2022 SY0-501 Dumps PDF - SY0-501 Real Exam Questions Answers
Valid SY0-501 Test Answers & CompTIA SY0-501 Exam PDF
Which Skills Will You Obtain from CompTIA Security+ Certification?
You will earn 5 core skills from the Security+ certification including the following:
- Implementation;
- Architecture and design;
- Governance, risk, and compliance.
- Operations and incident response;
- Attacks, threats, and vulnerabilities;
NEW QUESTION 369
The Chief Information Security Officer (CISO) in a company is working to maximize protection efforts of sensitive corporate data. The CISO implements a "100% shred" policy within the organization, with the intent to destroy any documentation that is not actively in use in a way that it cannot be recovered or reassembled.
Which of the following attacks is this deterrent MOST likely to mitigate?
- A. Shoulder surfing
- B. Whaling
- C. Vishing
- D. Dumpster diving
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 370
Which of the following physical security controls is MOST effective when trying to prevent tailgating?
- A. CCTV
- B. Mantrap
- C. Biometrics
- D. Motion detection
- E. RFID badge
Answer: B
NEW QUESTION 371
Which of the following technologies would be MOST appropriate to utilize when testing a new software patch before a company-wide deployment?
- A. Application control
- B. Redundancy
- C. Cloud computing
- D. Virtualization
Answer: D
Explanation:
Explanation/Reference:
Explanation:
Virtualization is used to host one or more operating systems in the memory of a single host computer and allows multiple operating systems to run simultaneously on the same hardware, reducing costs.
Virtualization offers the flexibility of quickly and easily making backups of entire virtual systems, and quickly recovering the virtual system when errors occur. Furthermore, malicious code compromises of virtual systems rarely affect the host system, which allows for safer testing and experimentation.
NEW QUESTION 372
Which of the following explains why vendors publish MD5 values when they provide software patches for their customers to download over the Internet?
- A. The recipient can verify integrity of the software patch.
- B. The recipient can verify the authenticity of the site used to download the patch.
- C. The recipient can successfully activate the new software patch.
- D. The recipient can request future updates to the software using the published MD5 value.
Answer: A
NEW QUESTION 373
A company has three divisions, each with its own networks and services. The company decides to make its secure web portal accessible to all employees utilizing their existing usernames and passwords, The security administrator has elected to use SAML to support authentication. In this scenario, which of the following will occur when users try to authenticate to the portal? (Select TWO)
- A. The back-end networks will function as an identity provider and issue an authentication assertion
- B. The back-end networks will verify the assertion token issued by the portal functioning as the identity provider
- C. The portal will function as an identity provider and issue an authentication assertion
- D. The portal will request an authentication ticket from each network that is transitively trusted
- E. The back-end networks will request authentication tickets from the portal, which will act as the third-party service provider authentication store
Answer: A
NEW QUESTION 374
A security analyst is testing both Windows and Linux systems for unauthorized DNS zone transfers within a LAN on comptia.org from example.org. Which of the following commands should the security analyst use? (Select two.)
- A. dig -axfr [email protected]
- B.
- C.
- D.
- E. ipconfig/flushDNS
- F. [email protected] comptia.org
Answer: A,B
NEW QUESTION 375
The chief security officer (CS0) has issued a new policy that requires that all internal websites be configured for HTTPS traffic only. The network administrator has been tasked to update all internal sites without incurring additional costs.
Which of the following is the best solution for the network administrator to secure each internal website?
- A. Use certificates signed by the company CA
- B. Use certificates signed by a public ca
- C. Use a signing certificate as a wild card certificate
- D. Use a self-signed certificate on each internal server
Answer: A
Explanation:
If a company has a Microsoft server, they can become their own CA at no cost and hand out certs to their servers. Each server could also have a self signed certificate at no cost. If I were going with the best solution, I would choose A because a self signed certificate cannot be revoked.
Also, for both of the scenarios, each time you run across a new CA as a client, you get a popup that asks you to accept that CA. Not really sure if this is true about self signed certs but I would suspect that each time you go to another server, you have another popup. But if the company issues it, it would appear once, the company's CA would be listed in the accepted CA table, and you could go to all of the server.
NEW QUESTION 376
You have been tasked with designing a security plan for your company. Drag and drop the appropriate security controls on the floor plan.
Instructions: All objects must be used and all place holders must be filled. Order does not matter. When you have completed the simulation, please select the Done button to submit.
Answer:
Explanation:
Explanation
Cable locks - Adding a cable lock between a laptop and a desk prevents someone from picking it up and walking away Proximity badge + reader Safe is a hardware/physical security measure Mantrap can be used to control access to sensitive areas. CCTV can be used as video surveillance.
Biometric reader can be used to control and prevent unauthorized access. Locking cabinets can be used to protect backup media, documentation and other physical artefacts.
