CompTIA SY0-501 Actual Free Exam Questions & Community Discussion
A Chief Information Security Officer (CISO) asks the security architect to design a method for contractors to access the company's internal network securely without allowing access to systems beyond the scope of their project. Which of the following methods would BEST fit the needs of the CISO?
Correct Answer: C
Vote an answer
A technician is designing a solution that will be required to process sensitive information, including classified government dat a. The system needs to be common criteria certified. Which of the following should the technician select?
Correct Answer: D
Vote an answer
A systems analyst is responsible for generating a new digital forensics chain-of-custody form. Which of the following should the analyst include in this documentation? (Select TWO)
Correct Answer: B,C
Vote an answer
Which of the following types of attack is being used when an attacker responds by sending the MAC address of the attacking machine to resolve the MAC to IP address of a valid server?
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
A critical web application experiences slow response times during the end of a company's fiscal year. This web application typically sees a 35% increase in utilization during this time. The Chief Information Officer (CIO) wants an automated solution in place to deal with the annual spike. Which of the following does the CIO MOST likely want to implement?
Correct Answer: B
Vote an answer
Which of the following would be MOST effective at stopping zero-day attacks on an endpoint? (Select TWO)
Correct Answer: A,E
Vote an answer
A hospital has received reports from multiple patients that their PHI was stolen after completing forms on the hospital's website. Upon investigation, the hospital finds a packet analyzer was used to steal dat a. Which of the following protocols would prevent this attack from reoccurring?
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which of the following would provide a safe environment for an application to access only the resources needed to function while not having access to run at the system level?
Correct Answer: A
Vote an answer
A network administrator wants to further secure the routers and switches that are used on the company network The administrator would like to achieve full packet encryption and full command logging when interacting with these devices Which of the following technologies should be implemented?
Correct Answer: B
Vote an answer
A security analyst is investigating a vulnerability In which a default file permission was set incorrectly. The company uses non-credentialed scanning for vulnerability management. Which of the following tools can the analyst use to verify the permissions?
Correct Answer: B
Vote an answer
A security analyst wants to verify that a client-server (non-web) application is sending encrypted traffic. Which of the following should the analyst use?
Correct Answer: A
Vote an answer
A security administrator is creating a risk assessment on BYOD. One of the requirements of the risk assessment is to address the following
* Centrally managing mobile devices
* Data loss prevention
Which of the following recommendations should the administrator include in the assessment? (Select TWO).
* Centrally managing mobile devices
* Data loss prevention
Which of the following recommendations should the administrator include in the assessment? (Select TWO).
Correct Answer: A,D
Vote an answer
An organization uses multifactor authentication to restrict local network access. It requires a PIV and a PIN. Which of the following factors is the organization using?
Correct Answer: A
Vote an answer
A security administrator has received multiple calls from the help desk about customers who are unable to access the organization's web server. Upon reviewing the log files the security administrator determines multiple open requests have been made from multiple IP addresses, which is consuming system resources. Which of the following attack types does this BEST describe?
Correct Answer: B
Vote an answer
0
0
0
10