CompTIA Security+ Certification - SY0-501 Free Exam Questions

QUESTION NO: 1
After entering a username and password, an administrator must draw a gesture on a touch screen. Which of the following demonstrates what the administrator is providing?

Correct Answer: B Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 2
A security consultant was asked to revise the security baselines that are utilized by a large organization. Although the company provides different platforms for its staff, including desktops, laptops, and mobile devices, the applications do not vary by platform. Which of the following should the consultant recommend? (Select Two).

Correct Answer: A,E Vote an answer
QUESTION NO: 3
Which of the following describes the BEST approach for deploying application patches?

Correct Answer: A Vote an answer
QUESTION NO: 4
Which of the following is a benefit of credentialed vulnerability scans?

Correct Answer: D Vote an answer
QUESTION NO: 5
A company is experiencing an increasing number of systems that are locking up on Windows startup. The security analyst clones a machine, enters into safe mode, and discovers a file in the startup process that runs Wstart.bat.
@echo off
:asdhbawdhbasdhbawdhb
start notepad.exe
start notepad.exe
start calculator.exe
start calculator.exe
goto asdhbawdhbasdhbawdhb
Given the file contents and the system's issues, which of the following types of malware is present?

Correct Answer: A Vote an answer
QUESTION NO: 6
A user's laptop is experiencing general slowness following the user's return from an extended time out of the office. After a week, the security team looks at the laptop, but nothing appears out of order. The only noticeable issue is that svchost.exe keeps launching even after the security team kills the process. After running netstat, the team notes svchost.exe is listening on port 443. Using an IoC creation tool, a security analyst does the following:
OR--
AND AND
file MD5 contains adf321122abce28873aad3e12f262a12c
PROCESS name contains svchost.exe PROCESS arguments does not contain -k fiLENAME contains svchost.exe fiLE DIRECTORY is not %system32% Based on the IoCs created and the netstat output, which of the following types of malware is present?

Correct Answer: C Vote an answer
QUESTION NO: 7
When conducting a penetration test, a pivot is used to describe a scenario in which:

Correct Answer: A Vote an answer
QUESTION NO: 8
A company utilizes 802.11 for all client connectivity within a facility. Users in one part of the building are reporting they are unable to access company resources when connected to the company SSID. Which of the following should the security administrator use to assess connectivity?

Correct Answer: C Vote an answer
QUESTION NO: 9
A company recently experienced a security breach. The security start determined that the intrusion was due to an out-of-date proprietary software program running on a non-compliant server The server was imaged and copied onto a hardened VM. with the previous connections re-established. Which of the Mowing Is the NEXT step in the incident response process?

Correct Answer: E Vote an answer
QUESTION NO: 10
Which of the following cloud models is used to share resources and information with business partners and like businesses without allowing everyone else access?

Correct Answer: B Vote an answer
QUESTION NO: 11
An organization has decided to host its web application and database in the cloud. Which of the following BEST describes the security concerns for this decision?

Correct Answer: B Vote an answer
QUESTION NO: 12
A systems engineer is setting up a RADIUS server to support a wireless network that uses certificate authentication. Which of the following protocols must be supported by both the RADIUS server and the WAPs?

Correct Answer: C Vote an answer
QUESTION NO: 13
A company has a backup site with equipment on site without any dat
a. This is an example of:

Correct Answer: B Vote an answer

QUALITY AND VALUE

Actual4test Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.

Tested and Approved

We are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.

Easy to Pass

If you prepare for the exams using our Actual4test testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.

Try Before Buy

Actual4test offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.