CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 51:

  A user is unable to obtain an IP address from the corporate DHCP server. Which of the following is MOST likely the cause?

  A. Default configuration
  B. Resource exhaustion
  C. Memory overflow
  D. Improper input handling
  B. Resource exhaustion

• Question 52:

  A user from the financial aid office is having trouble interacting with the finaid directory on the university's ERP system. The systems administrator who took the call ran a command and received the following output:

  

  Subsequently, the systems administrator has also confirmed the user is a member of the finaid group on the ERP system. Which of the following is the MOST likely reason for the issue?

  A. The permissions on the finaid directory should be drwxrwxrwx.
  B. The problem is local to the user, and the user should reboot the machine.
  C. The files on the finaid directory have become corrupted.
  D. The finaid directory is not formatted correctly
  A. The permissions on the finaid directory should be drwxrwxrwx.

• Question 53:

  In a corporation where compute utilization spikes several times a year, the Chief Information Officer (CIO) has requested a cost-effective architecture to handle the variable capacity demand. Which of the following characteristics BEST describes what the CIO has requested?

  A. Elasticity
  B. Scalability
  C. High availability
  D. Redundancy
  A. Elasticity

• Question 54:

  A network administrator at a large organization is reviewing methods to improve the security of the wired LAN. Any security improvement must be centrally managed and allow corporate-owned devices to have access to the intranet but limit others to Internet access only. Which of the following should the administrator recommend?

  A. 802.1X utilizing the current PKI infrastructure
  B. SSO to authenticate corporate users
  C. MAC address filtering with ACLs on the router
  D. PAM for users account management
  A. 802.1X utilizing the current PKI infrastructure

• Question 55:

  Which of the following algorithms would be used to provide non-repudiation of a file transmission?

  A. AES
  B. RSA
  C. MD5
  D. SHA
  C. MD5

• Question 56:

  A small company's Chief Executive Officer (CEO) has asked its Chief Security Officer (CSO) to improve the company's security posture quickly with regard to targeted attacks. Which of the following should the CSO conduct FIRST?

  A. Survey threat feeds from services inside the same industry.
  B. Purchase multiple threat feeds to ensure diversity and implement blocks for malicious traffic
  C. Conduct an internal audit against industry best practices to perform a qualitative analysis.
  D. Deploy a UTM solution that receives frequent updates from a trusted industry vendor.
  A. Survey threat feeds from services inside the same industry.

• Question 57:

  When accessing a popular website, a user receives a warming that the certificate for the website is not valid. Upon investigation, it was noted that the certificate is not revoked and the website is working fine for other users. Which of the following is the MOST likely cause for this?

  A. The certificate is corrupted on the server.
  B. The certificate was deleted from the local cache.
  C. The user needs to restart the machine.
  D. The system date on the user's device is out of sync.
  D. The system date on the user's device is out of sync.

• Question 58:

  Which of the following characteristics differentiate a rainbow table attack from a brute force attack? (Select two.)

  A. Rainbow table attacks greatly reduce compute cycles at attack time.
  B. Rainbow tables must include precomputed hashes.
  C. Rainbow table attacks do not require access to hashed passwords.
  D. Rainbow table attacks must be performed on the network.
  E. Rainbow table attacks bypass maximum failed login restrictions.
  B. Rainbow tables must include precomputed hashes.
  E. Rainbow table attacks bypass maximum failed login restrictions.

• Question 59:

  A company has drafted an Insider-threat policy that prohibits the use of external storage devices. Which of the following would BEST protect the company from data exfiltration via removable media?

  A. Monitoring large data transfer transactions in the firewall logs
  B. Developing mandatory training to educate employees about the removable media policy
  C. Implementing a group policy to block user access to system files
  D. Blocking removable-media devices and write capabilities using a host-based security tool
  B. Developing mandatory training to educate employees about the removable media policy

• Question 60:

  A security operations team recently detected a breach of credentials. The team mitigated the risk and followed proper processes to reduce risk. Which of the following processes would BEST help prevent this issue from happening again?

  A. Risk assessment
  B. Chain of custody
  C. Lessons learned
  D. Penetration test
  B. Chain of custody