CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 881:

  Which of the following attack types is being carried out where a target is being sent unsolicited messages via Bluetooth?

  A. War chalking
  B. Bluejacking
  C. Bluesnarfing
  D. Rogue tethering
  B. Bluejacking

• Question 882:

  Which of the following works by implanting software on systems but delays execution until a specific set of conditions is met?

  A. Logic bomb
  B. Trojan
  C. Scareware
  D. Ransomware
  A. Logic bomb

• Question 883:

  A systems administrator needs to configure an SSL remote access VPN according to the following organizational guidelines:

  *

  The VPN must support encryption of header and payload.

  *

  The VPN must route all traffic through the company's gateway. Which of the following should be configured on the VPN concentrator?

  A. Full tunnel
  B. Transport mode
  C. Tunnel mode
  D. IPSec
  A. Full tunnel

• Question 884:

  A security specialist is notified about a certificate warning that users receive when using a new internal website. After being given the URL from one of the users and seeing the warning, the security specialist inspects the certificate and realizes it has been issued to the IP address, which is how the developers reach the site.

  Which of the following would BEST resolve the issue?

  A. OSCP
  B. OID
  C. PEM
  D. SAN
  A. OSCP

• Question 885:

  A security analyst is looking for a solution to help communicate to the leadership team the severity levels of the organization's vulnerabilities. Which of the following would BEST meet this need?

  A. CVE
  B. SIEM
  C. SOAR
  D. CVSS
  C. SOAR

• Question 886:

  A security analyst is assessing a small company's internal servers against recommended security practices. Which of the following should the analyst do to conduct the assessment? (Choose two.)

  A. Compare configurations against platform benchmarks
  B. Confirm adherence to the company's industry-specific regulations
  C. Review the company's current security baseline
  D. Verify alignment with policy related to regulatory compliance
  E. Run an exploitation framework to confirm vulnerabilities
  C. Review the company's current security baseline
  E. Run an exploitation framework to confirm vulnerabilities

• Question 887:

  A technician is configuring a wireless guest network. After applying the most recent changes the technician finds the new devices can no longer find the wireless network by name but existing devices are still able to use the wireless network. Which of the following security measures did the technician MOST likely implement to cause this Scenario?

  A. Deactivation of SSID broadcast
  B. Reduction of WAP signal output power
  C. Activation of 802.1X with RADIUS
  D. Implementation of MAC filtering
  E. Beacon interval was decreased
  A. Deactivation of SSID broadcast

• Question 888:

  Which of the following would meet the requirements for multifactor authentication?

  A. Username, PIN, and employee ID number
  B. Fingerprint and password
  C. Smart card and hardware token
  D. Voice recognition and retina scan
  B. Fingerprint and password

• Question 889:

  A company occupies the third floor of a leased building that has other tenants. The path from the demarcation point to the company's controlled space runs through unsecured areas managed by other companies. Which of the following could be used to protect the company's cabling as it passes through uncontrolled spaces?

  A. Plenum-rated cables
  B. Cable locks
  C. Conduits
  D. Bayonet Neill-Concelman
  C. Conduits

• Question 890:

  A security engineer needs to obtain a recurring log of changes to system les. The engineer is most concerned with detecting unauthorized changes to system data. Which of the following tools can be used to fulll the requirements that were established by the engineer?

  A. TPM
  B. Trusted operating system
  C. File integrity monitor
  D. UEFI
  E. FDE
  C. File integrity monitor