CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 721:

  Which of the following could an attacker use to overwrite instruction pointers in order to execute malicious code?

  A. Memory leak
  B. SQL injection
  C. Resource exhaustion
  D. Buffer overflow
  D. Buffer overflow

• Question 722:

  An organization wants to implement a solution that allows for automated logical controls for network defense. An engineer plans to select an appropriate network security component, which automates response actions based on security threats to the network. Which of the following would be MOST appropriate based on the engineer's requirements?

  A. NIPS
  B. HIDS
  C. Web proxy
  D. Elastic load balancer
  E. NAC
  A. NIPS

• Question 723:

  Every morning, a systems administrator monitors failed login attempts on the company's log management server. The administrator notices the DBAdmin account has five failed username and/or password alerts during a ten-minute window. The systems administrator determines the user account is a dummy account used to attract attackers. Which of the following techniques should the systems administrator implement?

  A. Role-based access control
  B. Honeypot
  C. Rule-based access control
  D. Password cracker
  B. Honeypot

• Question 724:

  An organization's IRP prioritizes containment over eradication. An incident has been discovered where an attacker outside of the organization has installed cryptocurrency mining software on the organization's web servers. Given the organization's stated priorities, which of the following would be the NEXT step?

  A. Remove the affected servers from the network.
  B. Review firewall and IDS logs to identify possible source IPs.
  C. Identify and apply any missing operating system and software patches.
  D. Delete the malicious software and determine if the servers must be reimaged.
  A. Remove the affected servers from the network.

• Question 725:

  An information security analyst needs to work with an employee who can answer Questions about how data for a specific system is used in the business. The analyst should seek out an employee who has the role of:

  A. steward
  B. owner
  C. privacy officer
  D. systems administrator
  B. owner

• Question 726:

  After attempting to harden a web server, a security analyst needs to determine if an application remains vulnerable to SQL injection attacks. Which of the following would BEST assist the analyst in making this determination?

  A. tracert
  B. Fuzzer
  C. nslookup
  D. Nmap
  E. netcat
  B. Fuzzer

• Question 727:

  A company has a team of penetration testers. This team has located a file on the company file server that they believe contains cleartext usernames followed by a hash. Which of the following tools should the penetration testers use to learn more about the content of this file?

  A. Exploitation framework
  B. Vulnerability scanner
  C. Netcat
  D. Password cracker
  D. Password cracker

• Question 728:

  An organization wants to utilize a common, Internet-based third-party provider for authorization and authentication. The provider uses a technology based on OAuth 2.0 to provide required services. To which of the following technologies is the provider referring?

  A. Open ID Connect
  B. SAML
  C. XACML
  D. LDAP
  A. Open ID Connect

• Question 729:

  An organization is struggling to differentiate threats from normal traffic and access to systems A security engineer has been asked to recommend a system that will aggregate data and provide metrics that will assist in Identifying malicious actors or other anomalous activity throughout the environment. Which of the following solutions should the engineer recommend?

  A. Web application firewall
  B. SIEM
  C. IPS
  D. UTM
  E. File integrity monitor
  B. SIEM

• Question 730:

  Which of the following is the BEST example of a reputation impact identified during a risk assessment?

  A. A bad software patch taking down the production systems.
  B. A misconfigured firewall exposing intellectual properly to the internet.
  C. An attacker defacing the e-commerce portal.
  D. Malware collecting credentials for company bank accounts.
  B. A misconfigured firewall exposing intellectual properly to the internet.