Pass Your SYO-501 Exam Easily - Real SYO-501 Practice Dump Updated Jan 12, 2022
2022 Realistic Verified Free CompTIA SYO-501 Exam Questions
Tools and Technologies
‘Tools and technologies' is a comprehensive topic that establishes the knowledge of network components, both hardware and software solutions, software tools, and troubleshooting of security issues. It also proves your mastery of security technologies, secure mobile devices, and secure protocols. Thus, you must be knowledgeable about firewall, VPN concentrator, protocol analyzer, event anomalies, DLP, honeynets, SCADA/ICS, and lock types.
NEW QUESTION 295
After a user reports slow computer performance, a system administrator detects a suspicious file, which was installed as part of a freeware software package. The systems administrator reviews the output below:
Based on the above information, which of the following types of malware was installed on the user's computer?
- A. Bot
- B. Worm
- C. Keylogger
- D. Spyware
- E. RAT
Answer: E
NEW QUESTION 296
A system's administrator has finished configuring firewall ACL to allow access to a new web server.
The security administrator confirms form the following packet capture that there is network traffic from the internet to the web server:
The company's internal auditor issues a security finding and requests that immediate action be taken. With which of the following is the auditor MOST concerned?
- A. Implicit deny
- B. Clear text credentials
- C. Misconfigured firewall
- D. Default configuration
Answer: B
NEW QUESTION 297
An office recently completed digitizing all its paper records. Joe, the data custodian, has been tasked with the disposal of the paper files, which include:
* Intellectual property
* Payroll records
* Financial information
* Drug screening results
Which of the following is the BEST way to dispose of these items?
- A. Shredding
- B. Deidentifying
- C. Recycling
- D. Pulping
Answer: D
NEW QUESTION 298
Multiple organizations operating in the same vertical want to provide seamless wireless access for their employees as they visit the other organizations. Which of the following should be implemented if all the organizations use the native 802.1x client on their mobile devices?
- A. Shibboleth
- B. OAuth
- C. RADIUS federation
- D. SAML
- E. OpenID connect
Answer: C
Explanation:
Reference:
http://archive.oreilly.com/pub/a/wireless/2005/01/01/authentication.html
NEW QUESTION 299
A user's laptop is being analyzed Because malware was discovered. The forensics analyst has taken the laptop off the corporate network. Following order of volatility, which of the following actions should be performed FIRST?
- A. Dump the contents of the laptop's memory.
- B. Engage the human resources department.
- C. Take hashes of data
- D. Clone me hard drive for analysis.
- E. Inform law enforcement.
Answer: A
NEW QUESTION 300
Which of the following is an example of federated access management?
- A. Applying a new user account with a complex password
- B. Implementing a AAA framework for network access
- C. Using a popular website login to provide access to another website
Explanation - D. Windows passing user credentials on a peer-to-peer network
Answer: C
NEW QUESTION 301
Which of the following impacts MOST likely result from poor exception handling?
- A. Widespread loss of condential data
- B. Privilege escalation
- C. Network-wide resource exhaustion
- D. Local disruption of services
Answer: D
NEW QUESTION 302
An organization is trying to decide which type of access control is most appropriate for the network. The current access control approach is too complex and requires significant overhead.
Management would like to simplify the access control and provide user with the ability to determine what permissions should be applied to files, document, and directories. The access control method that BEST satisfies these objectives is:
- A. Rule-based access control
- B. Role-based access control
- C. Mandatory access control
- D. Discretionary access control
Answer: D
NEW QUESTION 303
A red team initiated a DoS attack on the management interface of a switch using a known vulnerability The monitoring solution then raised an alert prompting a network engineer to log in to the switch to diagnose the issue When the engineer logged in. the red team was able to capture the credentials and subsequently log in to the switch Which of the following actions should the network team take to prevent this type of breach from reoccurring?
- A. Encrypt all communications with TLS 1 3
- B. Transition from SNMPv2c to SNMPv3 with AES-256
- C. Use a password manager with complex passwords
- D. Enable Secure Shell and disable Telnet
Answer: D
NEW QUESTION 304
A system administrator wants to provide balance between the security of a wireless network and usability.
