SYO-501 by CompTIA Valid Free Exam Practice Test

Question 1

Which of the following cryptographic algorithms can be used for full-disk encryption?

A. PBKDF2 B. AES C. RSA D. SHA-256

Correct Answer: B

Question 2

In which of the following situations would it be BEST to use a detective control type for mitigation?

A. A company purchased an IPS system, but after reviewing the requirements, the appliance was supposed to monitor not block, any traffic B. A company purchased an application-level firewall to isolate traffic between the accounting department and the information technology department C. A company implemented a network load balancer to ensure 99 999% availability of its web application D. A company designed a backup solution to increase the chances of restoring services in case of a natural disaster E. A company purchased liability insurance for flood protection on all capital assets

Correct Answer: C

Question 3

Buffer overflow can be avoided using proper:

A. memory reuse B. input validation C. memory leak prevention D. implementation of ASLR

Correct Answer: B

Question 4

A security analyst recommends implementing SSL for an existing web service. A technician installs the SSL certificate and successfully tests the connection on the server Soon after, the help desk begins receiving calls from users who are unable to log in After further investigation, it becomes clear that no users have successfully logged in since the certificate installation. Which of the following is MOST likely the issue?

A. Workstations need an updated trusted sites list B. Incorrect firewall rules are blocking HTTPS traffic. C. Users are not using tokens to log on. D. Users are still accessing the IP address and not the HTTPS address.

Correct Answer: D

Question 5

A security administrator has received multiple calls from the help desk about customers who are unable to access the organization's web server. Upon reviewing the log files the security administrator determines multiple open requests have been made from multiple IP addresses, which is consuming system resources. Which of the following attack types does this BEST describe?

A. DDoS B. Logic bomb C. Zero day D. DoS

Correct Answer: A

Question 6

A security analyst has identified malware that is propagating automatically to multiple systems on the network. Which of the following types of malware is MOST likely impacting the network?

A. Virus B. Backdoor C. Logic bomb D. Worm

Correct Answer: D

Question 7

The use of a unique attribute inherent to a user as part of an UFA system is BEST described as:

A. something you do B. something you are. C. something you have D. something you know.

Correct Answer: B

Question 8

Which of the following BEST explains the difference between a credentialed scan and a non-credentialed scan?

A. A credentialed scan will not show up in system logs because the scan is running with the necessary authorization, while non-credentialed scan activity will appear in the logs. B. A credentialed scan generates significantly more false positives, while a non-credentialed scan generates fewer false positives C. A credentialed scan sees devices in the network, including those behind NAT, while a non-credentialed scan sees outward-facing applications. D. A credentialed scan sees the system the way an authorized user sees the system, while a non-credentialed scan sees the system as a guest.

Correct Answer: D

Question 9

The Chief financial Officer (CFO) of an insurance company received an email from Ann, the company's Chief Executive Officer (CEO), requesting a transfer of $10,000 to an account. The email states Ann is on vacation and has lost her purse, containing cash and credit cards. Which of the following social-engineering techniques is the attacker using?

A. Whaling B. Pharming C. Phishing D. Typo squatting

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 10

A company is performing an analysis of the corporate enterprise network with the intent of identifying any one system, person, function, or service that, when neutralized, will cause or cascade disproportionate damage to the company's revenue, referrals, and reputation. Which of the following is an element of the BIA that this action is addressing?

A. Risk register B. Identification of critical systems C. Value assessment D. Single point of failure

Correct Answer: A

Question 11

A network administrator is trying to provide the most resilient hard drive configuration in a server. With five hard drives, which of the following is the MOST fault-tolerant configuration?

A. RAID 1 B. RAID 10 C. RAID 6 D. RAID 5

Correct Answer: D

Question 12

A user attempts to send an email to an external domain and quickly receives a bounce-back message. The user then contacts the help desk stating the message is important and needs to be delivered immediately. While digging through the email logs, a systems administrator finds the email and bounce-back details:
Your email has been rejected because it appears to contain SSN information. Sending SSN information via email to external recipients violates company policy.
Which of the following technologies successfully stopped the email from being sent?

A. UTM B. DEP C. DLP D. WAF

Correct Answer: C

CompTIA Security+ Certification - SYO-501 Exam Practice Test