Updated Jan-2022 Test Engine to Practice SYO-501 Dumps & Practice Exam
Dumps Collection SYO-501 Test Engine Dumps Training With 715 Questions
Our SY0-501 practice test will include those topics:
- Architecture and Design 15%
- Risk Management 14%
- Threats, Attacks and Vulnerabilities 21%
- Cryptography and PKI 12%
- Technologies and Tools 22%
- Identity and Access Management 16%
For more info visit: CompTIA Security
NEW QUESTION 245
A security administrator is developing training for corporate users on basic security principles for personal
email accounts.
Which of the following should be mentioned as the MOST secure way for password recovery?
- A. Utilizing CAPTCHA to avoid brute force attacks
- B. Use a different e-mail address to recover password
- C. Utilizing a single Qfor password recovery
- D. Sending a PIN to a smartphone through text message
Answer: D
NEW QUESTION 246
As a security measure, an organization has disabled all external media from accessing the network. Since some users may have data that needs to be transferred to the network, which of the following would BEST assist a security administrator with transferring the data while keeping the internal network secure?
- A. Upload the media in the DMZ
- B. Contact the data custodian
- C. Upload the data in a separate VLAN
- D. Use a standalone scanning system
Answer: D
NEW QUESTION 247
When generating a request for a new x.509 certificate for securing a website, which of the following is the MOST appropriate hashing algorithm?
- A. RC4
- B. SHA
- C. HMAC
- D. MD5
Answer: D
NEW QUESTION 248
Which of the following is a major difference between XSS attacks and remote code exploits?
- A. Remote code exploits allow writing code at the client side and executing it, while XSS attacks require no code to work
- B. XSS attacks target servers, while remote code exploits target clients
- C. Remote code exploits aim to escalate attackers' privileges, while XSS attacks aim to gain access only
- D. XSS attacks use machine language, while remote exploits use interpreted language
Answer: C
NEW QUESTION 249
An auditor is performing an assessment of a security appliance with an embedded OS that was vulnerable during the last two assessments. Which of the following BEST explains the appliance's vulnerable state?
- A. The vendor has not supplied a patch for the appliance.
- B. The appliance requires administrative credentials for the assessment.
- C. The device uses weak encryption ciphers.
- D. The system was configured with weak default security settings.
Answer: D
NEW QUESTION 250
A security administrator is given the security and availability profiles for servers that are being deployed.
* Match each RAID type with the correct configuration and MINIMUM number of drives.
* Review the server profiles and match them with the appropriate RAID type based on integrity, availability, I/O, storage requirements. Instructions:
* All drive definitions can be dragged as many times as necessary
* Not all placeholders may be filled in the RAID configuration boxes
* If parity is required, please select the appropriate number of parity checkboxes
* Server profiles may be dragged only once
If at any time you would like to bring back the initial state of the simulation, please select the Reset button. When you have completed the simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.
Answer:
Explanation:
Explanation:
RAID-0 is known as striping. It is not a fault tolerant solution but does improve disk performance for read/write operations. Striping requires a minimum of two disks and does not use parity.
RAID-0 can be used where performance is required over fault tolerance, such as a media streaming server.
RAID-1 is known as mirroring because the same data is written to two disks so that the two disks have identical data. This is a fault tolerant solution that halves the storage space. A minimum of two disks are used in mirroring and does not use parity. RAID-1 can be used where fault tolerance is required over performance, such as on an authentication server. RAID-5 is a fault tolerant solution that uses parity and striping. A minimum of three disks are required for RAID-5 with one disk's worth of space being used for parity information. However, the parity information is distributed across all the disks. RAID-5 can recover from a sing disk failure.
RAID-6 is a fault tolerant solution that uses dual parity and striping. A minimum of four disks are required for RAID-6. Dual parity allows RAID-6 to recover from the simultaneous failure of up to two disks. Critical data should be stored on a RAID-6 system.
http://www.adaptec.com/en-us/solutions/raid_levels.html
NEW QUESTION 251
A company moved into a new building next to a sugar mill. Cracks have been discovered in the walls of the server room, which is located on the same side as the sugar mill loading docks. The cracks are believed to have been caused by heavy trucks. Moisture has begun to seep into the server room, causing extreme humidification problems and equipment failure. Which of the following BEST describes the type of threat the organization faces?
- A. Man-made
- B. Environmental
- C. Natural
- D. Foundational
Answer: D
NEW QUESTION 252
Which of the following can be provided to an AAA system for the identification phase?
- A. One-time token
- B. Private certificate
- C. Permissions
- D. Username
Answer: D
NEW QUESTION 253
A security administrator needs to configure remote access to a file share so it can only be accessed between the hours of 9:00 a.m. and 5:00 p.m. Files in the share can only be accessed by members of the same department as the data owner. Users should only be able to create files with approved extensions, which may differ by department. Which of the following access controls would be the MOST appropriate for this situation?
