CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 641:

  The data backup window has expanded into the morning hours and has begun to affect production users. The main bottleneck in the process is the time it takes to replicate the backups to separate severs at the offsite data center. Which of the following uses of deduplication could be implemented to reduce the backup window?

  A. Implement deduplication at the network level between the two locations

  B. Implement deduplication on the storage array to reduce the amount of drive space needed

  C. Implement deduplication on the server storage to reduce the data backed up

  D. Implement deduplication on both the local and remote servers

  Correct Answer: B

• Question 642:

  An organization is moving its human resources system to a cloud services provider. The company plans to continue using internal usernames and passwords with the service provider, but the security manager does not want the service provider to have a company of the passwords. Which of the following options meets all of these requirements?

  A. Two-factor authentication

  B. Account and password synchronization

  C. Smartcards with PINS

  D. Federated authentication

  Correct Answer: D

• Question 643:

  An attacker uses a network sniffer to capture the packets of a transaction that adds $20 to a gift card. The attacker then user a function of the sniffer to push those packets back onto the network again,adding another $20 to the gift card. This can be done many times. Which of the following describes this type of attack?

  A. Integer overflow attack

  B. Smurf attack

  C. Replay attack

  D. Buffer overflow attack

  E. Cross-site scripting attack

  Correct Answer: C

• Question 644:

  During a data breach cleanup, it is discovered that not all of the sites involved have the necessary data wiping tools. The necessary tools are quickly distributed to the required technicians, but when should this problem BEST be revisited?

  A. Reporting

  B. Preparation

  C. Mitigation

  D. Lessons Learned

  Correct Answer: D

• Question 645:

  Joe, a technician, is working remotely with his company provided laptop at the coffee shop near his home. Joe is concerned that another patron of the coffee shop may be trying to access his laptop. Which of the following is an appropriate control to use to prevent the other patron from accessing Joe's laptop directly?

  A. full-disk encryption

  B. Host-based firewall

  C. Current antivirus definitions

  D. Latest OS updates

  Correct Answer: B

• Question 646:

  A business has recently deployed laptops to all sales employees. The laptops will be used primarily from home offices and while traveling, and a high amount of wireless mobile use is expected. To protect the laptops while connected to untrusted wireless networks, which of the following would be the BEST method for reducing the risk of having the laptops compromised?

  A. MAC filtering

  B. Virtualization

  C. OS hardening

  D. Application white-listing

  Correct Answer: C

• Question 647:

  A new intern in the purchasing department requires read access to shared documents. Permissions are normally controlled through a group called "Purchasing", however, the purchasing group permissions allow write access. Which of the following would be the BEST course of action?

  A. Modify all the shared files with read only permissions for the intern.

  B. Create a new group that has only read permissions for the files.

  C. Remove all permissions for the shared files.

  D. Add the intern to the "Purchasing" group.

  Correct Answer: B

• Question 648:

  A security program manager wants to actively test the security posture of a system. The system is not yet in production and has no uptime requirement or active user base. Which of the following methods will produce a report which shows vulnerabilities that were actually exploited?

  A. Peer review

  B. Component testing

  C. Penetration testing

  D. Vulnerability testing

  Correct Answer: C

  A penetration test, or pen test, is an attempt to evaluate the security of an IT infrastructure by safely trying to exploit vulnerabilities.

• Question 649:

  An administrator intends to configure an IPSec solution that provides ESP with integrity protection, but not confidentiality protection. Which of the following AES modes of operation would meet this integrity-only requirement?

  A. HMAC

  B. PCBC

  C. CBC

  D. GCM

  E. CFB

  Correct Answer: A

• Question 650:

  The chief security officer (CS0) has issued a new policy that requires that all internal websites be configured for HTTPS traffic only. The network administrator has been tasked to update all internal sites without incurring additional costs. Which of the following is the best solution for the network administrator to secure each internal website?

  A. Use certificates signed by the company CA

  B. Use a signing certificate as a wild card certificate

  C. Use certificates signed by a public ca

  D. Use a self-signed certificate on each internal server

  Correct Answer: D

  This is a way to update all internal sites without incurring additional costs? To be a CA (Certificate Authority), you need an infrastructure that consists of considerable operational elements, hardware, software, policy frameworks and practice statements, auditing, security infrastructure and personnel.