CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 921:

  Which of the following is an algorithm family that was developed for use cases in which power consumption and lower computing power are constraints?

  A. Elliptic curve
  B. RSA
  C. Diffie-Hellman
  D. SHA
  A. Elliptic curve

• Question 922:

  Which of the following BEST describes a network-based attack that can allow an attacker to take full control of a vulnerable host?

  A. Remote exploit
  B. Amplification
  C. Sniffing
  D. Man-in-the-middle
  A. Remote exploit

• Question 923:

  As part of a new BYOD rollout, a security analyst has been asked to find a way to securely store company data on personal devices. Which of the following would BEST help to accomplish this?

  A. Require the use of an eight-character PIN.
  B. Implement containerization of company data.
  C. Require annual AUP sign-off.
  D. Use geofencing tools to unlock devices while on the premises.
  B. Implement containerization of company data.

• Question 924:

  Which of the following describes the ability of code to target a hypervisor from inside a guest OS?

  A. Fog computing
  B. VM escape
  C. Software-defined networking
  D. Image forgery
  E. Container breakout
  B. VM escape

• Question 925:

  Which of the following is a technical preventive control?

  A. Two-factor authentication
  B. DVR-supported cameras
  C. Acceptable-use MOTD
  D. Syslog server
  A. Two-factor authentication

• Question 926:

  A company is having Issues with intellectual property being sent to a competitor from its system. The information being sent Is not random but has an identifiable pattern. Which of the following should be implemented in the system to stop the content from being sent?

  A. Encryption
  B. Hashing
  C. IPS
  D. DLP
  D. DLP

• Question 927:

  Which of the following is a reason why an organization would define an AUP?

  A. To define the lowest level of privileges needed for access and use of the organization's resources
  B. To define the set of rules and behaviors for users of the organization's IT systems
  C. To define the intended partnership between two organizations
  D. To define the availability and reliability characteristics between an IT provider and consumer
  B. To define the set of rules and behaviors for users of the organization's IT systems

• Question 928:

  An organization recently moved its custom web applications to the cloud, and it is obtaining managed services of the back-end environment as part of its subscription. Which of the following types of services is this company now using?

  A. SaaS
  B. CASB
  C. IaaS
  D. PaaS
  B. CASB

• Question 929:

  A Chief Information Security Officer (CISO) has instructed the information assurance staff to act upon a fast-spreading virus. Which of the following steps in the incident response process should be taken NEXT?

  A. Identification
  B. Eradication
  C. Escalation
  D. Containment
  A. Identification

• Question 930:

  A security engineer is concerned about susceptibility to HTTP downgrade attacks because the current customer portal redirects users from port 80 to the secure site on port 443. Which of the following would be MOST appropriate to mitigate the attack?

  A. DNSSEC
  B. HSTS
  C. Certificate pinning
  D. OCSP
  B. HSTS