[Sep 23, 2021] Get Free Updates Up to 365 days On Developing SYO-501 Braindumps
Best Quality CompTIA SYO-501 Exam Questions
NEW QUESTION 362
Ann, a user, reports she is unable to access an application from her desktop. A security analyst verifies
Ann's access and checks the SIEM for any errors. The security analyst reviews the log file from Ann's
system and notices the following output:
Which of the following is MOST likely preventing Ann from accessing the application from the desktop?
- A. Host-based firewall
- B. DLP
- C. Network-based firewall
- D. Web application firewall
- E. UTM
Answer: A
NEW QUESTION 363
After an identified security breach, an analyst is tasked to initiate the IR process. Which of the following is the NEXT step the analyst should take?
- A. Identification
- B. Documentation
- C. Recovery
- D. Escalation
- E. Preparation
Answer: A
NEW QUESTION 364
A vice president at a manufacturing organization is concerned about desktops being connected to the network. Employees need to log onto the desktops' local account to verify that a product is being created within specifications; otherwise, the desktops should be as isolated as possible.
Which of the following is the BEST way to accomplish this?
- A. Join the desktops to an ad-hoc network.
- B. Create a separate VLAN for the desktops.
- C. Air gap the desktops.
- D. Put the desktops in the DMZ.
Answer: C
NEW QUESTION 365
A systems administrator wants to provide balance between the security of a wireless network and usability.
The administrator is concerned with wireless encryption compatibility of older devices used by some employees. Which of the following would provide strong security and backward compatibility when accessing the wireless network?
- A. WEP with a 40-bit key
- B. WPA using a preshared key
- C. WPA2 using a RADIUS back-end for 802.1x authentication
- D. Open wireless network and SSL VPN
Answer: D
NEW QUESTION 366
You have just received some room and WiFi access control recommendations from a security consulting company. Click on each building to bring up available security controls. Please implement the following requirements:
The Chief Executive Officer's (CEO) office had multiple redundant security measures installed on the door to the office. Remove unnecessary redundancies to deploy three-factor authentication, while retaining the expensive iris render.
The Public Cafe has wireless available to customers. You need to secure the WAP with WPA and place a passphrase on the customer receipts.
In the Data Center you need to include authentication from the "something you know" category and take advantage of the existing smartcard reader on the door.
In the Help Desk Office, you need to require single factor authentication through the use of physical tokens given to guests by the receptionist.
The PII Office has redundant security measures in place. You need to eliminate the redundancy while maintaining three-factor authentication and retaining the more expensive controls.
Instructions: The original security controls for each office can be reset at any time by selecting the Reset button. Once you have met the above requirements for each office, select the Save button. When you have completed the entire simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.
Answer:
Explanation:
See the solution below.
Explanation
Solution as
NEW QUESTION 367
A security, who is analyzing the security of the company's web server, receives the following output:
Which of the following is the issue?
- A. Access violations
- B. Stored procedures
- C. Unencrypted credentials
- D. Code signing
Answer: C
NEW QUESTION 368
Multiple organizations operating in the same vertical want to provide seamless wireless access for their employees as they visit the other organizations. Which of the following should be implemented if all the organizations use the native 802.1x client on their mobile devices?
- A. RADIUS federation
- B. OAuth
- C. SAML
- D. OpenlD connect
- E. Shibboleth
Answer: B
NEW QUESTION 369
A company has a security policy that specifies all endpoint computing devices should be assigned a unique identifier that can be tracked via an inventory management system. Recent changes to airline security regulations have cause many executives in the company to travel with mini tablet devices instead of laptops.
These tablet devices are difficult to tag and track. An RDP application is used from the tablet to connect into the company network.
Which of the following should be implemented in order to meet the security policy requirements?
- A. RFID tagging system
- B. WS-security and geo-fencing
- C. Virtual desktop infrastructure (IDI)
- D. MDM software
- E. A hardware security module (HSM)
- F. Security Requirements Traceability Matrix (SRTM)
Answer: D
NEW QUESTION 370
An organization requires that all workstations he issued client computer certificates from the organization's PKI. Which of the following configurations should be implemented?
