It is impossible to pass CompTIA SY0-501 exam without any help in the short term. Come to us soon and find the most advanced, correct and guaranteed . You will get a surprising result by our .
Online SY0-501 free questions and answers of New Version:
NEW QUESTION 1
A company’s loss control department identifies theft as a recurring loss type over the past year. Based on the department’s report, the Chief Information Officer (CIO) wants to detect theft of datacenter equipment. Which of the following controls should be implemented?
- A. Biometrics
- B. Cameras
- C. Motion detectors
- D. Mantraps
Answer: C
NEW QUESTION 2
When attempting to secure a mobile workstation, which of the following authentication technologies rely on the user's physical characteristics? (Select TWO)
- A. MAC address table
- B. Retina scan
- C. Fingerprint scan
- D. Two-factor authentication
- E. CAPTCHA
- F. Password string
Answer: BC
NEW QUESTION 3
To reduce disk consumption, an organization’s legal department has recently approved a new policy setting the data retention period for sent email at six months. Which of the following is the BEST way to ensure this
goal is met?
- A. Create a daily encrypted backup of the relevant emails.
- B. Configure the email server to delete the relevant emails.
- C. Migrate the relevant emails into an “Archived” folder.
- D. Implement automatic disk compression on email servers.
Answer: A
NEW QUESTION 4
While working on an incident, Joe, a technician, finished restoring the OS and applications on a workstation from the original mediA. Joe is about to begin copying the user's files back onto the hard drive. Which of the following incident response steps is Joe working on now?
- A. Recovery
- B. Eradication
- C. Containment
- D. Identification
Answer: A
NEW QUESTION 5
Which of the following delineates why it is important to perform egress filtering and monitoring on Internet connected security zones of interfaces on a firewall?
- A. Egress traffic is more important than ingress traffic for malware prevention
- B. To rebalance the amount of outbound traffic and inbound traffic
- C. Outbound traffic could be communicating to known botnet sources
- D. To prevent DDoS attacks originating from external network
Answer: B
NEW QUESTION 6
When performing data acquisition on a workstation, which of the following should be captured based on memory volatility? (Select two.)
- A. USB-attached hard disk
- B. Swap/pagefile
- C. Mounted network storage
- D. ROM
- E. RAM
Answer: BE
NEW QUESTION 7
A security analyst is reviewing the following output from an IPS:
Given this output, which of the following can be concluded? (Select two.)
- A. The source IP of the attack is coming from 250.19.18.22.
- B. The source IP of the attack is coming from 250.19.18.71.
- C. The attacker sent a malformed IGAP packet, triggering the alert.
- D. The attacker sent a malformed TCP packet, triggering the alert.
- E. The TTL value is outside of the expected range, triggering the alert.
Answer: BC
NEW QUESTION 8
An organization finds that most help desk calls are regarding account lockout due to a variety of applications running on different systems. Management is looking for a solution to reduce the number of account lockouts while improving security. Which of the following is the BEST solution for this organization?
- A. Create multiple application accounts for each user.
- B. Provide secure tokens.
- C. Implement SSO.
- D. Utilize role-based access control.
Answer: C
NEW QUESTION 9
Ann, a security administrator, wants to ensure credentials are encrypted in transit when implementing a RADIUS server for SSO. Which of the following are needed given these requirements? (Select TWO)
- A. Public key
- B. Shared key
- C. Elliptic curve
- D. MD5
- E. Private key
- F. DES
Answer: AE
NEW QUESTION 10
Which of the following would verify that a threat does exist and security controls can easily be bypassed without actively testing an application?
- A. Protocol analyzer
- B. Vulnerability scan
- C. Penetration test
- D. Port scanner
Answer: B
Explanation: A vulnerability scan is the automated process of proactively identifying security vulnerabilities of computing systems in a network in order to determine if and where a system can be exploited and/or threatened. While
public servers are important for communication and data transfer over the Internet, they open the door to potential security breaches by threat agents, such as malicious hackers.
Vulnerability scanning employs software that seeks out security flaws based on a database of known flaws, testing systems for the occurrence of these flaws and generating a report of the findings that an individual or an enterprise can use to tighten the network's security.
Vulnerability scanning typically refers to the scanning of systems that are connected to the Internet but can also refer to system audits on internal networks that are not connected to the Internet in order to assess the threat of rogue software or malicious employees in an enterprise.
NEW QUESTION 11
A security administrator wants to configure a company’s wireless network in a way that will prevent wireless clients from broadcasting the company’s SSID. Which of the following should be configured on the company’s access points?
- A. Enable ESSID broadcast
- B. Enable protected management frames
- C. Enable wireless encryption
- D. Disable MAC authentication
- E. Disable WPS
- F. Disable SSID broadcast
Answer: F
NEW QUESTION 12
The administrator installs database software to encrypt each field as it is written to disk. Which of the following describes the encrypted data?
- A. In-transit
- B. In-use
- C. Embedded
- D. At-rest
Answer: B
NEW QUESTION 13
A workstation puts out a network request to locate another system. Joe, a hacker on the network, responds before the real system does, and he tricks the workstation into communicating with him. Which of the following BEST describes what occurred?
- A. The hacker used a race condition.
- B. The hacker used a pass-the-hash attack.
- C. The hacker-exploited improper key management.
- D. The hacker exploited weak switch configuration.
Answer: D
NEW QUESTION 14
Which of the following can affect electrostatic discharge in a network operations center?
- A. Fire suppression
- B. Environmental monitoring
- C. Proximity card access
- D. Humidity controls
Answer: D
NEW QUESTION 15
A security administrator is evaluating three different services: radius, diameter, and Kerberos. Which of the following is a feature that is UNIQUE to Kerberos?
- A. It provides authentication services
- B. It uses tickets to identify authenticated users
- C. It provides single sign-on capability
- D. It uses XML for cross-platform interoperability
Answer: B
NEW QUESTION 16
Which of the following locations contain the MOST volatile data?
- A. SSD
- B. Paging file
- C. RAM
- D. Cache memory
Answer: D
Recommend!! Get the Full SY0-501 dumps in VCE and PDF From 2passeasy, Welcome to Download: https://www.2passeasy.com/dumps/SY0-501/ (New 540 Q&As Version)