CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 821:

  A user loses a COPE device. Which of the following should the user do NEXT to protect the data on the device?

  A. Call the company help desk to remotely wipe the device.

  B. Report the loss to authorities

  C. Check with corporate physical security for the device.

  D. Identify files that are potentially missing on the device.

  Correct Answer: A

• Question 822:

  A technician is designing a solution that will be required to process sensitive information, including classified government data. The system needs to be common criteria certified. Which of the following should the technician select?

  A. Security baseline

  B. Hybrid cloud solution

  C. Open-source software applications

  D. Trusted operating system

  Correct Answer: D

• Question 823:

  A mobile application developer wants to secure an application that transmits sensitive information Which of the following should the developer implement to prevent SSL MITM attacks?

  A. Stapling

  B. Chaining

  C. Signing

  D. Pinning

  Correct Answer: D

• Question 824:

  Which of the following describes the BEST approach for deploying application patches?

  A. Apply the patches to systems in a testing environment, then to systems in a staging environment, and finally to production systems.

  B. Test the patches in a staging environment, develop against them in the development environment, and then apply them to the production systems

  C. Test the patches in a test environment, apply them to the production systems, and then apply them to a staging environment.

  D. Apply the patches to the production systems, apply them in a staging environment, and then test all of them in a testing environment.

  Correct Answer: D

• Question 825:

  A manufacturing company updates a policy that instructs employees not to enter a secure area in groups and requires each employee to swipe their badge to enter the area When employees continue to ignore the policy, a mantrap is installed. Which of the following BEST describe the controls that were implemented to address this issue? (Select TWO).

  A. Detective

  B. Administrative

  C. Deterrent

  D. Physical

  E. Corrective

  Correct Answer: CE

• Question 826:

  Which of the following BEST explains how the use of configuration templates reduces organization risk?

  A. It ensures consistency of configuration for initial system implementation.

  B. It enables system rollback to a last known-good state if patches break functionality.

  C. It facilitates fault tolerance since applications can be migrated across templates.

  D. It improves vulnerability scanning efficiency across multiple systems.

  Correct Answer: C

• Question 827:

  A security administrator has received multiple calls from the help desk about customers who are unable to access the organization's web server. Upon reviewing the log files the security administrator determines multiple open requests have been made from multiple IP addresses, which is consuming system resources. Which of the following attack types does this BEST describe?

  A. DDoS

  B. DoS

  C. Zero day

  D. Logic bomb

  Correct Answer: A

• Question 828:

  After segmenting the network, the network manager wants to control the traffic between the segments. Which of the following should the manager use to control the network traffic?

  A. A DMZ

  B. A VPN

  C. A VLAN

  D. An ACL

  Correct Answer: C

• Question 829:

  To further secure a company's email system, an administrator is adding public keys to DNS records in the company's domain. Which of the following is being used?

  A. PFS

  B. SPF

  C. DMARC

  D. DNSSEC

  Correct Answer: D

• Question 830:

  A computer forensics analyst collected a flash drive that contained a single file with 500 pages of text. Which of the following algorithms should the analyst use to validate the integrity of the file?

  A. 3DES

  B. AES

  C. MD5

  D. RSA

  Correct Answer: C