- A. RBAC
- B. MAC
- C. DAC
- D. ABAC
Answer: D
NEW QUESTION 254
SIMULATION
You have just received some room and WiFi access control recommendations from a security consulting company. Click on each building to bring up available security controls. Please implement the following requirements:
The Chief Executive Officer's (CEO) office had multiple redundant security measures installed on the door to the office. Remove unnecessary redundancies to deploy three-factor authentication, while retaining the expensive iris render.
The Public Cafe has wireless available to customers. You need to secure the WAP with WPA and place a passphrase on the customer receipts.
In the Data Center you need to include authentication from the "something you know" category and take advantage of the existing smartcard reader on the door.
In the Help Desk Office, you need to require single factor authentication through the use of physical tokens given to guests by the receptionist.
The PII Office has redundant security measures in place. You need to eliminate the redundancy while maintaining three-factor authentication and retaining the more expensive controls.
Instructions: The original security controls for each office can be reset at any time by selecting the Reset button. Once you have met the above requirements for each office, select the Save button. When you have completed the entire simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.
Answer:
Explanation:
NEW QUESTION 255
A company's loss control department identifies theft as a recurring loss type over the past year. Based on the department's report, the Chief Information Officer (CIO) wants to detect theft of datacenter equipment.
Which of the following controls should be implemented?
- A. Biometrics
- B. Motion detectors
- C. Cameras
- D. Mantraps
Answer: B
NEW QUESTION 256
Drag and drop the correct protocol to its default port.
Answer:
Explanation:
Explanation
FTP uses TCP port 21. Telnet uses port 23.
SSH uses TCP port 22.
All protocols encrypted by SSH, including SFTP, SHTTP, SCP, SExec, and slogin, also use TCP port 22.
Secure Copy Protocol (SCP) is a secure file-transfer facility based on SSH and Remote Copy Protocol (RCP).
Secure FTP (SFTP) is a secured alternative to standard File Transfer Protocol (FTP). SMTP uses TCP port 25.
Port 69 is used by TFTP.
SNMP
makes use of UDP ports 161 and 162. http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers
NEW QUESTION 257
A user typically works remotely over the holidays using a web-based VPN to access corporate resources. The user reports getting untrusted host errors and being unable to connect. Which of the following is MOST likely the cause?
- A. The certificate has expired
- B. The browser does not support SSL
- C. The VPN software has reached the seat license maximum
- D. The user's account is locked out
Answer: A
NEW QUESTION 258
An information security analyst needs to work with an employee who can answer questions about how data for a specific system is used in the business. The analyst should seek out an employee who has the role of:
- A. systems administrator
- B. privacy officer
- C. owner
- D. steward
Answer: C
NEW QUESTION 259
A project manager is working with an architectural firm that focuses on physical security. The project manager would like to provide requirements that support the primary goal of safely. Based on the project manager's desires, which of the following controls would the BEST to incorporate into the facility design?
- A. Escape routers
- B. Access controls
- C. Reinforcements
- D. Biometrics
Answer: A
NEW QUESTION 260
A supervisor in your organization was demoted on Friday afternoon. The supervisor had the ability to modify the contents of a confidential database, as well as other managerial permissions. On Monday morning, the database administrator reported that log files indicated that several records were missing from the database.
Which of the following risk mitigation strategies should have been implemented when the supervisor was demoted?
- A. Incident management
- B. IT governance
- C. Monthly user rights reviews
- D. Routine auditing
Answer: C
NEW QUESTION 261
Leveraging the information supplied below, complete the CSR for the server to set up TLS (HTTPS)
* Hostname: ws01
* Domain: comptia.org
* IPv4: 10.1.9.50
* IPV4: 10.2.10.50
* Root: home.aspx
* DNS CNAME:homesite.
Instructions:
Drag the various data points to the correct locations within the CSR. Extension criteria belong in the let hand column and values belong in the corresponding row in the right hand column.
Answer:
Explanation:
Explanation
NEW QUESTION 262
A local coffee shop runs a small WiFi hotspot for its customers that utilizes WPA2-PSK. The coffee shop would like to stay current with security trends and wants to implement WPA3 to make its WiFi even more secure.
Which of the following technologies should the coffee shop use in place of PSK?
- A. WPS
- B. EAP
- C. SAE
- D. WEP
Answer: C
NEW QUESTION 263
You have been tasked with designing a security plan for your company. Drag and drop the appropriate security controls on the floor plan.
Instructions: All objects must be used and all place holders must be filled. Order does not matter. When you have completed the simulation, please select the Done button to submit.
Answer:
Explanation:
Explanation
Cable locks - Adding a cable lock between a laptop and a desk prevents someone from picking it up and walking away Proximity badge + reader Safe is a hardware/physical security measure Mantrap can be used to control access to sensitive areas. CCTV can be used as video surveillance.
Biometric reader can be used to control and prevent unauthorized access. Locking cabinets can be used to protect backup media, documentation and other physical artifacts.
NEW QUESTION 264
......
CompTIA SYO-501 Dumps Cover Real Exam Questions: https://www.actual4cert.com/SYO-501-real-questions.html