CompTIA SY0-501 Free Practice Questions 2021

NEW QUESTION 1
The chief Security Officer (CSO) has reported a rise in data loss but no break ins have occurred. By doing which of the following is the CSO most likely to reduce the number of incidents?

• A. Implement protected distribution
• B. Empty additional firewalls
• C. Conduct security awareness training
• D. Install perimeter barricades

Answer: C

NEW QUESTION 2
An information system owner has supplied a new requirement to the development team that calls for increased non-repudiation within the application. After undergoing several audits, the owner determined that current levels of non-repudiation were insufficient.
Which of the following capabilities would be MOST appropriate to consider implementing is response to the new requirement?

• A. Transitive trust
• B. Symmetric encryption
• C. Two-factor authentication
• D. Digital signatures
• E. One-time passwords

Answer: D

NEW QUESTION 3
A user is presented with the following items during the new-hire onboarding process:
-Laptop
-Secure USB drive
-Hardware OTP token
-External high-capacity HDD
-Password complexity policy
-Acceptable use policy
-HASP key
-Cable lock
Which of the following is one component of multifactor authentication?

• A. Secure USB drive
• B. Cable lock
• C. Hardware OTP token
• D. HASP key

Answer: C

NEW QUESTION 4
During a third-party audit, it is determined that a member of the firewall team can request, approve, and implement a new rule-set on the firewall. Which of the following will the audit team most l likely recommend during the audit out brief?

• A. Discretionary access control for the firewall team
• B. Separation of duties policy for the firewall team
• C. Least privilege for the firewall team
• D. Mandatory access control for the firewall team

Answer: B

NEW QUESTION 5
A security analyst wants to harden the company’s VoIP PBX. The analyst is worried that credentials may be intercepted and compromised when IP phones authenticate with the BPX. Which of the following would best prevent this from occurring?

• A. Implement SRTP between the phones and the PBX.
• B. Place the phones and PBX in their own VLAN.
• C. Restrict the phone connections to the PBX.
• D. Require SIPS on connections to the PBX.

Answer: D

NEW QUESTION 6
Which of the following are methods to implement HA in a web application server environment? (Select two.)

• A. Load balancers
• B. Application layer firewalls
• C. Reverse proxies
• D. VPN concentrators
• E. Routers

Answer: AB

NEW QUESTION 7
An actor downloads and runs a program against a corporate login page. The program imports a list of usernames and passwords, looking for a successful attempt.
Which of the following terms BEST describes the actor in this situation?

• A. Script kiddie
• B. Hacktivist
• C. Cryptologist
• D. Security auditor

Answer: A

NEW QUESTION 8
A security analyst is hardening a web server, which should allow a secure certificate-based session using the organization’s PKI infrastructure. The web server should also utilize the latest security techniques and standards. Given this set of requirements, which of the following techniques should the analyst implement to BEST meet these requirements? (Select two.)

• A. Install an X- 509-compliant certificate.
• B. Implement a CRL using an authorized CA.
• C. Enable and configure TLS on the server.
• D. Install a certificate signed by a public CA.
• E. Configure the web server to use a host header.

Answer: AC

NEW QUESTION 9
While troubleshooting a client application connecting to the network, the security administrator notices the following error: Certificate is not valid. Which of the following is the BEST way to check if the digital certificate is valid?

• A. PKI
• B. CRL
• C. CSR
• D. IPSec

Answer: B

NEW QUESTION 10
A security analyst is reviewing patches on servers. One of the servers is reporting the following error message in the WSUS management console:
The computer has not reported status in 30 days.
Given this scenario, which of the following statements BEST represents the issue with the output above?

• A. The computer in QUESTION NO: has not pulled the latest ACL policies for the firewall.
• B. The computer in QUESTION NO: has not pulled the latest GPO policies from the management server.
• C. The computer in QUESTION NO: has not pulled the latest antivirus definitions from the antivirus program.
• D. The computer in QUESTION NO: has not pulled the latest application software updates.

Answer: D

NEW QUESTION 11
An external contractor, who has not been given information about the software or network architecture, is conducting a penetration test. Which of the following BEST describes the test being performed?

• A. Black box
• B. White box
• C. Passive reconnaissance
• D. Vulnerability scan

Answer: A

NEW QUESTION 12
A member of the admins group reports being unable to modify the "changes" file on a server. The permissions on the file are as follows:
Permissions User Group File
-rwxrw-r--+ Admins Admins changes
Based on the output above, which of the following BEST explains why the user is unable to modify the "changes" file?

• A. The SELinux mode on the server is set to "enforcing."
• B. The SELinux mode on the server is set to "permissive."
• C. An FACL has been added to the permissions for the file.
• D. The admins group does not have adequate permissions to access the file.

Answer: C

NEW QUESTION 13
A remote user (User1) is unable to reach a newly provisioned corporate windows workstation. The system administrator has been given the following log files from the VPN, corporate firewall and workstation host.

Which of the following is preventing the remote user from being able to access the workstation?

• A. Network latency is causing remote desktop service request to time out
• B. User1 has been locked out due to too many failed passwords
• C. Lack of network time synchronization is causing authentication mismatches
• D. The workstation has been compromised and is accessing known malware sites
• E. The workstation host firewall is not allowing remote desktop connections

Answer: B

NEW QUESTION 14
Ann is the IS manager for several new systems in which the classification of the systems' data are being decided. She is trying to determine the sensitivity level of the data being processed. Which of the following people should she consult to determine the data classification?

• A. Steward
• B. Custodian
• C. User
• D. Owner

Answer: D

NEW QUESTION 15
New magnetic locks were ordered for an entire building. In accordance with company policy, employee safety is the top priority. In case of a fire where electricity is cut, which of the following should be taken into consideration when installing the new locks?

• A. Fail safe
• B. Fault tolerance
• C. Fail secure
• D. Redundancy

Answer: A

NEW QUESTION 16
A manager wants to distribute a report to several other managers within the company. Some of them reside in remote locations that are not connected to the domain but have a local server. Because there is sensitive data within the report and the size of the report is beyond the limit of the email attachment size, emailing the report is not an option. Which of the following protocols should be implemented to distribute the report securely? (Select three.)

• A. S/MIME
• B. SSH
• C. SNMPv3
• D. FTPS
• E. SRTP
• F. HTTPS
• G. LDAPS

Answer: BDF

NEW QUESTION 17
An administrator thinks the UNIX systems may be compromised, but a review of system log files provides no useful information. After discussing the situation with the security team, the administrator suspects that the attacker may be altering the log files and removing evidence of intrusion activity. Which of the following actions will help detect attacker attempts to further alter log files?

• A. Enable verbose system logging
• B. Change the permissions on the user's home directory
• C. Implement remote syslog
• D. Set the bash_history log file to "read only"

Answer: C

NEW QUESTION 18
A software developer is concerned about DLL hijacking in an application being written. Which of the following is the MOST viable mitigation measure of this type of attack?

• A. The DLL of each application should be set individually
• B. All calls to different DLLs should be hard-coded in the application
• C. Access to DLLs from the Windows registry should be disabled
• D. The affected DLLs should be renamed to avoid future hijacking

Answer: B