CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 71:

  A security analyst is inspecting the results of a recent internal vulnerability scan that was performed against intranet services. The scan reports include the following critical-rated vulnerability:

  Title: Remote Command Execution vulnerability in web server Rating: Critical (CVSS 10.0) Threat actor: any remote user of the web server Confidence: certain Recommendation: apply vendor patches

  Which of the following actions should the security analyst perform FIRST?

  A. Escalate the issue to senior management.
  B. Apply organizational context to the risk rating.
  C. Organize for urgent out-of-cycle patching.
  D. Exploit the server to check whether it is a false positive.
  B. Apply organizational context to the risk rating.

• Question 72:

  A company was recently audited by a third party. The audit revealed the company's network devices were transferring files in the clear. Which of the following protocols should the company use to transfer files?

  A. HTTPS
  B. LDAPS
  C. SCP
  D. SNMPv3
  C. SCP

• Question 73:

  When generating a request for a new x.509 certificate for securing a website, which of the following is the MOST appropriate hashing algorithm?

  A. RC4
  B. MD5
  C. HMAC
  D. SHA
  B. MD5

• Question 74:

  A new PKI is being built at a company, but the network administrator has concerns about spikes of traffic occurring twice a day due to clients checking the status of the certificates. Which of the following should be implemented to reduce the spikes in traffic?

  A. CRL
  B. OCSP
  C. SAN
  D. OID
  B. OCSP

• Question 75:

  During a penetration test, Joe, an analyst, contacts the target's service desk Impersonating a user, he attempts to obtain assistance with resetting an email password. Joe claims this needs to be done as soon as possible, as he is the vice president of sales and does not want to contact the Chief Operations Officer (COO) for approval, since the COO is on vacation. When challenged. Joe reaffirms that he needs this done immediately, and threatens to contact the service desk supervisor over the issue. Which of the following social engineering principles is Joe employing in this scenario'? (Select TWO).

  A. Intimidation
  B. Consensus
  C. Familiarity
  D. Scarcity
  E. Authority
  C. Familiarity
  E. Authority

• Question 76:

  A security administrator wants to determine if a company's web servers have the latest operating system and application patches installed. Which of the following types of vulnerability scans should be conducted?

  A. Non-credentialed
  B. Passive
  C. Port
  D. Credentialed
  E. Red team
  F. Active
  D. Credentialed

• Question 77:

  A Chief Information Security Officer (CISO) asks the security architect to design a method for contractors to access the company's internal network securely without allowing access to systems beyond the scope of their project. Which of the following methods would BEST fit the needs of the CISO?

  A. VPN
  B. PaaS
  C. IaaS
  D. VDI
  A. VPN

• Question 78:

  Which of the following types of cloud infrastructures would allow several organizations with similar structures and interests to realize the benefits of shared storage and resources?

  A. Private
  B. Hybrid
  C. Public
  D. Community
  D. Community

• Question 79:

  Several workstations on a network are found to be on OS versions that are vulnerable to a specific attack. Which of the following is considered to be a corrective action to combat this vulnerability?

  A. Install an antivirus definition patch
  B. Educate the workstation users
  C. Leverage server isolation
  D. Install a vendor-supplied patch
  E. Install an intrusion detection system
  D. Install a vendor-supplied patch

• Question 80:

  Which of the following would allow for the QUICKEST restoration of a server into a warm recovery site in a case in which server data mirroring is not enabled?

  A. Full backup
  B. Incremental backup
  C. Differential backup
  D. Snapshot
  C. Differential backup