CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 671:

  A security administrator wants to better prepare the incident response team for possible security events. The IRP has been updated and distributed to incident response team members. Which of the following is the BEST option to fulfill the administrator's objective?

  A. Identify the member's roles and responsibilities
  B. Select a backup/failover location
  C. Determine the order of restoration
  D. Conduct a tabletop test
  D. Conduct a tabletop test

• Question 672:

  An accountant is attempting to log in to the internal accounting system and receives a message that the website's certificate is fraudulent. The accountant finds instructions for manually installing the new trusted root onto the local machine. Which of the following would be the company's BEST option for this situation in the future?

  A. Utilize a central CRL.
  B. Implement certificate management.
  C. Ensure access to KMS.
  D. Use a stronger cipher suite.
  B. Implement certificate management.

• Question 673:

  Ann, a security analyst, wants to implement a secure exchange of email. Which of the following is the BEST option for Ann to implement?

  A. PGP
  B. HTTPS
  C. WPA
  D. TLS
  A. PGP

• Question 674:

  After discovering a security incident and removing the affected files, an administrator disabled an unneeded service that led to the breach. Which of the following steps in the incident response process has the administrator just completed?

  A. Containment
  B. Eradication
  C. Recovery
  D. Identification
  B. Eradication

• Question 675:

  A security administrator is diagnosing a server where the CPU utilization is at 100% for 24 hours. The main culprit of CPU utilization is the antivirus program. Which of the following issue could occur if left unresolved? (Select TWO)

  A. MITM attack
  B. DoS attack
  C. DLL injection
  D. Buffer overflow
  E. Resource exhaustion
  B. DoS attack
  E. Resource exhaustion

• Question 676:

  A company recently experienced a security breach. The security start determined that the intrusion was due to an out-of-date proprietary software program running on a non- compliant server The server was imaged and copied onto a hardened VM. with the previous connections re-established. Which of the Mowing Is the NEXT step in the incident response process?

  A. Recovery
  B. Eradication
  C. Lessons learned
  D. Containment
  E. Identification
  E. Identification

• Question 677:

  A network administrator wants to implement a method of securing internal routing. Which of the following should the administrator implement?

  A. DMZ
  B. NAT
  C. VPN
  D. PAT
  C. VPN

• Question 678:

  The security administrator receives an email on a non-company account from a coworker stating that some reports are not exporting correctly. Attached to the email was an example report file with several customers' names and credit card numbers with the PIN. Which of the following is the BEST technical controls that will help mitigate this risk of disclosing sensitive data?

  A. Configure the mail server to require TLS connections for every email to ensure all transport data is encrypted
  B. Create a user training program to identify the correct use of email and perform regular audits to ensure compliance
  C. Implement a DLP solution on the email gateway to scan email and remove sensitive data or files
  D. Classify all data according to its sensitivity and inform the users of data that is prohibited to share
  C. Implement a DLP solution on the email gateway to scan email and remove sensitive data or files

• Question 679:

  A system in the network is used to store proprietary secrets and needs the highest level of security possible. Which of the following should a security administrator implement to ensure the system cannot be reached from the Internet?

  A. VLAN
  B. Air gap
  C. NAT
  D. Firewall
  B. Air gap

• Question 680:

  A security analyst captures forensic evidence from a potentially compromised system for further investigation. The evidence is documented and securely stored to FIRST:

  A. maintain the chain of custody.
  B. preserve the data.
  C. obtain a legal hold.
  D. recover data at a later time.
  B. preserve the data.