CompTIA SY0-501 Online Practice Questions and Exam Preparation

CompTIA SY0-501 Online Questions & Answers

• Question 981:

  Which of the following can occur when a scanning tool cannot authenticate to a server and has to rely on limited information obtained from service banners?

  A. False positive
  B. Passive reconnaissance
  C. Access violation
  D. Privilege escalation
  A. False positive

• Question 982:

  An information security specialist is reviewing the following output from a Linux server.

  

  Based on the above information, which of the following types of malware was installed on the server?

  A. Logic bomb
  B. Trojan
  C. Backdoor
  D. Ransomware
  E. Rootkit
  A. Logic bomb

• Question 983:

  Which of the following is the BEST way for home users to mitigate vulnerabilities associated with IoT devices on their home networks?

  A. Power off the devices when they are not in use,
  B. Prevent IoT devices from contacting the Internet directly.
  C. Apply firmware and software updates upon availability.
  D. Deploy a bastion host on the home network.
  C. Apply firmware and software updates upon availability.

• Question 984:

  Which of the following BEST explains the reason why a server administrator would place a document named password.txt on the desktop of an administrator account on a server?

  A. The document is a honeyfile and is meant to attract the attention of a cyberintruder.
  B. The document is a backup file if the system needs to be recovered
  C. The document is a standard file that the OS needs to verify the login credentials.
  D. The document is a keylogger that stores all keystrokes should the account be compromised.
  A. The document is a honeyfile and is meant to attract the attention of a cyberintruder.

• Question 985:

  Which of the following is MOST likely the security impact of continuing to operate end-of-life systems?

  A. Higher total cost of ownership due to support costs
  B. Denial of service due to patch availability
  C. Lack of vendor support for decommissioning
  D. Support for legacy protocols
  B. Denial of service due to patch availability

• Question 986:

  Joe, an employee, wants to show his colleagues how much he knows about smartphones. Joe demonstrates a free movie application that he installed from a third party on his corporate smartphone. Joe's colleagues were unable to find the application in the app stores.

  Which of the following allowed Joe to install the application? (Select two.)

  A. Near-field communication.
  B. Rooting/jailbreaking
  C. Ad-hoc connections
  D. Tethering
  E. Sideloading
  B. Rooting/jailbreaking
  E. Sideloading

• Question 987:

  An application team is performing a load-balancing test for a critical application during off-hours and has requested access to the load balancer to review which servers are up without having the administrator on call. The security analyst is hesitant to give the application team full access due to other critical applications running on the load balancer.

  Which of the following is the BEST solution for security analyst to process the request?

  A. Give the application team administrator access during off-hours.
  B. Disable other critical applications before granting the team access.
  C. Give the application team read-only access.
  D. Share the account with the application team.
  C. Give the application team read-only access.

• Question 988:

  While checking logs, a security engineer notices a number of end users suddenly downloading files with the .tar.gz extension. Closer examination of the files reveals they are PE32 files. The end users state they did not initiate any of the downloads. Further investigation reveals the end users all clicked on an external email containing an infected MHT file with an href link a week prior. Which of the following is MOST likely occurring?

  A. A RAT was installed and is transferring additional exploit tools.
  B. The workstations are beaconing to a command-and-control server.
  C. A logic bomb was executed and is responsible for the data transfers.
  D. A fireless virus is spreading in the local network environment.
  A. A RAT was installed and is transferring additional exploit tools.

• Question 989:

  A financial analyst is expecting an email containing sensitive information from a client. When the email arrives, the analyst receives an error and is unable to open the encrypted message. Which of the following is the MOST likely cause of the issue?

  A. The S/MIME plug-in is not enabled
  B. The SSL certificate has expired
  C. Secure IMAP was not implemented
  D. POP3S is not supported
  C. Secure IMAP was not implemented

• Question 990:

  A security analyst receives an alert from a WAF with the following payload: var data= "" ++ <../../../../../../etc/passwd>"

  Which of the following types of attacks is this?

  A. Cross-site request forgery
  B. Buffer overflow
  C. SQL injection
  D. JavaScript data insertion
  E. Firewall evasion script
  D. JavaScript data insertion