Best Quality CompTIA SY0-501 Exam Questions BraindumpsVCE Realistic Practice Exams [2022]
Critical Information To CompTIA Security+ Certification Exam Pass the First Time
NEW QUESTION 412
Which of the following has a direct impact on whether a company can meet the RTO?
- A. ARO
- B. MTBF
- C. RPO
- D. MTTR
Answer: D
NEW QUESTION 413
A vice president at a manufacturing organization is concerned about desktops being connected to the network.
Employees need to log onto the desktops' local account to verify that a product is being created within specifications; otherwise, the desktops should be as isolated as possible. Which of the following is the BEST way to accomplish this?
- A. Create a separate VLAN for the desktops.
- B. Join the desktops to an ad-hoc network.
- C. Put the desktops in the DMZ.
- D. Air gap the desktops.
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 414
A security auditor is reviewing the following output from file integrity monitoring software installed on a very busy server at a large service provider. The server has not been updates since it was installed. Drag and drop the log entry that identifies the first instance of server compromise.
Answer:
Explanation:
Explanation
NEW QUESTION 415
A security analyst is hardening a web server, which should allow a secure certificate-based session using
the organization's PKI infrastructure. The web server should also utilize the latest security techniques and
standards. Given this set of requirements, which of the following techniques should the analyst implement
to BEST meet these requirements? (Select two.)
- A. Implement a CRL using an authorized CA.
- B. Install an X- 509-compliant certificate.
- C. Enable and configure TLS on the server.
- D. Configure the web server to use a host header.
- E. Install a certificate signed by a public CA.
Answer: B,C
NEW QUESTION 416
You have just received some room and WiFi access control recommendations from a security consulting company. Click on each building to bring up available security controls. Please implement the following requirements:
The Chief Executive Officer's (CEO) office had multiple redundant security measures installed on the door to the office. Remove unnecessary redundancies to deploy three-factor authentication, while retaining the expensive iris render.
The Public Cafe has wireless available to customers. You need to secure the WAP with WPA and place a passphrase on the customer receipts.
In the Data Center you need to include authentication from the "something you know" category and take advantage of the existing smartcard reader on the door.
In the Help Desk Office, you need to require single factor authentication through the use of physical tokens given to guests by the receptionist.
The PII Office has redundant security measures in place. You need to eliminate the redundancy while maintaining three-factor authentication and retaining the more expensive controls.
Instructions: The original security controls for each office can be reset at any time by selecting the Reset button. Once you have met the above requirements for each office, select the Save button. When you have completed the entire simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.
Answer:
Explanation:
See the solution below.
Explanation
Solution as
NEW QUESTION 417
For each of the given items, select the appropriate authentication category from the drop down choices.
Select the appropriate authentication type for the following items:
Answer:
Explanation:
NEW QUESTION 418
In terms of encrypting data, which of the following is BEST described as a way to safeguard password data by adding random data to it in storage?
- A. Implementing PKI
- B. Using hash algorithms
- C. Using salt
- D. Implementing elliptical curve
Answer: C
NEW QUESTION 419
A network administrator is brute forcing accounts through a web interface. Which of the following would provide the BEST defense from an account password being discovered?
- A. Password complexity
- B. Account lockout
- C. Password history
- D. Account expiration
Answer: B
NEW QUESTION 420
An attacker captures the encrypted communication between two parties for a week, but is unable to decrypt the messages. The attacker then compromises the session key during one exchange and successfully compromises a single message. The attacker plans to use this key to decrypt previously captured and future communications, but is unable to. This is because the encryption scheme in use adheres to:
- A. Asymmetric encryption
- B. Perfect forward secrecy
- C. Out-of-band key exchange
- D. Secure key escrow
Answer: B
NEW QUESTION 421
A technician is implementing 802 1X with dynamic VLAN assignment based on a user Active Directory group membership Which of the following configurations supports the VLAN definitions?
- A. LDAP path
- B. RADIUS attribute
- C. SAML tag
- D. Shibboleth IdP
Answer: C
NEW QUESTION 422
Which of the following types of attack is being used when an attacker responds by sending the MAC address of the attacking machine to resolve the MAC to IP address of a valid server?
- A. IP spoofing
- B. Evil twin
- C. Session hijacking
- D. ARP poisoning
An ARP spoofing, also known as ARP poisoning, is a Man in the Middle (MitM) attack that allows attackers to intercept communication between network devices. The attack works as follows: The attacker must have access to the network.
Answer: D
NEW QUESTION 423
An organization has decided to host its web application and database in the cloud. Which of the following
BEST describes the security concerns for this decision?
- A. Vendor support will cease when the hosting platforms reach EOL.
