[Jan 25, 2022] Valid SYO-501 Test Answers & SYO-501 Exam PDF
Valid Security+ SYO-501 Dumps Ensure Your Passing
NEW QUESTION 372
Which of the following explains why vendors publish MD5 values when they provide software patches for their customers to download over the Internet?
- A. The recipient can request future updates to the software using the published MD5 value.
- B. The recipient can verify the authenticity of the site used to download the patch.
- C. The recipient can successfully activate the new software patch.
- D. The recipient can verify integrity of the software patch.
Answer: D
NEW QUESTION 373
Attackers have been using revoked certificates for MITM attacks to steal credentials from employees of Company.com. Which of the following options should Company.com implement to mitigate these attacks?
- A. Key escrow
- B. Extended validation certificate
- C. Object identifiers
- D. OCSP stapling
- E. Captive portal
Answer: D
NEW QUESTION 374
A company is terminating an employee for misbehavior. Which of the following steps is MOST important in the process of disengagement from this employee?
- A. Obtain a list of passwords used by the employee.
- B. Have the employee sign an NDA before departing.
- C. Generate a report on outstanding projects the employee handled.
- D. Have the employee surrender company identification.
Answer: B
NEW QUESTION 375
The application team within a company is asking the security team to investigate why its application is slow after an upgrade. The source of the team's application is 10.13.136.9. and the destination IP is 10.17.36.5. The security analyst pulls the logs from the endpoint security software but sees nothing is being blocked. The analyst then looks at the UTM firewall logs and sees the following:
Which of the following should the security analyst request NEXT based on the UTM firewall analysis?
- A. Request the application team to allow TCP port 87 to listen on 10.17.36.5.
- B. Request the network team to turn of IPS for 10.13.136.8 going to 10.17.36.5.
- C. Request the network team to open port 1433 from 10.13.136.9 to 10.17.36.5.
- D. Request the application team to reconfigure the application and allow RPC communication.
Answer: C
NEW QUESTION 376
During certain vulnerability scanning scenarios, It is possible for the target system to react in unexpected ways. This type of scenario is MOST commonly known as:
- A. intrusive testing.
- B. a butter overflow.
- C. a race condition
- D. active reconnaissance.
Answer: D
NEW QUESTION 377
A forensic analyst is asked to respond to an ongoing network attack on a server. Place the items in the list below in the correct order in which the forensic analyst should preserve them.
Answer:
Explanation:
Explanation:
When dealing with multiple issues, address them in order of volatility (OOV); always deal with the most volatile first. Volatility can be thought of as the amount of time that you have to collect certain data before a window of opportunity is gone. Naturally, in an investigation you want to collect everything, but some data will exist longer than others, and you cannot possibly collect all of it once. As an example, the OOV in an investigation may be RAM, hard drive data, CDs/DVDs, and printouts.
Order of volatility: Capture system images as a snapshot of what exists, look at network traffic and logs, capture any relevant video/screenshots/hashes, record time offset on the systems, talk to witnesses, and track total man-hours and expenses associated with the investigation.
NEW QUESTION 378
Which of the following provides PFS?
- A. AES
- B. RC4
- C. HMAC
- D. DHE
Answer: D
NEW QUESTION 379
Joe, an employee, wants to show his colleagues how much he knows about smartphones.
Joe demonstrates a free movie application that he installed from a third party on his corporate smartphone. Joe's colleagues were unable to find the application in the app stores. Which of the following allowed Joe to install the application? (Select TWO).
- A. Ad-hoc connections
- B. Tethering
- C. Near-field communication
- D. Rooting/jailbreaking
- E. Sideloading
Answer: C,D
NEW QUESTION 380
A security analyst is asked to check the configuration of the company's DNS service on the server. Which of the following command line tools should the analyst use to perform the initial assessment?
