[Nov 06, 2021] Ultimate SYO-501 Guide to Prepare Free Latest CompTIA Practice Tests Dumps
Get Top-Rated CompTIA SYO-501 Exam Dumps Now
Our SY0-501 practice test will include those topics:
- Cryptography and PKI 12%
- Technologies and Tools 22%
- Threats, Attacks and Vulnerabilities 21%
- Architecture and Design 15%
- Identity and Access Management 16%
- Risk Management 14%
For more info visit: CompTIA Security
Access & Identity Management
To excel in SY0-501 exam, you must understand the concepts of identity and access management, the implementation of access and identity management controls, the practices of account management, and the configuration and installation of access and identity servers. Plus, you need to be aware of LDAP, Kerberos, tokens, account types, and multifactor authentication. Besides these, candidates will also have to master such concepts as database security, password history, and guest accounts if to name a few.
NEW QUESTION 42
A company just implemented a new telework policy that allows employees to use personal devices for official email and file sharing while working from home. Some of the requirements are:
* Employees must provide an alternate work location (i.e., a home address).
* Employees must install software on the device that will prevent the loss of proprietary data but will not restrict any other software from being installed.
Which of the following BEST describes the MDM options the company is using?
- A. Remote wipe, geolocation, screen locks, storage segmentation, and full-device encryption
- B. Geofencing, content management, remote wipe, containerization, and storage segmentation
- C. Content management, remote wipe, geolocation, context-aware authentication, and containerization
- D. Application management, remote wipe, geofencing, context-aware authentication, and containerization
Answer: D
Explanation:
NEW QUESTION 43
A security administrator needs to address the following audit recommendations for a public-facing SFTP server:
Users should be restricted to upload and download files to their own
home directories only.
Users should not be allowed to use interactive shell login.
Which of the following configuration parameters should be implemented? (Select TWO).
- A. PermitTTY
- B. IgnoreRhosts
- C. AllowTcpForwarding
- D. PermitTunnel
- E. ChrootDirectory
Answer: A,E
NEW QUESTION 44
A security analyst is updating a BIA document. The security analyst notices the support vendor's time to replace a server hard drive went from eight hours to two hours.
Given these new metrics, which of the following can be concluded? (Choose two.)
- A. The RTO has decreased.
- B. The MTTR is faster.
- C. The RTO has increased.
- D. The MTTF has increased.
- E. The MTTF has decreased.
- F. The MTTR is slower.
Answer: A,B
NEW QUESTION 45
After being alerted to potential anomalous activity related to trivial DNS lookups, a security analyst looks at the following output of implemented firewall rules:
The analyst notices that the expected policy has no hit count for the day. Which of the following MOST likely occurred?
- A. Data execution prevention is enabled
- B. There is a policy violation for DNS lookups
- C. The VLAN is not trunked properly
- D. The firewall policy is misconfigured
Answer: D
NEW QUESTION 46
A government contracting company issues smartphones to employees to enable access to corporate resources. Several employees will need to travel to a foreign country for business purposes and will require access to their phones. However, the company recently received intelligence that its intellectual property is highly desired by the same country's government. Which of the following MDM configurations would BEST reduce the disk of compromise while on foreign soil?
- A. Disable firmware OTA updates.
- B. Disable wipe.
- C. Disable push notification services.
- D. Disable location services.
Answer: D
NEW QUESTION 47
Malware that changes its binary pattern on specific dates at specific times to avoid detection is known as a
(n):
- A. armored virus
- B. logic bomb
- C. polymorphic virus
- D. Trojan
Answer: C
NEW QUESTION 48
A systems administrator is increasing the security settings on a virtual host to ensure users on one VM cannot access information from another VM. Which of the following is the administrator protecting against?
- A. VM sprawl
- B. VM sandboxing
- C. VM migration
- D. VM escape
Answer: D
NEW QUESTION 49
Task: Configure the firewall (fill out the table) to allow these four rules:
* Only allow the Accounting computer to have HTTPS access to the Administrative server.
* Only allow the HR computer to be able to communicate with the Server 2 System over SCP.
* Allow the IT computer to have access to both the Administrative Server 1 and Administrative Server 2
Answer:
Explanation:
See the solution below.
Explanation
Use the following answer for this simulation task.
Below table has all the answers required for this question.
Firewall rules act like ACLs, and they are used to dictate what traffic can pass between the firewall and the internal network. Three possible actions can be taken based on the rule's criteria:
Block the connection Allow the connection
Allow the connection only if it is secured
TCP is responsible for providing a reliable, one-to-one, connection-oriented session. TCP establishes a connection and ensures that the other end receives any packets sent.
