CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 611:

  A security program manager wants to actively test the security posture of a system. The system is not yet in production and has no uptime requirement or active user base. Which of the following methods will produce a report which shows vulnerabilities that were actually exploited?

  A. Peer review
  B. Component testing
  C. Penetration testing
  D. Vulnerability testing
  C. Penetration testing

• Question 612:

  A user is unable to open a file that has a grayed-out icon with a lock. The user receives a pop-up message indicating that payment must be sent in Bitcoin to unlock the file. Later in the day, other users in the organization lose the ability to open files on the server.

  Which of the following has MOST likely occurred? (Choose three.)

  A. Crypto-malware
  B. Adware
  C. Botnet attack
  D. Virus
  E. Ransomware
  F. Backdoor
  G. DDoS attack
  A. Crypto-malware
  D. Virus
  E. Ransomware

• Question 613:

  An organization's research department uses workstations in an air-gapped network. A competitor released products based on files that originated in the research department. Which of the following should management do to improve the security and confidentiality of the research files?

  A. Implement multifactor authentication on the workstations.
  B. Configure removable media controls on the workstations.
  C. Install a web application firewall in the research department.
  D. Install HIDS on each of the research workstations.
  B. Configure removable media controls on the workstations.

• Question 614:

  A company wants to implement an access management solution that allows employees to use the same usernames and passwords for multiple applications without having to keep multiple credentials synchronized. Which of the following solutions would BEST meet these requirements?

  A. Multifactor authentication
  B. SSO
  C. Biometrics
  D. PKI
  E. Federation
  B. SSO

• Question 615:

  An organization is using a tool to perform a source code review. Which of the following describes the case in which the tool incorrectly identifies the vulnerability?

  A. False negative
  B. True negative
  C. False positive
  D. True positive
  C. False positive

• Question 616:

  When backing up a database server to LTO tape drives, the following backup schedule is used. Backups take one hour to complete:

  

  On Friday at 9:00 p.m., there is a RAID failure on the database server. The data must be restored from backup. Which of the following is the number of backup tapes that will be needed to complete this operation?

  A. 1
  B. 2
  C. 3
  D. 4
  E. 6
  C. 3

• Question 617:

  A company is implementing MFA for all applications that store sensitive data. The IT manager wants MFA to be non-disruptive and user friendly. Which of the following technologies should the IT manager use when implementing MFA?

  A. Onetime passwords
  B. Email tokens
  C. Push notifications
  D. Hardware authentication
  C. Push notifications

• Question 618:

  A company recently implemented a new security system. In the course of configuration, the security administrator adds the following entry:

  #Whitelist USB\VID_13FEandPID_4127andREV_0100

  Which of the following security technologies is MOST likely being configured?

  A. Application whitelisting
  B. HIDS
  C. Data execution prevention
  D. Removable media control
  D. Removable media control

• Question 619:

  Which of the following is commonly done as part of a vulnerability scan?

  A. Exploiting misconfigured applications
  B. Cracking employee passwords
  C. Sending phishing emails to employees
  D. Identifying unpatched workstations
  D. Identifying unpatched workstations

• Question 620:

  The Chief Information Officer (CIO) has determined the company's new PKI will not use OCSP. The purpose of OCSP still needs to be addressed. Which of the following should be implemented?

  A. Build an online intermediate CA.
  B. Implement a key escrow.
  C. Implement stapling.
  D. Install a CRL.
  D. Install a CRL.