CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 741:

  Which of the following is a risk that is specifically associated with hosting applications in the public cloud?

  A. Unsecured root accounts

  B. Zero-day

  C. Shared tenancy

  D. Insider threat

  Correct Answer: D

  Insider Threat An attack from inside your organization may seem unlikely, but the insider threat does exist. Employees can use their authorized access to an organization's cloud-based services to misuse or access information such as customer accounts, financial forms, and other sensitive information. Additionally, these insiders don't even need to have malicious intentions. A study by Imperva, "Inside Track on Insider Threats" found that an insider threat was the misuse of information through malicious intent, accidents or malware. The study also examined four best practices companies could follow to implement a secure strategy, such as business partnerships, prioritizing initiatives, controling access, and implementing technology.

• Question 742:

  A small enterprise decides to implement a warm site to be available for business continuity in case of a disaster. Which of the following BEST meets its requirements?

  A. A fully operational site that has all the equipment in place and full data backup tapes on site

  B. A site used for its data backup storage that houses a full-time network administrator

  C. An operational site requiring some equipment to be relocated as well as data transfer to the site

  D. A site staffed with personnel requiring both equipment and data to be relocated there in case of disaster

  Correct Answer: C

  Cold site Space and associated infrastructure (e.g., power, telecoms and environmental controls to support IT systems), which will only be installed when disaster recovery (DR) services are activated. Warm site Site that's partially equipped with some of the equipment (e.g., computing hardware and software, and supporting personnel); organizations install additional equipment, computing hardware and software, and supporting personnel when DR services are activated. Hot site Fully equipped site with the required equipment, computing hardware/software and supporting personnel; it's also fully functional and manned on a 24x7 basis so that it's ready for organizations to operate their IT systems when DR services are activated.

• Question 743:

  An organization has hired a new remote workforce. Many new employees are reporting that they are unable to access the shared network resources while traveling. They need to be able to travel to and from different locations on a weekly basis. Shared offices are retained at the headquarters location. The remote workforce will have identical file and system access requirements, and must also be able to log in to the headquarters location remotely. Which of the following BEST represent how the remote employees should have been set up initially? (Select TWO).

  A. User-based access control

  B. Shared accounts

  C. Group-based access control

  D. Mapped drives

  E. Individual accounts

  F. Location-based policies

  Correct Answer: CE

• Question 744:

  Which of the following BEST explains the difference between a credentialed scan and a non- credentialed scan?

  A. A credentialed scan sees devices in the network, including those behind NAT, while a non- credentialed scan sees outward-facing applications.

  B. A credentialed scan will not show up in system logs because the scan is running with the necessary authorization, while non-credentialed scan activity will appear in the logs.

  C. A credentialed scan generates significantly more false positives, while a non-credentialed scan generates fewer false positives

  D. A credentialed scan sees the system the way an authorized user sees the system, while a non- credentialed scan sees the system as a guest.

  Correct Answer: D

• Question 745:

  Users are attempting to access a company's website but are transparently redirected to another website. The users confirm the URL is correct. Which of the following would BEST prevent this issue in the future?

  A. DNSSEC

  B. HTTPS

  C. IPSec

  D. TLS/SSL

  Correct Answer: A

• Question 746:

  A member of the human resources department received the following email message after sending an email containing benefit and tax information to a candidate:

  "Your message has been quarantined for the following policy violation: external_potential_Pll. Please contact the IT security administrator for further details." Which of the following BEST describes why this message was received?

  A. The DLP system flagged the message

  B. The mail gateway prevented the message from being sent to personal email addresses.

  C. The company firewall blocked the recipient's IP address.

  D. The file integrity check failed for the attached files.

  Correct Answer: A

• Question 747:

  An organization wishes to allow its users to select devices for business use but does not want to overwhelm the service desk with requests for too many different device types and models. Which of the following deployment models should the organization use to BEST meet these requirements?

  A. VDI environment

  B. CYOD model

  C. DAC model

  D. BYOD model

  Correct Answer: B

• Question 748:

  Which of the following types of attack is being used when an attacker responds by sending the MAC address of the attacking machine to resolve the MAC to IP address of a valid server?

  A. Session hijacking

  B. IP spoofing

  C. Evil twin

  D. ARP poisoning

  Correct Answer: D

  An ARP spoofing, also known as ARP poisoning, is a Man in the Middle (MitM) attack that allows attackers to intercept communication between network devices. The attack works as follows: The attacker must have access to the network.

• Question 749:

  Joe, a contractor, is hired by a firm to perform a penetration test against the firm's infrastructure. While conducting the scan, he receives only the network diagram and the network list to scan against the network. Which of the following scan types is Joe performing?

  A. Authenticated

  B. White box

  C. Automated

  D. Gray box

  Correct Answer: D

• Question 750:

  The president of a company that specializes in military contracts receives a request for an interview. During the interview, the reporter seems more interested in discussing the president's family life and personal history than the details of a recent company success. Which of the following security concerns is this MOST likely an example of?

  A. Insider threat

  B. Social engineering

  C. Passive reconnaissance

  D. Phishing

  Correct Answer: B