- B. Outsourcing the code development adds risk to the cloud provider.
- C. The cloud vendor is a new attack vector within the supply chain.
- D. Access to the organization's servers could be exposed to other cloud-provider clients.
Answer: C
NEW QUESTION 424
A security administrator has been tasked with implementing controls that meet management goals. Drag and drop the appropriate control used to accomplish the account management goal. Options may be used once or not at all.
Answer:
Explanation:
Explanation:
* Standard naming convention
* Group policy
* Usage auditing and review
* Permission auditing and review
NEW QUESTION 425
Which of the following encryption algorithms is used primarily to secure data at rest?
- A. SSL
- B. TLS
- C. AES
- D. RSA
Answer: C
Explanation:
A security analyst is implementing PKI-based functionality to a web application that has the following requirements:
* File contains certificate information
* Certificate chains
* Root authority certificates
* Private key
All of these components will be part of one file and cryptographically protected with a password. Given this scenario, which of the following certificate types should the analyst implement to BEST meet these requirements?
NEW QUESTION 426
Which of the following implements two-factor authentication on a VPN?
- A. Public and private keys
- B. Source and destination IP addresses
- C. Username, password, and source IP
- D. HOTP token and logon credentials
Answer: C
Explanation:
Explanation
What is the process for logging in?
Setting up two-factor authentication for a user for the first time:
1. A user will go to the URL given to them by OT support and enter their username and password.
2. After logging in, they'll be prompted to input their phone number and verify it with a simple phone call or text message.
3. The next step is to install Duo Mobile, a smartphone app that generates passcodes and supports Duo Push (on iPhone and Android).
4. After installing the app, it needs to be activated in order to be linked to the user's account.
5. Lastly, the user is shown a success message and the login prompt that they'll normally see when logging in.
To connect via VPN using two-factor authentication after set-up:
Go to the URL and login with their username and password.
1. Choose which authentication method: Duo Push, phone call, text or passcode.
2. If they choose Duo Push, a notification will be sent to their phone. They simply have to select the
"Approve" button to redirect their browser to the SSL VPN ser-vice homepage.
3. Then they can launch "Tunnel Mode" to direct traffic through their VPN.
4. See What are the authentication choices? for more information on how each method works.
NEW QUESTION 427
Which of the following technologies employ the use of SAML? (Choose two.)
- A. Federation
- B. RADIUS
- C. Single sign-on
- D. Secure token
- E. LDAP
Answer: A,C
NEW QUESTION 428
A startup company is using multiple SaaS and laaS platforms to stand up a corporate infrastructure and build out a customer-facing web application. Which of the following solutions would be BEST to provide security, manageability, and visibility into the platforms?
- A. DLP
- B. CASB
- C. SWG
- D. SIEM
Answer: B
NEW QUESTION 429
A company is investigating a data compromise where data exfiltration occurred. Prior to the investigation, the supervisor terminates an employee as a result of the suspected data loss. During the investigation, the supervisor is absent for the interview, and little evidence can be provided form the role-based authentication system in use by the company.
The situation can be identified for future mitigation as which of the following?
- A. Log failure
- B. Insider threat
- C. Job rotation
- D. Lack of training
Answer: A
NEW QUESTION 430
The application team within a company is asking the security team to investigate why its application is slow after an upgrade. The source of the team's application is 10.13.136.9. and the destination IP is 10.17.36.5. The security analyst pulls the logs from the endpoint security software but sees nothing is being blocked. The analyst then looks at the UTM firewall logs and sees the following:
Which of the following should the security analyst request NEXT based on the UTM firewall analysis?
- A. Request the application team to reconfigure the application and allow RPC communication.
- B. Request the network team to turn of IPS for 10.13.136.8 going to 10.17.36.5.
- C. Request the application team to allow TCP port 87 to listen on 10.17.36.5.
- D. Request the network team to open port 1433 from 10.13.136.9 to 10.17.36.5.
Answer: D
NEW QUESTION 431
Which of the following encryption algorithms require one encryption key? (Choose two.)
- A. 3DES
- B. RC4
- C. MD5
- D. DSA
- E. BCRYPT
Answer: A,B
NEW QUESTION 432
A security guard has informed the Chief Information Security Officer that a person with a tablet has been
walking around the building. The guard also noticed strange white markings in different areas of the
parking lot.
The person is attempting which of the following types of attacks?
- A. Jamming
- B. Near field communication
- C. War chalking
- D. Packet sniffing
Answer: C
NEW QUESTION 433
......
SY0-501 EXAM DUMPS WITH GUARANTEED SUCCESS: https://freetorrent.braindumpsvce.com/SY0-501_exam-dumps-torrent.html