CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 551:

  A computer forensics analyst collected a flash drive that contained a single file with 500 pages of text. Which of the following algorithms should the analyst use to validate the integrity of the file?

  A. 3DES

  B. AES

  C. MD5

  D. RSA

  Correct Answer: C

• Question 552:

  A mobile application developer wants to secure an application that transmits sensitive information. Which of the following should the developer implement to prevent SSL MITM attacks?

  A. Stapling

  B. Chaining

  C. Signing

  D. Pinning

  Correct Answer: D

• Question 553:

  Which of the following incident response steps involves actions to protect critical systems while maintaining business operations?

  A. Investigation

  B. Containment

  C. Recovery

  D. Lessons learned

  Correct Answer: B

• Question 554:

  A systems administrator is auditing the company's Active Directory environment. It is quickly noted that the username "company\bsmith" is interactively logged into several desktops across the organization. Which of the following has the systems administrator MOST likely come across?

  A. Service account

  B. Shared credentials

  C. False positive

  D. Local account

  Correct Answer: B

• Question 555:

  A systems administrator needs to configure an SSL remote access VPN according to the following organizational guidelines:

  The VPN must support encryption of header and payload.

  The VPN must route all traffic through the company's gateway.

  Which of the following should be configured on the VPN concentrator?

  A. Full tunnel

  B. Transport mode

  C. Tunnel mode

  D. IPSec

  Correct Answer: C

• Question 556:

  A large financial services firm recently released information regarding a security breach within its corporate network that began several years before. During the time frame in which the breach occurred, indicators show an attacker gained administrative access to the network through a file download from a social media site and subsequently installed it without the user's knowledge. Since the compromise, the attacker was able to take command and control of the computer systems anonymously while obtaining sensitive corporate and personal employee information.

  Which of the following methods did the attacker MOST likely use to gain access?

  A. A bot

  B. A fileless virus

  C. A logic bomb

  D. A RAT

  Correct Answer: A

• Question 557:

  A company has had a BYOD policy in place for many years and now wants to roll out an MDM solution. The company has decided that end users who wish to utilize their personal devices for corporate use must opt in to the MDM solution. End users are voicing concerns about the company having access to their personal devices via the MDM solution. Which of the following should the company implement to ease these concerns?

  A. Sideloading

  B. Full device encryption

  C. Application management

  D. Containerization

  Correct Answer: D

• Question 558:

  A system uses an application server and database server. Employing the principle of least privilege, only database administrators are given administrative privileges on the database server, and only application team members are given administrative privileges on the application server. Audit and log file reviews are performed by the business unit (a separate group from the database and application teams).

  The organization wants to optimize operational efficiency when application or database changes are needed, but it also wants to enforce least privilege, prevent modification of log files, and facilitate the audit and log review performed by the business unit.

  Which of the following approaches would BEST meet the organization's goals?

  A. Restrict privileges on the log file directory to "read only" and use a service account to send a copy of these files to the business unit.

  B. Switch administrative privileges for the database and application servers. Give the application team administrative privileges on the database servers and the database team administrative privileges on the application servers.

  C. Remove administrative privileges from both the database and application servers, and give the business unit "read only" privileges on the directories where the log files are kept.

  D. Give the business unit administrative privileges on both the database and application servers so they can independently monitor server activity.

  Correct Answer: A

• Question 559:

  A technician is recommending preventive physical security controls for a server room. Which of the following would the technician MOST likely recommend? (Choose two.)

  A. Geofencing

  B. Video surveillance

  C. Protected cabinets

  D. Mantrap

  E. Key exchange

  F. Authorized personnel signage

  Correct Answer: CD

• Question 560:

  The help desk received a call from a user who was trying to access a set of files from the day before but received the following error message: File format not recognized. Which of the following types of malware MOST likely caused this to occur?

  A. Ransomware

  B. Polymorphic virus

  C. Rootkit

  D. Spyware

  Correct Answer: A