NEW QUESTION 377
An authorized user is conducting a penetration scan of a system for an organization. The tester has a set of network diagrams. Source code, version numbers of applications. and other information about the system. Including hostnames and network addresses. Which of the following BEST describes this type of penetration test?
- A. Gray-box testing
- B. White-box testing
- C. Red team exercise
- D. Blue team exercise
- E. Black-boxtestlng
Answer: E
NEW QUESTION 378
Which of the following is the BEST reason for salting a password hash before it is stored in a database?
- A. To prevent users from using simple passwords for their access credentials
- B. To make the password retrieval process very slow
- C. To prevent duplicate values from being stored
- D. To protect passwords from being saved in readable format
Answer: C
NEW QUESTION 379
Drag and drop the correct protocol to its default port.
Answer:
Explanation:
Explanation
FTP uses TCP port 21. Telnet uses port 23.
SSH uses TCP port 22.
All protocols encrypted by SSH, including SFTP, SHTTP, SCP, SExec, and slogin, also use TCP port 22.
Secure Copy Protocol (SCP) is a secure file-transfer facility based on SSH and Remote Copy Protocol (RCP).
Secure FTP (SFTP) is a secured alternative to standard File Transfer Protocol (FTP). SMTP uses TCP port 25.
Port 69 is used by TFTP.
SNMP
makes use of UDP ports 161 and 162. http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers
NEW QUESTION 380
An organization's internal auditor discovers that large sums of money have recently been paid to a vendor that management does not recognize. The IT security department is asked to investigate the organizations the organization's ERP system to determine how the accounts payable module has been used to make these vendor payments.
The IT security department finds the following security configuration for the accounts payable module:
New Vendor Entry - Required Role: Accounts Payable Clerk
New Vendor Approval - Required Role: Accounts Payable Clerk
Vendor Payment Entry - Required Role: Accounts Payable Clerk
Vendor Payment Approval - Required Role: Accounts Payable Manager
Which of the following changes to the security configuration of the accounts payable module would BEST mitigate the risk?
- A.
- B.
- C.
- D.
Answer: C
NEW QUESTION 381
A number of employees report that parts of an ERP application are not working. The systems administrator reviews the following information from one of the employee workstations:
Execute permission denied: financemodule.dll
Execute permission denied: generalledger.dll
Which of the following should the administrator implement to BEST resolve this issue while minimizing risk and attack exposure?
- A. Verify the DLL's file integrity
- B. Update the application blacklist
- C. Whitelist the affected libraries
- D. Place the affected employees in the local administrator's group
Answer: C
Explanation:
Explanation/Reference:
NEW QUESTION 382
A security administrator has found a hash m the environment known to belong to malware. The administrator then finds this file to be in the preupdate area of the OS, which indicates it was pushed from the central patch system.
The administrator pulls a report from the patch management system with the following output:
Given the above outputs, which of the following MOST likely happened?
- A. The file was not approved in the application whitelist system
- B. The file was infected when the patch manager downloaded it.
- C. The fee was embedded with a logic bomb to evade detection
- D. The file was corrupted after it left the patch system
Answer: B
Explanation:
The hashes match so the file on the patch server was corrupt. That rules out A.
There is nothing said that relates to C.
D makes no sense at all.
The answer is therefore B.
NEW QUESTION 383
An organization's primary datacenter is experiencing a two-day outage due to an HVAC malfunction. The node located in the datacenter has lost power and is no longer operational, impacting the ability of all users to connect to the alternate datacenter. Which of the following BIA concepts BEST represents the risk described in this scenario?
- A. MTTR
- B. SPoF
- C. MTBF
- D. RTO
Answer: B
NEW QUESTION 384
You have been tasked with designing a security plan for your company. Drag and drop the appropriate security controls on the floor plan.
Instructions: All objects must be used and all place holders must be filled. Order does not matter. When you have completed the simulation, please select the Done button to submit.
Answer:
Explanation:
Explanation:
Cable locks - Adding a cable lock between a laptop and a desk prevents someone from picking it up and walking away
Proximity badge + reader
Safe is a hardware/physical security measure
Mantrap can be used to control access to sensitive areas. CCTV can be used as video surveillance.
Biometric reader can be used to control and prevent unauthorized access. Locking cabinets can be used to protect backup media, documentation and other physical artefacts.
NEW QUESTION 385
A company is deploying a file-sharing protocol access a network and needs to select a protocol for authenticating clients. Management requests that the service be configured in the most secure way possible.
The protocol must also be capable of mutual authentication, and support SSO and smart card logons. Which of the following would BEST accomplish this task?
- A. Store credentials in LDAP
- B. Use MSCHAP authentication
- C. Implement Kerberos
- D. Use NTLM authentication
Answer: C
NEW QUESTION 386
......
SY0-501 Exam Dumps - PDF Questions and Testing Engine: https://www.dumpsfree.com/SY0-501-valid-exam.html