CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 761:

  A security architect has convened a meeting to discuss an organization's key management policy. The organization has a reliable internal key management system, and some argue that it would be best to manage the cryptographic keys internally as opposed to using a solution from a third party. The company should use:

  A. the current internal key management system.
  B. a third-party key management system that will reduce operating costs.
  C. risk benefits analysis results to make a determination.
  D. a software solution including secure key escrow capabilities.
  C. risk benefits analysis results to make a determination.

• Question 762:

  Which of the following should a security analyst perform FIRST to determine the vulnerabilities of a legacy system?

  A. Passive scan
  B. Aggressive scan
  C. Credentialed scan
  D. Intrusive scan
  A. Passive scan

• Question 763:

  A threat actor motivated by political goals that is active for a short period of time but has virtually unlimited resources is BEST categorized as a:

  A. hacktivist.
  B. nation-state
  C. script kiddie
  D. APT
  B. nation-state

• Question 764:

  A company has a team of penetration testers. This team has located a file on the company file server that they believe contains cleartext usernames followed by a hash. Which of the following tools should the penetration testers use to learn more about the content of this file?

  A. Exploitation framework
  B. Vulnerability scanner
  C. Netcat
  D. Password cracker
  D. Password cracker

• Question 765:

  Although a web enabled application appears to only allow letters in the comment field of a web form, malicious user was able to carry a SQL injection attack by sending special characters through the web comment field. Which of the following has the application programmer failed to implement?

  A. Revision control system
  B. Client side exception handling
  C. Server side validation
  D. Server hardening
  C. Server side validation

• Question 766:

  A security professional wants to test a piece of malware that was isolated on a user's computer to document its effect on a system. Which of the following is the FIRST step the security professional should take?

  A. Create a sandbox on the machine.
  B. Open the file and run it.
  C. Create a secure baseline of the system state.
  D. Harden the machine.
  C. Create a secure baseline of the system state.

• Question 767:

  A security analyst is securing smartphones and laptops for a highly mobile workforce. Priorities include: Remote wipe capabilities Geolocation services Patch management and reporting Mandatory screen locks Ability to require passcodes and pins Ability to require encryption

  Which of the following would BEST meet these requirements?

  A. Implementing MDM software
  B. Deploying relevant group policies to the devices
  C. Installing full device encryption
  D. Removing administrative rights to the devices
  A. Implementing MDM software

• Question 768:

  A systems developer needs to provide machine-to-machine interface between an application and a database server in the production environment. This interface will exchange data once per day. Which of the following access control account practices would BEST be used in this situation?

  A. Establish a privileged interface group and apply read-write permission to the members of that group.
  B. Submit a request for account privilege escalation when the data needs to be transferred.
  C. Install the application and database on the same server and add the interface to the local administrator group.
  D. Use a service account and prohibit users from accessing this account for development work.
  D. Use a service account and prohibit users from accessing this account for development work.

• Question 769:

  After being alerted to potential anomalous activity related to trivial DNS lookups, a security analyst looks at the following output of implemented firewall rules:

  

  The analyst notices that the expected policy has no hit count for the day. Which of the following MOST likely occurred?

  A. Data execution prevention is enabled
  B. The VLAN is not trunked properly
  C. There is a policy violation for DNS lookups
  D. The firewall policy is misconfigured
  D. The firewall policy is misconfigured

• Question 770:

  An attack that is using interference as its main attack to impede network traffic is which of the following?

  A. Introducing too much data to a targets memory allocation
  B. Utilizing a previously unknown security flaw against the target
  C. Using a similar wireless configuration of a nearby network
  D. Inundating a target system with SYN requests
  C. Using a similar wireless configuration of a nearby network