- A. LEAP
- B. EAP-TLS
- C. EAP-FAST/MSCHAPv2
- D. EAP-MD5
- E. EAP-PEAP
Answer: B
NEW QUESTION 371
A security analyst is performing a forensic investigation involving compromised account credentials. Using the Event Viewer, the analyst was able to defect the following message: "Special privileges assigned to new logon.' Several of these messages did not have a valid logon associated with the user before these privileges were assigned. Which of the following attacks is MOST likely being detected?
- A. Session replay
- B. Buffer overflow
- C. Cross-site scripting
- D. Pass-the-hash
Answer: B
NEW QUESTION 372
Multiple employees receive an email with a malicious attachment that begins to encrypt their hard drives and mapped shares on their devices when it is opened. The network and security teams perform the following actions:
Next, the teams want to re-enable the network shares. Which of the following BEST describes this phase of the incident response process?
- A. Lessons learned
- B. Containment
- C. Recovery
- D. Eradication
Answer: C
NEW QUESTION 373
A researcher has been analyzing large data sets for the last ten months. The researcher works with colleagues from other institutions and typically connects via SSH to retrieve additional data. Historically, this setup has worked without issue, but the researcher recently started getting the following message:
Which of the following network attacks Is the researcher MOST likely experiencing?
- A. ARP poisoning
- B. Man-in-the-middle
- C. MAC cloning
- D. Evil twin
Answer: B
Explanation:
Explanation
This is alarming because it could actually mean that you're connecting to a different server without knowing it.
If this new server is malicious then it would be able to view all data sent to and from your connection, which could be used by whoever set up the server. This is called a man-in-the-middle attack. This scenario is exactly what the "WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!" message is trying to warn you about.
NEW QUESTION 374
A penetration tester finds that a company's login credentials for the email client were client being sent in clear text. Which of the following should be done to provide encrypted logins to the email server?
- A. Enable MIME services and POP3.
- B. Enable SSH and LDAP credentials.
- C. Enable IPSec and configure SMTP.
- D. Enable an SSL certificate for IMAP services.
Answer: D
NEW QUESTION 375
A senior incident response manager receives a call about some external IPs communicating with internal computers during off hours. Which of the following types of malware is MOST likely causing this issue?
- A. Botnet
- B. Ransomware
- C. Armored virus
- D. Polymorphic malware
Answer: A
NEW QUESTION 376
A copy of a highly confidential salary report was recently found on a printer in the IT department. The human resources department does not have this specific printer mapped to its devices, and it is suspected that an employee in the IT department browsed to the share where the report was located and printed it without authorization. Which of the following technical controls would be the BEST choice to immediately prevent this from happening again?
- A. Restrict access to the share where the report resides to only human resources employees and enable auditing
- B. Place the human resources computers on a restricted VLAN and configure the ACL to prevent access from the IT department
- C. Implement a DLP solution and classify the report as confidential, restricting access only to human resources staff
- D. Have all members of the IT department review and sign the AUP and disciplinary policies
Answer: A
NEW QUESTION 377
Upon learning about a user who has reused the same password for the past several years, a security specialist reviews the logs. The following is an extraction of the report after the most recent password change requirement:
Which of the following security controls is the user's behavior targeting?
- A. Password history
- B. Password reuse
- C. Password expiration
- D. Password complexity
Answer: A
NEW QUESTION 378
Drag and drop the correct protocol to its default port.
Answer:
Explanation:
Explanation
FTP uses TCP port 21. Telnet uses port 23.
SSH uses TCP port 22.
All protocols encrypted by SSH, including SFTP, SHTTP, SCP, SExec, and slogin, also use TCP port 22.
Secure Copy Protocol (SCP) is a secure file-transfer facility based on SSH and Remote Copy Protocol (RCP).
Secure FTP (SFTP) is a secured alternative to standard File Transfer Protocol (FTP). SMTP uses TCP port 25.
