CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 911:

  Which of the following cryptographic algorithms is irreversible?

  A. RC4
  B. SHA-256
  C. DES
  D. AES
  B. SHA-256

• Question 912:

  Which of the following is a technical preventive control?

  A. Two-factor authentication
  B. DVR-supported cameras
  C. Acceptable-use MOTD
  D. Syslog server
  A. Two-factor authentication

• Question 913:

  A Chief Information Officer (CIO) wants to eliminate the number of calls help desk is receiving for password resets when users log on to internal portals. Which of the following is the BEST solution?

  A. Increase password length
  B. Implement a self-service portal
  C. Decrease lockout threshold
  D. Deploy mandatory access control
  D. Deploy mandatory access control

• Question 914:

  An analyst is part of a team that is investigating a potential breach of sensitive data at a large financial services organization. The organization suspects a breach occurred when proprietary data was disclosed to the public. The team finds servers were accessed using shared credentials that have been in place for some time. In addition, the team discovers undocumented firewall rules, which provided unauthorized external access to a server. Suspecting the activities of a malicious insider threat, which of the following was MOST likely to have been utilized to exfiltrate the proprietary data?

  A. Keylogger
  B. Botnet
  C. Crypto-malware
  D. Backdoor
  E. Ransomware
  F. DLP
  D. Backdoor

• Question 915:

  A security administration a hardening a VPN connection. Recently, company pre-shared keys were hijacked during an MITM attack and reused to breach the VPN connection. Which of the following should the security administrator do to BEST address this issue?

  A. Implement PIG
  B. Implement IPSec
  C. Implement TLS
  D. Implement PFS
  A. Implement PIG

• Question 916:

  Joe, a technician, is working remotely with his company provided laptop at the coffee shop near his home. Joe is concerned that another patron of the coffee shop may be trying to access his laptop. Which of the following is an appropriate control to use to prevent the other patron from accessing Joe's laptop directly?

  A. full-disk encryption
  B. Host-based firewall
  C. Current antivirus definitions
  D. Latest OS updates
  B. Host-based firewall

• Question 917:

  A company is experiencing an increasing number of systems that are locking up on Windows startup. The security analyst clones a machine, enters into safe mode, and discovers a file in the startup process that runs Wstart.bat. @echo off :asdhbawdhbasdhbawdhb start notepad.exe start notepad.exe start calculator.exe start calculator.exe goto asdhbawdhbasdhbawdhb Given the file contents and the system's issues, which of the following types of malware is present?

  A. Rootkit
  B. Logic bomb
  C. Worm
  D. Virus
  B. Logic bomb

• Question 918:

  A security administrator in a bank is required to enforce an access control policy so no single individual is allowed to both initiate and approve financial transactions. Which of the following BEST represents the impact the administrator is deterring?

  A. Principle of least privilege
  B. External intruder
  C. Conflict of interest
  D. Fraud
  A. Principle of least privilege

• Question 919:

  Which of the following is a benefit of credentialed vulnerability scans?

  A. Credentials provide access to scan documents to identify possible data theft.
  B. The vulnerability scanner is able to inventory software on the target.
  C. A scan will reveal data loss in real time.
  D. Black-box testing can be performed.
  B. The vulnerability scanner is able to inventory software on the target.

• Question 920:

  If two employees are encrypting traffic between them using a single encryption key, which of the following algorithms are they using?

  A. RSA
  B. 3DES
  C. DSA
  D. SHA-2
  D. SHA-2