Two hosts communicate packet results with each other. TCP also ensures that packets are decoded and sequenced properly. This connection is persistent during the session.
When the session ends, the connection is torn down.
UDP provides an unreliable connectionless communication method between hosts. UDP is considered a best-effort protocol, but it's considerably faster than TCP.
The sessions don't establish a synchronized session like the kind used in TCP, and UDP doesn't guarantee error-free communications.
The primary purpose of UDP is to send small packets of information.
The application is responsible for acknowledging the correct reception of the data. Port 22 is used by both SSH and SCP with UDP.
Port 443 is used for secure web connections? HTTPS and is a TCP port.
Thus to make sure only the Accounting computer has HTTPS access to the Administrative server you should use TCP port 443 and set the rule to allow communication between 10.4.255.10/24 (Accounting) and
10.4.255.101 (Administrative server1) Thus to make sure that only the HR computer has access to Server2 over SCP you need use of TCP port 22 and set the rule to allow communication between 10.4.255.10/23 (HR) and 10.4.255.2 (server2) Thus to make sure that the IT computer can access both the Administrative servers you need to use a port and accompanying port number and set the rule to allow communication between: 10.4.255.10.25 (IT computer) and 10.4.255.101 (Administrative server1)
10.4.255.10.25 (IT computer) and 10.4.255.102 (Administrative server2)
NEW QUESTION 50
Which of the following techniques can be bypass a user or computer's web browser privacy settings?
(Select Two)
- A. LDAP injection
- B. SQL injection
- C. Cross-site scripting
- D. Locally shared objects
- E. Session hijacking
Answer: C,E
NEW QUESTION 51
Task: Configure the firewall (fill out the table) to allow these four rules:
* Only allow the Accounting computer to have HTTPS access to the Administrative server.
* Only allow the HR computer to be able to communicate with the Server 2 System over SCP.
* Allow the IT computer to have access to both the Administrative Server 1 and Administrative Server 2
Answer:
Explanation:
See the solution below.
Explanation
Use the following answer for this simulation task.
Below table has all the answers required for this question.
Firewall rules act like ACLs, and they are used to dictate what traffic can pass between the firewall and the internal network. Three possible actions can be taken based on the rule's criteria:
Block the connection Allow the connection
Allow the connection only if it is secured
TCP is responsible for providing a reliable, one-to-one, connection-oriented session. TCP establishes a connection and ensures that the other end receives any packets sent.
Two hosts communicate packet results with each other. TCP also ensures that packets are decoded and sequenced properly. This connection is persistent during the session.
When the session ends, the connection is torn down.
UDP provides an unreliable connectionless communication method between hosts. UDP is considered a best-effort protocol, but it's considerably faster than TCP.
The sessions don't establish a synchronized session like the kind used in TCP, and UDP doesn't guarantee error-free communications.
The primary purpose of UDP is to send small packets of information.
The application is responsible for acknowledging the correct reception of the data. Port 22 is used by both SSH and SCP with UDP.
Port 443 is used for secure web connections? HTTPS and is a TCP port.
Thus to make sure only the Accounting computer has HTTPS access to the Administrative server you should use TCP port 443 and set the rule to allow communication between 10.4.255.10/24 (Accounting) and
10.4.255.101 (Administrative server1) Thus to make sure that only the HR computer has access to Server2 over SCP you need use of TCP port 22 and set the rule to allow communication between 10.4.255.10/23 (HR) and 10.4.255.2 (server2) Thus to make sure that the IT computer can access both the Administrative servers you need to use a port and accompanying port number and set the rule to allow communication between: 10.4.255.10.25 (IT computer) and 10.4.255.101 (Administrative server1)
10.4.255.10.25 (IT computer) and 10.4.255.102 (Administrative server2)
NEW QUESTION 52
- A. The security administrator knows there are at least four different browsers in use on more than a thousand computers in the domain worldwide. Which of the following solution would be BEST for the security administrator to implement to most efficiently assist with this issue?
- B. SSL
- C. PKI
- D. ACL
- E. CRL
Answer: A,B
NEW QUESTION 53
For each of the given items, select the appropriate authentication category from the drop down choices.
Select the appropriate authentication type for the following items:
Answer:
Explanation:
Explanation
NEW QUESTION 54
A botnet has hit a popular website with a massive number of GRE-encapsulated packets to perform a DDoS attack News outlets discover a certain type of refrigerator was exploited and used to send outbound packets to the website that crashed. To which of the following categories does the refrigerator belong?
- A. IoT
- B. SoC
- C. ICS
- D. MFD
Answer: D
NEW QUESTION 55
A security engineer wants to implement a site-to-site VPN that will require SSL certificates for mutual authentication. Which of the following should the engineer implement if the design requires client MAC addresses to be visible across the tunnel?
