CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 831:

  Which of the following should be implemented to stop an attacker from interacting with the hypervisor through another guest?

  A. Containers
  B. VM escape protection
  C. Security broker
  D. Virtual Desktop
  A. Containers

• Question 832:

  A researcher has been analyzing large data sets for the last ten months. The researcher works with colleagues from other institutions and typically connects via SSH to retrieve additional data. Historically, this setup has worked without issue, but the researcher recently started getting the following message:

  

  Which of the following network attacks Is the researcher MOST likely experiencing?

  A. MAC cloning
  B. Evil twin
  C. Man-in-the-middle
  D. ARP poisoning
  C. Man-in-the-middle

• Question 833:

  Which of the following cloud models is used to share resources and information with business partners and like businesses without allowing everyone else access?

  A. Public
  B. Hybrid
  C. Community
  D. Private
  C. Community

• Question 834:

  As a security measure, an organization has disabled all external media from accessing the network. Since some users may have data that needs to be transferred to the network, which of the following would BEST assist a security administrator with transferring the data while keeping the internal network secure?

  A. Upload the media in the DMZ
  B. Upload the data in a separate VLAN
  C. Contact the data custodian
  D. Use a standalone scanning system
  D. Use a standalone scanning system

• Question 835:

  An organization just experienced a major cyberattack incident. The attack was well coordinated, sophisticated, and highly skilled. Which of the following targeted the organization?

  A. Shadow IT
  B. An insider threat
  C. A hacktivist
  D. An advanced persistent threat
  D. An advanced persistent threat

• Question 836:

  Despite having implemented password policies, users continue to set the same weak passwords and reuse old passwords. Which of the following technical controls would help prevent these policy violations? (Select two.)

  A. Password expiration
  B. Password length
  C. Password complexity
  D. Password history
  E. Password lockout
  C. Password complexity
  D. Password history

• Question 837:

  A security analyst notices anomalous activity coming from several workstations in the organizations. Upon identifying and containing the issue, which of the following should the security analyst do NEXT?

  A. Document and lock the workstations in a secure area to establish chain of custody
  B. Notify the IT department that the workstations are to be reimaged and the data restored for reuse
  C. Notify the IT department that the workstations may be reconnected to the network for the users to continue working
  D. Document findings and processes in the after-action and lessons learned report
  D. Document findings and processes in the after-action and lessons learned report

• Question 838:

  Two companies are enabling TLS on their respective email gateways to secure communications over the Internet. Which of the following cryptography concepts is being implemented?

  A. Perfect forward secrecy
  B. Ephemeral keys
  C. Domain validation
  D. Data in transit
  D. Data in transit

• Question 839:

  A company has a security policy that specifies all endpoint computing devices should be assigned a unique identifier that can be tracked via an inventory management system. Recent changes to airline security regulations have cause many

  executives in the company to travel with mini tablet devices instead of laptops.

  These tablet devices are difficult to tag and track. An RDP application is used from the tablet to connect into the company network.

  Which of the following should be implemented in order to meet the security policy requirements?

  A. Virtual desktop infrastructure (IDI)
  B. WS-security and geo-fencing
  C. A hardware security module (HSM)
  D. RFID tagging system
  E. MDM software
  F. Security Requirements Traceability Matrix (SRTM)
  E. MDM software

• Question 840:

  A technician has installed new vulnerability scanner software on a server that is joined to the company domain. The vulnerability scanner is able to provide visibility over the patch posture of all company's clients. Which of the following is being used?

  A. Gray box vulnerability testing
  B. Passive scan
  C. Credentialed scan
  D. Bypassing security controls
  A. Gray box vulnerability testing