- A. tcpdump
- B. nslookup/dig
- C. ipconfig/ifconfig
- D. tracert
Answer: B
NEW QUESTION 381
A Chief Information Officer (CIO) recently saw on the news that a significant security flaws exists with a specific version of a technology the company uses to support many critical application. The CIO wants to know if this reported vulnerability exists in the organization and, if so, to what extent the company could be harmed. Which of the following would BEST provide the needed information?
- A. Patching assessment report
- B. Active reconnaissance
- C. Penetration test
- D. Vulnerability scan
Answer: C
NEW QUESTION 382
A security analyst is hardening an authentication server. One of the primary requirements is to ensure there is mutual authentication and delegation. Given these requirements, which of the following technologies should the analyst recommend and configure?
- A. LDAP services
- B. CHAP services
- C. Kerberos services
- D. NTLM services
Answer: C
Explanation:
Only Kerberos that can do Mutual Auth and Delegation.
NEW QUESTION 383
Which of the following characteristics differentiate a rainbow table attack from a brute force attack? (Select TWO).
- A. Rainbow table attacks bypass maximum failed login restrictions.
- B. Rainbow table attacks greatly reduce compute cycles at attack time.
- C. Rainbow tables must include precompiled hashes.
- D. Rainbow table attacks do not require access to hashed passwords.
- E. Rainbow table attacks must be performed on the network.
Answer: C,E
NEW QUESTION 384
A newly purchased corporate WAP needs to be configured in the MOST secure manner possible.
INSTRUCTIONS
Please click on the below items on the network diagram and configure them accordingly:
* WAP
* DHCP Server
* AAA Server
* Wireless Controller
* LDAP Server
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
Explanation
Wireless Access Point
Network Mode - G only
Wireless Channel - 11
Wireless SSID Broadcast - disable
Security settings - WPA2 Professional
NEW QUESTION 385
A security specialist is notified about a certificate warning that users receive when using a new internal website. After being given the URL from one of the users and seeing the warning, the security specialist inspects the certificate and realizes it has been issued to the IP address, which is how the developers reach the site.
Which of the following would BEST resolve the issue?
- A. PEM
- B. OID
- C. OSCP
- D. SAN
Answer: C
NEW QUESTION 386
A security technician has been given the task of preserving emails that are potentially involved in a dispute between a company and a contractor.
Which of the following BEST describes this forensic concept?
- A. Data acquisition
- B. Chain of custody
- C. Order of volatility
- D. Legal hold
Answer: D
NEW QUESTION 387
Which of the following BEST explains 'likelihood of occurrence'?
- A. The potential for a system to have a weakness or flaw that might be exploited
- B. The overall impact to the organization once all factors have been considered
- C. The chance that an event will happen regardless of how much damage it may cause
- D. The probability that a threat actor will target and attempt to exploit an organization's systems
Answer: D
NEW QUESTION 388
A technician wants to add wireless guest capabilities to an enterprise wireless network that is currently implementing 802.1X EAP-TLS The guest network must
* Support client Isolation.
* Issue a unique encryption key to each client.
* Allow guests to register using their personal email addresses
Which of the following should the technician implement? (Select TWO),
- A. P12 certificate format
- B. Captive portal
- C. EAP-PEAP
- D. WPA2-PSK
- E. RADIUS Federation
- F. A separate guest SSID
Answer: B,E
NEW QUESTION 389
......
Our SY0-501 practice test will include those topics:
- Identity and Access Management 16%
- Cryptography and PKI 12%
- Risk Management 14%
- Threats, Attacks and Vulnerabilities 21%
- Architecture and Design 15%
- Technologies and Tools 22%
For more info visit: CompTIA Security
Access & Identity Management
To excel in SY0-501 exam, you must understand the concepts of identity and access management, the implementation of access and identity management controls, the practices of account management, and the configuration and installation of access and identity servers. Plus, you need to be aware of LDAP, Kerberos, tokens, account types, and multifactor authentication. Besides these, candidates will also have to master such concepts as database security, password history, and guest accounts if to name a few.
SYO-501 Dumps Real Exam Questions Test Engine Dumps Training: https://www.guidetorrent.com/SYO-501-pdf-free-download.html