CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 551:

  An organization uses an antivirus scanner from Company A on its firewall, an email system antivirus scanner from Company B. and an endpoint antivirus scanner from Company C. This is an example of:

  A. unified threat management.
  B. an OVAL system.
  C. vendor diversity.
  D. alternate processing sites.
  C. vendor diversity.

• Question 552:

  A security administrator is configuring a RADIUS server for wireless authentication. The configuration must ensure client credentials are encrypted end-to-end between the client and the authenticator. Which of the following protocols should be configured on the RADIUS server? (Select TWO).

  A. PAP
  B. MSCHAP
  C. PEAP
  D. NTLM
  E. SAML
  B. MSCHAP
  C. PEAP

• Question 553:

  Ann, a user, reported to the service desk that many files on her computer will not open or the contents are not readable. The service desk technician asked Ann if she encountered any strange messages on boot-up or login, and Ann indicated she did not. Which of the following has MOST likely occurred on Ann's computer?

  A. The hard drive is falling, and the files are being corrupted.
  B. The computer has been infected with crypto-malware.
  C. A replay attack has occurred.
  D. A keylogger has been installed.
  B. The computer has been infected with crypto-malware.

• Question 554:

  In a lessons learned report, it is suspected that a well-organized, well-funded, and extremely sophisticated group of attackers may have been responsible for a breach at a nuclear facility. Which of the following describes the type of actors that may have been implicated?

  A. Nation state
  B. Hacktivist
  C. Insider
  D. Competitor
  A. Nation state

• Question 555:

  Which of the following uses precomputed hashes to guess passwords?

  A. Iptables
  B. NAT tables
  C. Rainbow tables
  D. ARP tables
  C. Rainbow tables

• Question 556:

  During an incident, a company's CIRT determines it is necessary to observe the continued network-based transactions between a callback domain and the malware running on an enterprise PC. Which of the following techniques would be BEST to enable this activity while reducing the risk of lateral spread and the risk that the adversary would notice any changes?

  A. Physically move the PC to a separate Internet point of presence.
  B. Create and apply microsegmentation rules.
  C. Emulate the malware in a heavily monitored DMZ segment.
  D. Apply network blacklisting rules for the adversary domain.
  A. Physically move the PC to a separate Internet point of presence.
  B. Create and apply microsegmentation rules.

• Question 557:

  A systems administrator wants to configure an enterprise wireless solution that supports authentication over HTTPS and wireless encryption using AES. Which of the following should the administrator configure to support these requirements? (Select TWO).

  A. 802.1X
  B. RADIUS federation
  C. WPS
  D. Captive portal
  E. WPA2
  F. WDS
  A. 802.1X
  E. WPA2

• Question 558:

  During a forensic investigation, which of the following must be addressed FIRST according to the order of volatility?

  A. Hard drive
  B. RAM
  C. Network attached storage
  D. USB flash drive
  B. RAM

• Question 559:

  A security analyst is assessing a small company's internal servers against recommended security practices. Which of the following should the analyst do to conduct the assessment? (Select TWO).

  A. Compare configurations against platform benchmarks,
  B. Confirm adherence to the company's industry-specific regulations.
  C. Review the company's current security baseline,
  D. Verify alignment with policy related to regulatory compliance
  E. Run an exploitation framework to confirm vulnerabilities
  C. Review the company's current security baseline,
  E. Run an exploitation framework to confirm vulnerabilities

• Question 560:

  A security analyst is investigating a security breach involving the loss of sensitive data. A user passed the information through social media as vacation photos. Which of the following methods was used to encode the data?

  A. Obfuscation
  B. Steganography
  C. Hashing
  D. Elliptic curve
  B. Steganography