIRST according to the order of volatility?

  A. Hard drive

  B. RAM

  C. Network attached storage

  D. USB flash drive

  Correct Answer: B