CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 611:

  The Chief Executive Officer (CEO) of a major defense contracting company a traveling overseas for a conference. The CEO will be taking a laptop. Which of the following should the security administrator implement to ensure confidentiality of the data if the laptop were to be stolen or lost during the trip?

  A. Remote wipe

  B. Full device encryption

  C. BIOS password

  D. GPS tracking

  Correct Answer: B

• Question 612:

  The firewall administrator is adding a new certificate for the company's remote access solution. The solution requires that the uploaded file contain the entire certificate chain for the certificate to load properly. The administrator loads the company certificate and the root CA certificate into the file. The file upload is rejected. Which of the following is required to complete the certificate chain?

  A. Certificate revocation list

  B. Intermediate authority

  C. Recovery agent

  D. Root of trust

  Correct Answer: B

• Question 613:

  A system administrator wants to implement an internal communication system that will allow employees to send encrypted messages to each other. The system must also support non- repudiation. Which of the following implements all these requirements?

  A. Bcrypt

  B. Blowfish

  C. PGP

  D. SHA

  Correct Answer: C

• Question 614:

  Given the log output:

  Max 15 00:15:23.431 CRT: #SEC_LOGIN-5-LOGIN_SUCCESS:

  Login Success [user: msmith] [Source: 10.0.12.45]

  [localport: 23] at 00:15:23:431 CET Sun Mar 15 2015

  Which of the following should the network administrator do to protect data security?

  A. Configure port security for logons

  B. Disable telnet and enable SSH

  C. Configure an AAA server

  D. Disable password and enable RSA authentication

  Correct Answer: B

• Question 615:

  Which of the following is a document that contains detailed information about actions that include how something will be done, when the actions will be performed, and penalties for failure?

  A. MOU

  B. ISA

  C. BPA

  D. SLA

  Correct Answer: D

• Question 616:

  Which of the following are MOST susceptible to birthday attacks?

  A. Hashed passwords

  B. Digital certificates

  C. Encryption passwords

  D. One time passwords

  Correct Answer: A

• Question 617:

  Joe a computer forensic technician responds to an active compromise of a database server. Joe first collects information in memory, then collects network traffic and finally conducts an image of the hard drive. Which of the following procedures did Joe follow?

  A. Order of volatility

  B. Chain of custody

  C. Recovery procedure

  D. Incident isolation

  Correct Answer: A

• Question 618:

  A company is planning to encrypt the files in several sensitive directories of a file server with a symmetric key. Which of the following could be used?

  A. RSA

  B. TwoFish

  C. Diffie-Helman

  D. NTLMv2

  E. RIPEMD

  Correct Answer: B

• Question 619:

  Malware that changes its binary pattern on specific dates at specific times to avoid detection is known as a (n):

  A. armored virus

  B. logic bomb

  C. polymorphic virus D. Trojan

  Correct Answer: C

• Question 620:

  A Chief Security Officer (CSO) has been unsuccessful in attempts to access the website for a potential partner (www.example.net). Which of the following rules is preventing the CSO from accessing the site? Blocked sites: *.nonews.com, *.rumorhasit.net, *.mars?

  A. Rule 1: deny from inside to outside source any destination any service smtp

  B. Rule 2: deny from inside to outside source any destination any service ping

  C. Rule 3: deny from inside to outside source any destination {blocked sites} service http-https

  D. Rule 4: deny from any to any source any destination any service any

  Correct Answer: C