CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 831:

  Which of the following BEST describes the concept of perfect forward secrecy?

  A. Using quantum random number generation to make decryption effectively impossible

  B. Preventing cryptographic reuse so a compromise of one operation does not affect other operations

  C. Implementing elliptic curve cryptographic algorithms with true random numbers

  D. The use of NDAs and policy controls to prevent disclosure of company secrets

  Correct Answer: B

• Question 832:

  Which of the following attacks is used to capture the WPA2 handshake?

  A. Replay

  B. IV

  C. Evil twin

  D. Disassociation

  Correct Answer: A

• Question 833:

  A network administrator is setting up wireless access points in all the conference rooms and wants to authenticate devices using PKI. Which of the following should the administrator configure?

  A. A captive portal

  B. PSK

  C. 802.1X

  D. WPS

  Correct Answer: D

• Question 834:

  A government agency with sensitive information wants to virtualize its infrastructure. Which of the following cloud deployment models BEST fits the agency's needs?

  A. Public

  B. Community

  C. Private

  D. Hybrid

  Correct Answer: B

• Question 835:

  The CSIRT is reviewing the lessons learned from a recent incident A worm was able to spread unhindered throughout the network and infect a large number of computers and servers. Which of the following recommendations would be BEST to mitigate the impacts of a similar incident in the future?

  A. Install a NIDS device at the boundary.

  B. Segment the network with firewalls

  C. Update all antivirus signatures daily

  D. Implement application blacklisting.

  Correct Answer: C

• Question 836:

  A public relations team will be taking a group of guests on a tour through the facility of a large e- commerce company. The day before the tour, the company sends out an email to employees to ensure all whiteboards are cleaned and all desks are cleared. The company is MOST likely trying to protect against.

  A. loss of proprietary information

  B. damage to the company's reputation

  C. social engineering

  D. credential exposure

  Correct Answer: C

• Question 837:

  A company needs to fix some audit findings related to its physical security. A key finding was that multiple people could physically enter a location at the same time. Which of the following is the BEST control to address this audit finding?

  A. Faraday cage

  B. Mantrap

  C. Biometrics

  D. Proximity cards

  Correct Answer: B

• Question 838:

  Which of the following types of security testing is the MOST cost-effective approach used to analyze existing code and identity areas that require patching?

  A. Black box

  B. Gray box

  C. White box

  D. Red team

  E. Blue team

  Correct Answer: C

• Question 839:

  An organization has hired a security analyst to perform a penetration test. The analyst captures 1GB worth of inbound network traffic to the server and transfers the pcap back to the machine for analysis. Which of the following tools should the analyst use to future review the pcap?

  A. Nmap

  B. cURL

  C. Netcat

  D. Wireshark

  Correct Answer: D

• Question 840:

  A technician is recommending preventive physical security controls for a server room. Which of the technician MOST likely recommend? (Select Two).

  A. Geofencing

  B. Video Surveillance

  C. Protected cabinets

  D. Mantrap

  E. Key exchange

  F. Authorized personnel signage

  Correct Answer: CD