CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 651:

  A company wants to ensure that the validity of publicly trusted certificates used by its web server can be determined even during an extended internet outage. Which of the following should be implemented?

  A. Recovery agent

  B. Ocsp

  C. Crl

  D. Key escrow

  Correct Answer: B

• Question 652:

  A company researched the root cause of a recent vulnerability in its software. It was determined that the vulnerability was the result of two updates made in the last release. Each update alone would not have resulted in the vulnerability. In order to prevent similar situations in the future, the company should improve which of the following?

  A. Change management procedures

  B. Job rotation policies

  C. Incident response management

  D. Least privilege access controls

  Correct Answer: A

• Question 653:

  A computer on a company network was infected with a zero-day exploit after an employee accidently opened an email that contained malicious content. The employee recognized the email as malicious and was attempting to delete it, but accidently opened it. Which of the following should be done to prevent this scenario from occurring again in the future?

  A. Install host-based firewalls on all computers that have an email client installed

  B. Set the email program default to open messages in plain text

  C. Install end-point protection on all computers that access web email

  D. Create new email spam filters to delete all messages from that sender

  Correct Answer: C

• Question 654:

  A security administrator is developing training for corporate users on basic security principles for personal email accounts. Which of the following should be mentioned as the MOST secure way for password recovery?

  A. Utilizing a single Qfor password recovery

  B. Sending a PIN to a smartphone through text message

  C. Utilizing CAPTCHA to avoid brute force attacks

  D. Use a different e-mail address to recover password

  Correct Answer: B

• Question 655:

  A company wants to host a publicly available server that performs the following functions:

  Evaluates MX record lookup

  Can perform authenticated requests for A and AAA records Uses RRSIG

  Which of the following should the company use to fulfill the above requirements?

  A. DNSSEC

  B. SFTP

  C. nslookup

  D. dig

  E. LDAPS

  Correct Answer: A

  DNS Security Extensions (DNSSEC) provides, among other things, cryptographic authenticity of responses using Resource Record Signatures (RRSIG) and authenticated denial of existence using Next-Secure (NSEC) and Hashed-NSEC records (NSEC3).

• Question 656:

  A system administrator needs to implement 802.1x whereby when a user logs into the network, the authentication server communicates to the network switch and assigns the user to the proper VLAN. Which of the following protocols should be used?

  A. RADIUS

  B. Kerberos

  C. LDAP

  D. MSCHAP

  Correct Answer: A

• Question 657:

  A security administrator receives notice that a third-party certificate authority has been compromised, and new certificates will need to be issued. Which of the following should the administrator submit to receive a new certificate?

  A. CRL

  B. OSCP

  C. PFX

  D. CSR

  E. CA

  Correct Answer: D

• Question 658:

  Which of the following technologies would be MOST appropriate to utilize when testing a new software patch before a company-wide deployment?

  A. Cloud computing

  B. Virtualization

  C. Redundancy

  D. Application control

  Correct Answer: B

  Virtualization is used to host one or more operating systems in the memory of a single host computer and allows multiple operating systems to run simultaneously on the same hardware, reducing costs. Virtualization offers the flexibility of quickly and easily making backups of entire virtual systems, and quickly recovering the virtual system when errors occur. Furthermore, malicious code compromises of virtual systems rarely affect the host system, which allows for safer testing and experimentation.

• Question 659:

  Which of the following would verify that a threat does exist and security controls can easily be bypassed without actively testing an application?

  A. Protocol analyzer

  B. Vulnerability scan

  C. Penetration test

  D. Port scanner

  Correct Answer: B

  A vulnerability scan is the automated process of proactively identifying security vulnerabilities of computing systems in a network in order to determine if and where a system can be exploited and/or threatened. While public servers are important for communication and data transfer over the Internet, they open the door to potential security breaches by threat agents, such as malicious hackers. Vulnerability scanning employs software that seeks out security flaws based on a database of known flaws, testing systems for the occurrence of these flaws and generating a report of the findings that an individual or an enterprise can use to tighten the network's security. Vulnerability scanning typically refers to the scanning of systems that are connected to the Internet but can also refer to system audits on internal networks that are not connected to the Internet in order to assess the threat of rogue software or malicious employees in an enterprise.

• Question 660:

  An administrator discovers the following log entry on a server:

  Nov 12 2013 00:23:45 httpd[2342]:

  GET/app2/prod/proc/process.php?input=change;cd%20../../../etc;cat%20shadow

  Which of the following attacks is being attempted?

  A. Command injection

  B. Password attack

  C. Buffer overflow

  D. Cross-site scripting

  Correct Answer: B