CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 911:

  A company hires a third-party firm to conduct an assessment of vulnerabilities exposed to the Internet. The firm informs the company that an exploit exists for an FTP server that had a version installed from eight years ago. The company has

  decided to keep the system online anyway, as no upgrade exists form the vendor.

  Which of the following BEST describes the reason why the vulnerability exists?

  A. Default configuration

  B. End-of-life system

  C. Weak cipher suite

  D. Zero-day threats

  Correct Answer: B

• Question 912:

  An organization uses SSO authentication for employee access to network resources. When an employee resigns, as per the organization's security policy, the employee's access to all network resources is terminated immediately. Two weeks later, the former employee sends an email to the help desk for a password reset to access payroll information from the human resources server. Which of the following represents the BEST course of action?

  A. Approve the former employee's request, as a password reset would give the former employee access to only the human resources server.

  B. Deny the former employee's request, since the password reset request came from an external email address.

  C. Deny the former employee's request, as a password reset would give the employee access to all network resources.

  D. Approve the former employee's request, as there would not be a security issue with the former employee gaining access to network resources.

  Correct Answer: C

• Question 913:

  A development team has adopted a new approach to projects in which feedback is iterative and multiple iterations of deployments are provided within an application's full life cycle. Which of the following software development methodologies is the development team using?

  A. Waterfall

  B. Agile

  C. Rapid

  D. Extreme

  Correct Answer: B

• Question 914:

  A Chief Executive Officer (CEO) suspects someone in the lab testing environment is stealing confidential information after working hours when no one else is around. Which of the following actions can help to prevent this specific threat?

  A. Implement time-of-day restrictions.

  B. Audit file access times.

  C. Secretly install a hidden surveillance camera.

  D. Require swipe-card access to enter the lab.

  Correct Answer: D

• Question 915:

  Which of the following vulnerability types would the type of hacker known as a script kiddie be MOST dangerous against?

  A. Passwords written on the bottom of a keyboard

  B. Unpatched exploitable Internet-facing services

  C. Unencrypted backup tapes

  D. Misplaced hardware token

  Correct Answer: B

• Question 916:

  An in-house penetration tester is using a packet capture device to listen in on network communications. This is an example of:

  A. Passive reconnaissance

  B. Persistence

  C. Escalation of privileges

  D. Exploiting the switch

  Correct Answer: D

• Question 917:

  A black hat hacker is enumerating a network and wants to remain covert during the process. The hacker initiates a vulnerability scan. Given the task at hand the requirement of being covert, which of the following statements BEST indicates that the vulnerability scan meets these requirements?

  A. The vulnerability scanner is performing an authenticated scan.

  B. The vulnerability scanner is performing local file integrity checks.

  C. The vulnerability scanner is performing in network sniffer mode.

  D. The vulnerability scanner is performing banner grabbing.

  Correct Answer: C

• Question 918:

  A security engineer is configuring a wireless network that must support mutual authentication of the wireless client and the authentication server before users provide credentials. The wireless network must also support authentication with usernames and passwords.

  Which of the following authentication protocols MUST the security engineer select?

  A. EAP-FAST

  B. EAP-TLS

  C. PEAP

  D. EAP

  Correct Answer: C

• Question 919:

  A system's administrator has finished configuring firewall ACL to allow access to a new web server.

  

  The security administrator confirms form the following packet capture that there is network traffic from the internet to the web server:

  

  The company's internal auditor issues a security finding and requests that immediate action be taken. With which of the following is the auditor MOST concerned?

  A. Misconfigured firewall

  B. Clear text credentials

  C. Implicit deny

  D. Default configuration

  Correct Answer: B

• Question 920:

  A systems administrator wants to protect data stored on mobile devices that are used to scan and record assets in a warehouse. The control must automatically destroy the secure container of mobile devices if they leave the warehouse. Which of the following should the administrator implement? (Select two.)

  A. Geofencing

  B. Remote wipe

  C. Near-field communication

  D. Push notification services

  E. Containerization

  Correct Answer: AE