CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 591:

  A security administrator determined that users within the company are installing unapproved software. Company policy dictates that only certain applications may be installed or ran on the user's computers without exception. Which of the following should the administrator do to prevent all unapproved software from running on the user's computer?

  A. Deploy antivirus software and configure it to detect and remove pirated software

  B. Configure the firewall to prevent the downloading of executable files

  C. Create an application whitelist and use OS controls to enforce it

  D. Prevent users from running as administrator so they cannot install software.

  Correct Answer: C

• Question 592:

  While reviewing the security controls in place for a web-based application, a security controls assessor notices that there are no password strength requirements in place. Because of this vulnerability, passwords might be easily discovered using a brute force attack. Which of the following password requirements will MOST effectively improve the security posture of the application against these attacks? (Select two)

  A. Minimum complexity

  B. Maximum age limit

  C. Maximum length

  D. Minimum length

  E. Minimum age limit

  F. Minimum re-use limit

  Correct Answer: AD

• Question 593:

  An organization is trying to decide which type of access control is most appropriate for the network. The current access control approach is too complex and requires significant overhead. Management would like to simplify the access control and provide user with the ability to determine what permissions should be applied to files, document, and directories. The access control method that BEST satisfies these objectives is:

  A. Rule-based access control

  B. Role-based access control

  C. Mandatory access control

  D. Discretionary access control

  Correct Answer: D

• Question 594:

  A consultant has been tasked to assess a client's network. The client reports frequent network outages. Upon viewing the spanning tree configuration, the consultant notices that an old and law performing edge switch on the network has been elected to be the root bridge. Which of the following explains this scenario?

  A. The switch also serves as the DHCP server

  B. The switch has the lowest MAC address

  C. The switch has spanning tree loop protection enabled

  D. The switch has the fastest uplink port

  Correct Answer: C

• Question 595:

  A new hire wants to use a personally owned phone to access company resources. The new hire expresses concern about what happens to the data on the phone when they leave the company. Which of the following portions of the company's mobile device management configuration would allow the company data to be removed from the device without touching the new hire's data?

  A. Asset control

  B. Device access control

  C. Storage lock out

  D. Storage segmentation

  Correct Answer: B

• Question 596:

  Which of the following can affect electrostatic discharge in a network operations center?

  A. Fire suppression

  B. Environmental monitoring

  C. Proximity card access

  D. Humidity controls

  Correct Answer: D

• Question 597:

  A malicious attacker has intercepted HTTP traffic and inserted an ASCII line that sets the referrer URL. Which of the following is the attacker most likely utilizing?

  A. Header manipulation

  B. Cookie hijacking

  C. Cross-site scripting

  D. Xml injection

  Correct Answer: A

• Question 598:

  A company would like to prevent the use of a known set of applications from being used on company computers. Which of the following should the security administrator implement?

  A. Whitelisting

  B. Anti-malware

  C. Application hardening

  D. Blacklisting

  E. Disable removable media

  Correct Answer: D

• Question 599:

  A security administrator has been asked to implement a VPN that will support remote access over IPSEC. Which of the following is an encryption algorithm that would meet this requirement?

  A. MD5

  B. AES

  C. UDP

  D. PKI

  Correct Answer: B

• Question 600:

  A security administrator is evaluating three different services: radius, diameter, and Kerberos. Which of the following is a feature that is UNIQUE to Kerberos?

  A. It provides authentication services

  B. It uses tickets to identify authenticated users

  C. It provides single sign-on capability

  D. It uses XML for cross-platform interoperability

  Correct Answer: B