CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 931:

  The administrator installs database software to encrypt each field as it is written to disk. Which of the following describes the encrypted data?

  A. In-transit
  B. In-use
  C. Embedded
  D. At-rest
  B. In-use

• Question 932:

  A security engineer needs to build a solution to satisfy regulatory requirements that state certain critical server must be accessed using MFA. However, the critical servers are older and are unable to support the addition of MFA. Which of the following will the engineer MOST likely use to achieve this objective?

  A. A forward proxy
  B. A stateful firewall
  C. A jump server
  D. A port tap
  B. A stateful firewall

• Question 933:

  A technician has been asked to document which services are running on each of a collection of 200 servers. Which of the following tools BEST meets this need while minimizing the work required?

  A. Nmap
  B. Nslookup
  C. Netcat
  D. Netstat
  A. Nmap

• Question 934:

  An organization employee resigns without giving adequate notice. The following day, it is determined that the employees is still in possession of several company-owned mobile devices. Which of the following could have reduced the risk of this occurring? (Choose two.)

  A. Proper offboarding procedures
  B. Acceptable use policies
  C. Non-disclosure agreements
  D. Exit interviews
  E. Background checks
  F. Separation of duties
  A. Proper offboarding procedures
  D. Exit interviews

• Question 935:

  A malicious attacker has intercepted HTTP traffic and inserted an ASCII line that sets the referrer URL. Which of the following is the attacker most likely utilizing?

  A. Header manipulation
  B. Cookie hijacking
  C. Cross-site scripting
  D. Xml injection
  A. Header manipulation

• Question 936:

  After surfing the Internet, Joe, a user, woke up to find all his files were corrupted. His wallpaper was replaced by a message stating the files were encrypted and he needed to transfer money to a foreign country to recover them. Joe is a victim of:

  A. a keylogger
  B. spyware
  C. ransomware
  D. a logic bomb
  C. ransomware

• Question 937:

  An organization is concerned that Its hosted web servers are not running the most updated version of the software. Which of the following would work BEST to help identify potential vulnerabilities?

  A. hping3 -s compwia.org -p 80
  B. nc -1 -v compria.org -p 60
  C. nmap comptia.org -p 80 -sv
  D. nslookup -port-80 compcia.org
  B. nc -1 -v compria.org -p 60

• Question 938:

  A Security Officer on a military base needs to encrypt several smart phones that will be going into the field. Which of the following encryption solutions should be deployed in this situation?

  A. Elliptic curve
  B. One-time pad
  C. 3DES
  D. AES-256
  D. AES-256

• Question 939:

  A datacenter recently experienced a breach. When access was gained, an RF device was used to access an air-gapped and locked server rack. Which of the following would BEST prevent this type of attack?

  A. Faraday cage
  B. Smart cards
  C. Infrared detection
  D. Alarms
  A. Faraday cage

• Question 940:

  A penetration tester has been hired to scan a company's network for potentially active hosts. The company's IPS system blocks the ICMP echo reply and echo request packets. Which of the following can be used to scan the network?

  A. OSPF
  B. ARP
  C. IPSec
  D. Ping
  B. ARP