100% Pass Guarantee with New [2021] SY0-501 Exam Dumps
                     CompT IA
SY0- 501
https://www.exam4lead.com/comptia/sy0-501-dumps.html
Practice Test CompTIA - SY0-501
Topic 1, Exam Pool A
Question #:1 - (Exam Topic 1)
Despite having implemented password policies, users continue to set the same weak passwords and reuse old
passwords. Which of the following technical controls would help prevent these policy violations? (Select two.)
A.  Password expiration
B.  Password length
C.  Password complexity
D.  Password history
E.  Password lockout
Answer: C D
Question #:2 - (Exam Topic 1)
A security analyst is hardening a server with the directory services role installed. The analyst must ensure
LDAP traffic cannot be monitored or sniffed and maintains compatibility with LDAP clients. Which of the
following should the analyst implement to meet these requirements? (Select two.)
A.  Generate an X.509-compliant certificate that is signed by a trusted CA.
B.  Install and configure an SSH tunnel on the LDAP server.
C.  Ensure port 389 is open between the clients and the servers using the communication.
D.  Ensure port 636 is open between the clients and the servers using the communication.
E.  Remote the LDAP directory service role from the server.
Answer: A D
2 of 12
Practice Test CompTIA - SY0-501
Topic 6, Exam Pool F (New Questions)
Question #:3 - (Exam Topic 6)
Select the appropriate attack and remediation from each drop-down list to label the corresponding attack with
its remediation.
INSTRUCTIONS
Not all attacks and remediation actions will be used. If at any time you would like to bring back the initial state
of the simulation, please click the Reset All button.
3 of 12
Practice Test CompTIA - SY0-501
Answer:
4 of 12
Practice Test CompTIA - SY0-501
Explanation
5 of 12
Practice Test CompTIA - SY0-501
6 of 12
Practice Test CompTIA - SY0-501
Question #:4 - (Exam Topic 6)
A security analyst is emailing PII in a spreadsheet file to an audit validator for after-actions related to a
security assessment. The analyst must make sure the PII data is protected with the following minimum
requirements:
Ensure confidentiality at rest.
Ensure the integrity of the original email message.
Which of the following controls would ensure these data security requirements are carried out?
A.  Encrypt and sign the email using S/MIME.
B.  Encrypt the email and send it using TLS.
C.  Hash the email using SHA-1.
D.  Sign the email using MD5
Answer: A
7 of 12
Practice Test CompTIA - SY0-501
Topic 5, Exam Pool E
Question #:5 - (Exam Topic 5)
A security analyst is acquiring data from a potential network incident. Which of the following evidence is the
analyst MOST likely to obtain to determine the incident?
A.  Volatile memory capture
B.  Traffic and logs
C.  Screenshots
D.  System image capture
Answer: B
Question #:6 - (Exam Topic 5)
When it comes to cloud computing, if one of the requirements for a project is to have the most control over the
systems in the cloud, which of the following is a service model that would be BEST suited for this goal?
A.  Infrastructure
B.  Platform
C.  Software
D.  Virtualization
Answer: A
8 of 12
Practice Test CompTIA - SY0-501
Topic 3, Exam Pool C
Question #:7 - (Exam Topic 3)
A software development company needs to share information between two remote servers, using encryption to
protect it. A programmer suggests developing a new encryption protocol, arguing that using an unknown
protocol with secure, existing cryptographic algorithm libraries will provide strong encryption without being
susceptible to attacks on other known protocols. Which of the following summarizes the BEST response to the
programmer's proposal?
A.  The newly developed protocol will only be as secure as the underlying cryptographic algorithms used.
B.  New protocols often introduce unexpected vulnerabilities, even when developed with otherwise secure
and tested algorithm libraries.
C.  A programmer should have specialized training in protocol development before attempting to design a
new encryption protocol.
D.  The obscurity value of unproven protocols against attacks often outweighs the potential for introducing
new vulnerabilities.
Answer: B
Question #:8 - (Exam Topic 3)
Joe is exchanging encrypted email with another party. Joe encrypts the initial email with a key. When Joe
receives a response, he is unable to decrypt the response with the same key he used initially. Which of the
following would explain the situation?
A.  An ephemeral key was used for one of the messages
B.  A stream cipher was used for the initial email; a block cipher was used for the reply
C.  Out-of-band key exchange has taken place
D.  Asymmetric encryption is being used
Answer: D
Explanation
Asymmetric algorithms use two keys to encrypt and decrypt datA. These asymmetric keys are referred to as
the public key and the private key. The sender uses the public key to encrypt a message, and the receiver uses
the private key to decrypt the message; what one key does, the other one undoes.
9 of 12
Practice Test CompTIA - SY0-501
Topic 2, Exam Pool B
Question #:9 - (Exam Topic 2)
A vulnerability scanner that uses its running service’s access level to better assess vulnerabilities across
multiple assets within an organization is performing a:
A.  Credentialed scan.
B.  Non-intrusive scan.
C.  Privilege escalation test.
D.  Passive scan.
Answer: A
Question #:10 - (Exam Topic 2)
An organization uses SSO authentication for employee access to network resources. When an employee
resigns, as per the organization’s security policy, the employee’s access to all network resources is terminated
immediately. Two weeks later, the former employee sends an email to the help desk for a password reset to
access payroll information from the human resources server. Which of the following represents the BEST
course of action?
A.  Approve the former employee’s request, as a password reset would give the former employee access to
only the human resources server.
B.  Deny the former employee’s request, since the password reset request came from an external email
address.
C.  Deny the former employee’s request, as a password reset would give the employee access to all network
resources.
D.  Approve the former employee’s request, as there would not be a security issue with the former employee
gaining access to network resources.
Answer: C
https://www.exam4lead.com/comptia/sy0-501-dumps.html
11 of 12