CompTIA CompTIA Certifications SY0-501 Questions & Answers

• Question 971:

  A tester was able to leverage a pass-the-hash attack during a recent penetration test. The tester gained a foothold and moved laterally through the network. Which of the following would prevent this type of attack from reoccurring?

  A. Renaming all active service accounts and disabling all inactive service accounts

  B. Creating separate accounts for privileged access that are not used to log on to local machines

  C. Enabling full-disk encryption on all workstations that are used by administrators and disabling RDP

  D. Increasing the password complexity requirements and setting account expiration dates

  Correct Answer: A

• Question 972:

  A critical enterprise component whose loss or destruction would significantly impede business operations or have an outsized impact on corporate revenue is known as:

  A. a single point of failure

  B. critical system infrastructure

  C. proprietary information.

  D. a mission-essential function

  Correct Answer: D

• Question 973:

  A technician is auditing network security by connecting a laptop to open hardwired jacks within the facility to verify they cannot connect. Which of the following is being tested?

  A. Layer 3 routing

  B. Port security

  C. Secure IMAP

  D. S/MIME

  Correct Answer: B

• Question 974:

  A technician is installing a new SIEM and is configuring the system to count the number of times an event occurs at a specific logical location before the system takes action. Which of the following BEST describes the feature being configured by the technician?

  A. Correlation

  B. Aggregation

  C. Event deduplication

  D. Flood guard

  Correct Answer: A

• Question 975:

  A network administrator needs to restrict the users of the company's WAPs to the sales department. The network administrator changes and hides the SSID and then discovers several employees had connected their personal devices to the wireless network. Which of the following would limit access to the wireless network to only organization-owned devices in the sales department?

  A. Implementing MAC filtering

  B. Reducing the signal strength to encompass only the sales department

  C. Replacing the APs and sales department wireless cards to support 802.11b

  D. Issuing a BYOD policy

  Correct Answer: C

• Question 976:

  An organization uses an antivirus scanner from Company A on its firewall, an email system antivirus scanner from Company B. and an endpoint antivirus scanner from Company C. This is an example of:

  A. unified threat management.

  B. an OVAL system.

  C. vendor diversity.

  D. alternate processing sites.

  Correct Answer: C

• Question 977:

  The Chief information Officer (CIO) has decided to add two-factor authentication along with the use of passwords when logging on to the network. Which of the following should be implemented to BEST accomplish this requirement?

  A. Require users to enter a PIN

  B. Require users to set complex passwords

  C. Require users to insert a smart card when logging on

  D. Require the system to use a CAPTCHA

  Correct Answer: C

• Question 978:

  An employee on the Internet facing part of a company's website submits a 20-character phrase in a small textbox on a web form. The website returns a message back to the browser stating.

  

  Of which of the following is this an example?

  A. Resources exhaustion

  B. Buffer overflow

  C. Improperly configured account

  D. Improper error handling

  Correct Answer: D

• Question 979:

  Which of the following security controls BEST mitigates social engineering attacks?

  A. Separation of duties

  B. Least privilege

  C. User awareness training

  D. Mandatory vacation

  Correct Answer: C

• Question 980:

  A technician wants to implement PKI-based authentication on an enterprise wireless network. Which of the following should configure to enforce the use for client-site certificates?

  A. 802.1X with PEAP

  B. WPA2-PSK

  C. EAP-TLS

  D. RADIUS Federation

  Correct Answer: B