Port 69 is used by TFTP.
SNMP
makes use of UDP ports 161 and 162. http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers
NEW QUESTION 379
Task: Determine the types of attacks below by selecting an option from the dropdown list.
Answer:
Explanation:
Explanation:
A: Phishing is the act of sending an email to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information that will be used for identity theft.
Phishing email will direct the user to visit a website where they are asked to update personal information, such as a password, credit card, social security, or bank account numbers, that the legitimate organization already has. The website, however, is bogus and set up only to steal the information the user enters on the page.
B: Whaling is a specific kind of malicious hacking within the more general category of phishing, which involves hunting for data that can be used by the hacker. In general, phishing efforts are focused on collecting personal data about users. In whaling, the targets are high-ranking bankers, executives or others in powerful positions or job titles. Hackers who engage in whaling often describe these efforts as "reeling in a big fish," applying a familiar metaphor to the process of scouring technologies for loopholes and opportunities for data theft. Those who are engaged in whaling may, for example, hack into specific networks where these powerful individuals work or store sensitive dat a. They may also set up keylogging or other malware on a work station associated with one of these executives. There are many ways that hackers can pursue whaling, leading C-level or top-level executives in business and government to stay vigilant about the possibility of cyber threats.
C: Vishing is the act of using the telephone in an attempt to scam the user into surrendering private information that will be used for identity theft. The scammer usually pretends to be a legitimate business, and fools the victim into thinking he or she will profit.
D: SPIM is a term sometimes used to refer to spam over IM (Instant Messaging). It's also called just spam, instant spam, or IM marketing. No matter what the name, it consists of unwanted messages transmitted through some form of instant messaging service, which can include Short Message Service (SMS) E: Social engineering is a non-technical method of intrusion hackers use that relies heavily on human interaction and often involves tricking people into breaking normal security procedures. It is one of the greatest threats that organizations today encounter. A social engineer runs what used to be called a "con game." For example, a person using social engineering to break into a computer network might try to gain the confidence of an authorized user and get them to reveal information that compromises the network's security. Social engineers often rely on the natural helpfulness of people as well as on their weaknesses. They might, for example, call the authorized employee with some kind of urgent problem that requires immediate network access. Appealing to vanity, appealing to authority, appealing to greed, and old-fashioned eavesdropping are other typical social engineering techniques.
http://www.webopedia.com/TERM/P/phishing.html
http://www.techopedia.com/definition/28643/whaling
http://www.webopedia.com/TERM/V/vishing.html
http://searchsecurity.techtarget.com/definition/social-engineering
NEW QUESTION 380
An administrator is configuring access to information located on a network file server named "Bowman".
The files are located in a folder named "BalkFiles". The files are only for use by the "Matthews" division and should be read-only. The security policy requires permissions for shares to be managed at the file system layer and also requires those permissions to be set according to a least privilege model. Security policy for this data type also dictates that administrator-level accounts on the system have full access to the files.
The administrator configures the file share according to the following table:
Which of the following rows has been misconfigured?
- A. Row 1
- B. Row 3
- C. Row 2
- D. Row 5
- E. Row 4
Answer: E
NEW QUESTION 381
A security analyst is hardening an authentication server. One of the primary requirements is to ensure there is mutual authentication and delegation. Given these requirements, which of the following technologies should the analyst recommend and configure?
- A. NTLM services
- B. CHAP services
- C. LDAP services
- D. Kerberos services
Answer: D
Explanation:
Only Kerberos that can do Mutual Auth and Delegation.
https://docs.microsoft.com/en-us/windows-server/security/kerberos/kerberos-authentication- overview
NEW QUESTION 382
......
CompTIA Exam Practice Test To Gain Brilliante Result: https://www.pass4suresvce.com/SYO-501-pass4sure-vce-dumps.html
Tested Material Used To SYO-501: https://drive.google.com/open?id=1Ld8zqmdUsBLTPsY0tTfBiyjRB0tUaXDG