- A. SSL VPN
- B. L2TP
- C. Transport mode VPN IPSec
- D. Tunnel mode IPSec
Answer: D
NEW QUESTION 56
A security analyst is checking log files and finds the following entries:
Which of the following is MOST likely happening?
- A. A hacker attempted to pivot using the web server interface.
- B. A potential hacker could be banner grabbing to determine what architecture is being used.
- C. The DNS is misconfigured for the server's IP address.
- D. A server is experiencing a DoS, and the request is timing out,
Answer: A
NEW QUESTION 57
Which of the following cryptographic attacks would salting of passwords render ineffective?
- A. Dictionary
- B. Birthday
- C. Rainbow tables
Answer: B
NEW QUESTION 58
The phones at a business are being replaced with VoIP phones that get plugged in-line between the switch and PC The voice and data networks still need to be kept separate. Which of the following would allow for this?
- A. NAT
- B. Intranet
- C. Subnetting
- D. VLAN
Answer: D
NEW QUESTION 59
A security administrator is trying to eradicate a worm, which is spreading throughout the organization, using an old remote vulnerability in the SMB protocol. The worm uses Nmap to identify target hosts within the company.
The administrator wants to implement a solution that will eradicate the current worm and any future attacks that may be using zero-day vulnerabilities.
Which of the following would BEST meet the requirements when implemented?
- A. Enterprise patch management system
- B. Network-based intrusion prevention system
- C. File integrity checking
- D. Application blacklisting
- E. Host-based firewall
Answer: B
NEW QUESTION 60
An administrator intends to configure an IPSec solution that provides ESP with integrity protection, but not confidentiality protection. Which of the following AES modes of operation would meet this integrity-only requirement?
- A. CBC
- B. CFB
- C. HMAC
- D. PCBC
- E. GCM
Answer: C
NEW QUESTION 61
After a user reports slow computer performance, a system administrator detects a suspicious file, which was installed as part of a freeware software package. The systems administrator reviews the output below:
Based on the above information, which of the following types of malware was installed on the user's computer?
- A. Bot
- B. Worm
- C. Keylogger
- D. Spyware
- E. RAT
Answer: E
NEW QUESTION 62
A security consultant is setting up a new electronic messaging platform and wants to ensure the platform supports message integrity validation.
Which of the following protocols should the consultant recommend?
- A. 802.11x
- B. DNSSEC
- C. RADIUS
- D. S/MIME
Answer: D
NEW QUESTION 63
The process of applying a salt and cryptographic hash to a password then repeating the process many times is known as which of the following?
- A. Collision resistance
- B. Brute force attack
- C. Rainbow table
- D. Key stretching
Answer: D
NEW QUESTION 64
DRAG DROP
A forensic analyst is asked to respond to an ongoing network attack on a server. Place the items in the list below in the correct order in which the forensic analyst should preserve them.
Select and Place:
Answer:
Explanation:
Explanation/Reference:
Explanation:
When dealing with multiple issues, address them in order of volatility (OOV); always deal with the most volatile first. Volatility can be thought of as the amount of time that you have to collect certain data before a window of opportunity is gone. Naturally, in an investigation you want to collect everything, but some data will exist longer than others, and you cannot possibly collect all of it once. As an example, the OOV in an investigation may be RAM, hard drive data, CDs/DVDs, and printouts.
Order of volatility: Capture system images as a snapshot of what exists, look at network traffic and logs, capture any relevant video/screenshots/hashes, record time offset on the systems, talk to witnesses, and track total man-hours and expenses associated with the investigation.
NEW QUESTION 65
To further secure a company's email system, an administrator is adding public keys to DNS records in the company's domain. Which of the following is being used?
- A. DMARC
- B. PFS
- C. DNSSEC
- D. SPF
Answer: C
NEW QUESTION 66
A coffee company, which operates a chain of stores across a large geographical area, is deploying tablets to use as point-of-sale devices. A security consultant has been given the following requirements:
The cashiers must be able to log in to the devices quickly.
The devices must be compliant with applicable regulations for credit card usage. The risk of loss or theft of the devices must be minimized.
If devices are lost or stolen, all data must be removed from the device.
The devices must be capable of being managed from a centralized location.
Which of the following should the security consultant configure in the MDM polices for the tablets? (Choose two.)
- A. Cable locks
- B. GPS tagging
- C. Carrier unlocking
- D. Remote wipe
- E. Screen locks
- F. Geofencing
Answer: B,D
NEW QUESTION 67
......
Passing Key To Getting SYO-501 Certified Exam Engine PDF: https://www.actual4cert.com/SYO-501-real-questions.html