CompTIA SY0-501 Real Exam Questions Test Engine Dumps Training With 715 Questions [Q12-Q29]

NO.12 A security administrator is given the security and availability profiles for servers that are being deployed.
* Match each RAID type with the correct configuration and MINIMUM number of drives.
* Review the server profiles and match them with the appropriate RAID type based on integrity, availability, I/O, storage requirements. Instructions:
* All drive definitions can be dragged as many times as necessary
* Not all placeholders may be filled in the RAID configuration boxes
* If parity is required, please select the appropriate number of parity checkboxes
* Server profiles may be dragged only once
If at any time you would like to bring back the initial state of the simulation, please select the Reset button.
When you have completed the simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.

NO.13 A security analyst wants to harden the company’s VoIP PBX. The analyst is worried that credentials may
be intercepted and compromised when IP phones authenticate with the BPX. Which of the following would
best prevent this from occurring?

NO.14 Which of the following is the primary reason for implementing layered security measures in a cybersecurity architecture?

NO.15 The administrator installs database software to encrypt each field as it is written to disk.
Which of the following describes the encrypted data?

NO.16 A company recently updated its website to increase sales. The new website uses PHP forms for leads and provides a directory with sales staff and their phone numbers. A systems administrator is concerned with the new website and provides the following log to support the concern:

Which of the following is the systems administrator MOST likely to suggest to the Chief Information Security Officer (CISO) based on the above?

NO.17 Which of the following strategies helps reduce risk if a rollback is needed when upgrading a critical system platform?

NO.18 New magnetic locks were ordered for an entire building. In accordance with company policy, employee
safety is the top priority.
In case of a fire where electricity is cut, which of the following should be taken into consideration when
installing the new locks?

NO.19 Which of the following is a symmetric encryption that applies the encryption over multiple iterations?

NO.20 Ann, a security administrator, has been instructed to perform fuzz-based testing on the company’s applications.
Which of the following best describes what she will do?

NO.21 A security analyst runs a monthly file integrity check on the main web server. When analyzing the logs, the analyst observed the following entry:

No OS patches were applied to this server during this period. Considering the log output, which of the following is the BEST conclusion?

NO.22 A security analyst is reviewing the following packet capture of an attack directed at a company’s server located in the DMZ:

Which of the following ACLs provides the BEST protection against the above attack and any further attacks from the same IP, while minimizing service interruption?

NO.23 Which of the following techniques can be bypass a user or computer’s web browser privacy settings?
(Select Two)

NO.24 During the penetration testing of an organization, the tester was provided with the names of a few key servers, along with their IP address. Which of the following is the organization conducting?

NO.25 A security analyst is hardening a server with the directory services role installed. The analyst must ensure LDAP traffic cannot be monitored or sniffed and maintains compatibility with LDAP clients. Which of the following should the analyst implement to meet these requirements? (Select two.)

NO.26 In an effort to reduce data storage requirements, some company devices to hash every file and eliminate duplicates. The data processing routines are time sensitive so the hashing algorithm is fast and supported on a wide range of systems.
Which of the following algorithms is BEST suited for this purpose?

NO.27 A security engineer is setting up passwordless authentication for the first time.
INSTRUCTIONS
Use the minimum set of commands to set this up and verify that it works. Commands cannot be reused.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

NO.28 An organization’s internal auditor discovers that large sums of money have recently been paid to a vendor that management does not recognize. The IT security department is asked to investigate the organizations the organization’s ERP system to determine how the accounts payable module has been used to make these vendor payments.
The IT security department finds the following security configuration for the accounts payable module:
New Vendor Entry – Required Role: Accounts Payable Clerk

New Vendor Approval – Required Role: Accounts Payable Clerk

Vendor Payment Entry – Required Role: Accounts Payable Clerk

Vendor Payment Approval – Required Role: Accounts Payable Manager

Which of the following changes to the security configuration of the accounts payable module would BEST mitigate the risk?

NO.29 As part of a new industry regulation, companies are required to utilize secure, standardized OS settings. A technical must ensure the OS settings are hardened. Which of the following is the BEST way to do this?