The administrator is concerned with wireless encryption compatibility of older devices used by some employees. Which of the following would provide strong security and backward compatibility when accessing the wireless network?
- A. Open wireless network and SSL VPN
- B. WEP with a 40-bit key
- C. WPA using a preshared key
- D. WPA2 using a RADIUS back-end for 802.1x authentication
Answer: C
NEW QUESTION 305
The Chief Security Officer (CISO) at a multinational banking corporation is reviewing a plan to upgrade the entire corporate IT infrastructure. The architecture consists of a centralized cloud environment hosting the majority of data, small server clusters at each corporate location to handle the majority of customer transaction processing, ATMs, and a new mobile banking application accessible from smartphones, tablets, and the Internet via HTTP. The corporation does business having varying data retention and privacy laws. Which of the following technical modifications to the architecture and corresponding security controls should be implemented to provide the MOST complete protection of data?
- A. Store customer data based on national borders, ensure end-to end encryption between ATMs, end users, and servers, test redundancy and COOP plans to ensure data is not inadvertently shifted from one legal jurisdiction to another with more stringent regulations
- B. Ensure all data is encryption according to the most stringent regulatory guidance applicable, implement encryption for data in-transit between data centers, increase data availability by replicating all data, transaction data, logs between each corporate location
- C. Revoke exiting root certificates, re-issue new customer certificates, and ensure all transactions are digitally signed to minimize fraud, implement encryption for data in-transit between data centers
- D. Install redundant servers to handle corporate customer processing, encrypt all customer data to ease the transfer from one country to another, implement end-to-end encryption between mobile applications and the cloud.
Answer: A
NEW QUESTION 306
Despite having implemented password policies, users continue to set the same weak passwords and reuse old passwords. Which of the following technical controls would help prevent these policy violations? (Select two.)
- A. Password expiration
- B. Password complexity
- C. Password history
- D. Password length
- E. Password lockout
Answer: A,C
NEW QUESTION 307
A company needs to fix some audit findings related to its physical security. A key finding was that multiple people could physically enter a location at the same time. Which of the following is the BEST control to address this audit finding?
- A. Mantrap
- B. Faraday cage
- C. Biometrics
- D. Proximity cards
Answer: A
NEW QUESTION 308
A security analyst wants to harden the company's VoIP PBX. The analyst is worried that credentials may be intercepted and compromised when IP phones authenticate with the BPX.
Which of the following would best prevent this from occurring?
- A. Place the phones and PBX in their own VLAN.
- B. Require SIPS on connections to the PBX.
- C. Implement SRTP between the phones and the PBX.
- D. Restrict the phone connections to the PBX.
Answer: B
NEW QUESTION 309
A technician receives a device with the following anomalies:
Frequent pop-up ads
Show response-time switching between active programs Unresponsive peripherals
The technician reviews the following log file entries:
File Name Source MD5 Target MD5
Status
antivirus.exe F794F21CD33E4F57890DDEA5CF267ED2 F794F21CD33E4F57890DDEA5CF267ED2 Automatic iexplore.exe 7FAAF21CD33E4F57890DDEA5CF29CCEA AA87F21CD33E4F57890DDEAEE2197333 Automatic service.exe 77FF390CD33E4F57890DDEA5CF28881F 77FF390CD33E4F57890DDEA5CF28881F Manual USB.exe E289F21CD33E4F57890DDEA5CF28EDC0 E289F21CD33E4F57890DDEA5CF28EDC0 Stopped
Based on the above output, which of the following should be reviewed?
- A. The data execution prevention
- B. The removable media control
- C. The web application firewall
- D. The file integrity check
Answer: D
NEW QUESTION 310
......
SYO-501 Real Exam Questions and Answers FREE: https://www.itcertmagic.com/CompTIA/real-SYO-501-exam-prep-dumps.html
SYO-501 Exam Questions | Real SYO-501 Practice Dumps: https://drive.google.com/open?id=11WMbaq8XV6dFg637LxB0aIxhcKcYxSTX