CompTIA SY0-501 Exam Questions 2021

NEW QUESTION 1
An organization is using a tool to perform a source code review. Which of the following describes the case in which the tool incorrectly identifies the vulnerability?

• A. False negative
• B. True negative
• C. False positive
• D. True positive

Answer: C

NEW QUESTION 2
Which of the following would MOST likely appear in an uncredentialed vulnerability scan?

• A. Self-signed certificates
• B. Missing patches
• C. Auditing parameters
• D. Inactive local accounts

Answer: D

NEW QUESTION 3
Joe, a user, wants to send Ann, another user, a confidential document electronically. Which of the following should Joe do to ensure the document is protected from eavesdropping?

• A. Encrypt it with Joe’s private key
• B. Encrypt it with Joe’s public key
• C. Encrypt it with Ann’s private key
• D. Encrypt it with Ann’s public key

Answer: D

NEW QUESTION 4
Which of the following vulnerability types would the type of hacker known as a script kiddie be MOST dangerous against?

• A. Passwords written on the bottom of a keyboard
• B. Unpatched exploitable Internet-facing services
• C. Unencrypted backup tapes
• D. Misplaced hardware token

Answer: B

NEW QUESTION 5
A security analyst reviews the following output:

The analyst loads the hash into the SIEM to discover if this hash is seen in other parts of the network. After inspecting a large number of files, the security analyst reports the following:

Which of the following is the MOST likely cause of the hash being found in other areas?

• A. Jan Smith is an insider threat
• B. There are MD5 hash collisions
• C. The file is encrypted
• D. Shadow copies are present

Answer: B

NEW QUESTION 6
During an application design, the development team specifics a LDAP module for single sign-on communication with the company's access control database. This is an example of which of the following?

• A. Application control
• B. Data in-transit
• C. Identification
• D. Authentication

Answer: D

NEW QUESTION 7
While troubleshooting a client application connecting to the network, the security administrator notices the following error: Certificate is not valid. Which of the following is the BEST way to check if the digital certificate is valid?

• A. PKI
• B. CRL
• C. CSR
• D. IPSec

Answer: B

NEW QUESTION 8
Security administrators attempted corrective action after a phishing attack. Users are still experiencing trouble logging in, as well as an increase in account lockouts. Users' email contacts are complaining of an increase in spam and social networking requests. Due to the large number of affected accounts, remediation must be accomplished quickly. Which of the following actions should be taken FIRST? (Select TWO)

• A. Disable the compromised accounts
• B. Update WAF rules to block social networks
• C. Remove the compromised accounts with all AD groups
• D. Change the compromised accounts' passwords
• E. Disable the open relay on the email server
• F. Enable sender policy framework

Answer: EF

Explanation: Sender Policy Framework (SPF) is a simple email-validation system designed to detect email spoofing by providing a mechanism to allow receiving mail exchangers to check that incoming mail from a domain comes from a host authorized by that domain's administrators. n a Small Business Server environment, you may have to prevent your Microsoft Exchange Server-based server from being used as an open relay SMTP server for unsolicited commercial e-mail messages, or spam.
You may also have to clean up the Exchange server's SMTP queues to delete the unsolicited commercial email messages.
If your Exchange server is being used as an open SMTP relay, you may experience one or more of the following symptoms:
The Exchange server cannot deliver outbound SMTP mail to a growing list of e-mail domains. Internet browsing is slow from the server and from local area network (LAN) clients.
Free disk space on the Exchange server in the location of the Exchange information store databases or the Exchange information store transaction logs is reduced more rapidly than you expect.
The Microsoft Exchange information store databases spontaneously dismount. You may be able to manually mount the stores by using Exchange System Manager, but the stores may dismount on their own after they run for a short time. For more information, click the following article number to view the article in the Microsoft Knowledge Base.

NEW QUESTION 9
An employer requires that employees use a key-generating app on their smartphones to log into corporate applications. In terms of authentication of an individual, this type of access policy is BEST defined as:

• A. Something you have.
• B. Something you know.
• C. Something you do.
• D. Something you are.

Answer: A

NEW QUESTION 10
A network administrator needs to allocate a new network for the R&D group. The network must not be accessible from the Internet regardless of the network firewall or other external misconfigurations. Which of the following settings should the network administrator implement to accomplish this?

• A. Configure the OS default TTL to 1
• B. Use NAT on the R&D network
• C. Implement a router ACL
• D. Enable protected ports on the switch

Answer: A

NEW QUESTION 11
An organization has hired a penetration tester to test the security of its ten web servers. The penetration tester is able to gain root/administrative access in several servers by exploiting vulnerabilities associated with the implementation of SMTP, POP, DNS, FTP, Telnet, and IMAP. Which of the following recommendations should the penetration tester provide to the organization to better protect their web servers in the future?

• A. Use a honeypot
• B. Disable unnecessary services
• C. Implement transport layer security
• D. Increase application event logging

Answer: B

NEW QUESTION 12
A systems administrator is attempting to recover from a catastrophic failure in the datacenter. To recover the domain controller, the systems administrator needs to provide the domain administrator credentials. Which of the following account types is the systems administrator using?

• A. Shared account
• B. Guest account
• C. Service account
• D. User account

Answer: C

NEW QUESTION 13
An organization's employees currently use three different sets of credentials to access multiple internal resources. Management wants to make this process less complex. Which of the following would be the BEST option to meet this goal?

• A. Transitive trust
• B. Single sign-on
• C. Federation
• D. Secure token

Answer: B

NEW QUESTION 14
An audit takes place after company-wide restricting, in which several employees changed roles. The following deficiencies are found during the audit regarding access to confidential data:

Which of the following would be the BEST method to prevent similar audit findings in the future?

• A. Implement separation of duties for the payroll department.
• B. Implement a DLP solution on the payroll and human resources servers.
• C. Implement rule-based access controls on the human resources server.
• D. Implement regular permission auditing and reviews.

Answer: A

NEW QUESTION 15
Which of the following AES modes of operation provide authentication? (Select two.)

• A. CCM
• B. CBC
• C. GCM
• D. DSA
• E. CFB

Answer: AC

NEW QUESTION 16
An organization plans to implement multifactor authentication techniques within the enterprise network architecture. Each authentication factor is expected to be a unique control. Which of the following BEST describes the proper employment of multifactor authentication?

• A. Proximity card, fingerprint scanner, PIN
• B. Fingerprint scanner, voice recognition, proximity card
• C. Smart card, user PKI certificate, privileged user certificate
• D. Voice recognition, smart card, proximity card

Answer: A