sy0-501 practice test

The latest updated CompTIA SY0-501 exam dumps and free SY0-501 exam practice questions and answers! Latest updates from Lead4Pass CompTIA SY0-501 Dumps PDF and SY0-501 Dumps VCE, Lead4Pass SY0-501 exam questions updated and answers corrected! Get the full CompTIA SY0-501 dumps from https://www.leads4pass.com/sy0-501.html (VCE&PDF)

Latest SY0-501 PDF for free

Share the CompTIA SY0-501 Dumps PDF for free From Lead4pass SY0-501 Dumps part of the distraction collected on Google Drive shared by Lead4pass
https://drive.google.com/file/d/1BLdAk-r7Cm6QHkTBD59BynsYlURVIBvw/

The latest updated CompTIA SY0-501 Exam Practice Questions and Answers Online Practice Test is free to share from Lead4Pass (Q1-Q13)

QUESTION 1
Joe, a backup administrator, wants to implement a solution that will reduce the restoration time of physical servers.
Which of the following is the BEST method for Joe to use?
A. Differential
B. Incremental
C. Full
D. Snapshots
Correct Answer: C

 

QUESTION 2
During a recent audit, it was discovered that many services and desktops were missing security patches. Which of the
following BEST describes the assessment that was performed to discover this issue?
A. Network mapping
B. Vulnerability scan
C. Port Scan
D. Protocol analysis
Correct Answer: B

 

QUESTION 3
A security analyst is reviewing the following packet capture of an attack directed at a company\\’s server located in the
DMZ:

Which of the following ACLs provides the BEST protection against the above attack and any further attacks from the same IP, while minimizing service interruption?
A. DENY TCO From ANY to 172.31.64.4
B. Deny UDP from 192.168.1.0/24 to 172.31.67.0/24
C. Deny IP from 192.168.1.10/32 to 0.0.0.0/0
D. Deny TCP from 192.168.1.10 to 172.31.67.4
Correct Answer: D

 

QUESTION 4
A security administrator has replaced the firewall and notices a number of dropped connections. After looking at the
data the security administrator sees the following information that was flagged as a possible issue:
“SELECT * FROM” and `1\\’=\\’1\\’
Which of the following can the security administrator determine from this?
A. An SQL injection attack is being attempted
B. Legitimate connections are being dropped
C. A network scan is being done on the system
D. An XSS attack is being attempted
Correct Answer: A

 

QUESTION 5
During an incident, a company\\’s CIRT determines it is necessary to observe the continued network-based transactions
between a callback domain and the malware running on an enterprise PC. Which of the following techniques would be
BEST to enable this activity while reducing the risk of lateral spread and the risk that the adversary would notice any
changes?
A. Physically move the PC to a separate Internet point of presence.
B. Create and apply microsegmentation rules.
C. Emulate the malware in a heavily monitored DMZ segment.
D. Apply network blacklisting rules for the adversary domain.
Correct Answer: BA

 

QUESTION 6
Which of the following access management concepts is MOST closely associated with the use of a password or PIN??
A. Authorization
B. Authentication
C. Accounting
D. Identification
Correct Answer: B

 

QUESTION 7
A company exchanges information with a business partner. An annual audit of the business partner is conducted
against the SLA in order to verify:
A. Performance and service delivery metrics
B. Backups are being performed and tested
C. Data ownership is being maintained and audited
D. Risk awareness is being adhered to and enforced
Correct Answer: A

 

QUESTION 8
Which of the following cryptography algorithms will produce a fixed-length, irreversible output?
A. AES
B. 3DES
C. RSA
D. MD5
Correct Answer: D
Exam B

 

QUESTION 9
To help prevent one job role from having sufficient access to create, modify, and approve payroll data, which of the
following practices should be employed?
A. Least privilege
B. Job rotation
C. Background checks
D. Separation of duties
Correct Answer: D

 

QUESTION 10
A forensic analyst is asked to respond to an ongoing network attack on a server. Place the items in the list below in the
correct order in which the forensic analyst should preserve them.
Select and Place:
Correct Answer:

When dealing with multiple issues, address them in order of volatility (OOV); always deal with the most volatile first.
Volatility can be thought of as the amount of time that you have to collect certain data before a window of opportunity is
gone.
Naturally, in an investigation, you want to collect everything, but some data will exist longer than others, and you cannot
possibly collect all of it once. As an example, the OOV in an investigation may be RAM, hard drive data, CDs/DVDs,
and
printouts.
Order of volatility: Capture system images as a snapshot of what exists, look at network traffic and logs, capture any
relevant video/screenshots/hashes, record time offset on the systems, talk to witnesses and track total man-hours and
expenses associated with the investigation.

 

QUESTION 11
A manager makes an unannounced visit to the marketing department and performs a walk-through of the office. The
manager observes unclaimed documents on printers. A closer look at these documents reveals employee names,
addresses ages, birth dates, marital/dependent statuses, and favorite ice cream flavors. The manager brings this to the
attention of the marketing department head. The manager believes this information to be Pll, but the marketing head
does not agree. Having reached a stalemate, which of the following is the most appropriate action to take NEXT?
A. Elevate to the Chief Executive Officer (CEO) for redress, change from the top down usually succeeds.
B. Find the privacy officer in the organization and let the officer act as the arbiter.
C. Notify employees whose names are on these files that their personal information is being compromised.
D. To maintain a working relationship with marketing, quietly record the incident in the risk register.
Correct Answer: B

 

QUESTION 12
Ann. An employee in the payroll department has contacted the help desk citing multiple issues with her device,
including Slow performance Word documents, PDFs, and images no longer opening A pop-up Ann states the issues
began after she opened an invoice that a vendor emailed to her. Upon opening the invoice, she had to click several
security warnings to view it in her word processor.
With which of the following is the device MOST likely infected?
A. Spyware
B. Crypto-malware
C. Rootkit
D. Backdoor
Correct Answer: D

 

QUESTION 13
A network administrator is setting up wireless access points in all the conference rooms and wants to authenticate
devices using PKI. Which of the following should the administrator configure?
A. A captive portal
B. PSK
C. 802.1X
D. WPS
Correct Answer: C

---

Braindump4it shares the latest updated CompTIA SY0-501 exam exercise questions, SY0-501 dumps pdf for free.
All exam questions and answers come from the Lead4pass exam dumps shared part! Lead4pass updates throughout the year and shares a portion of your exam questions for free to help you understand the exam content and enhance your exam experience!
Get the full CompTIA SY0-501 exam dumps questions at https://www.leads4pass.com/sy0-501.html (pdf&vce)

ps.

Get free CompTIA SY0-501 dumps PDF online: https://drive.google.com/file/d/1BLdAk-r7Cm6QHkTBD59BynsYlURVIBvw/