CompTIA CompTIA Security+ RC0-501 Questions & Answers

• Question 141:

  A network operations manager has added a second row of server racks in the datacenter. These racks face the opposite direction of the first row of racks. Which of the following is the reason the manager installed the racks this way?

  A. To lower energy consumption by sharing power outlets

  B. To create environmental hot and cold isles

  C. To eliminate the potential for electromagnetic interference

  D. To maximize fire suppression capabilities

  Correct Answer: B

• Question 142:

  Joe, the security administrator, sees this in a vulnerability scan report:

  "The server 10.1.2.232 is running Apache 2.2.20 which may be vulnerable to a mod_cgi explogt." Joe verifies that the mod_cgi module is not enabled on 10.1.2.232. This message is an example of:

  A. a threat.

  B. a risk.

  C. a false negative.

  D. a false positive.

  Correct Answer: D

• Question 143:

  A security analyst wishes to increase the security of an FTP server. Currently, all trails to the FTP server is unencrypted. Users connecting to the FTP server use a variety of modem FTP client software. The security analyst wants to keep the

  same port and protocol, while also still allowing unencrypted connections.

  Which of the following would BEST accomplish these goals?

  A. Require the SFTP protocol to connect to the file server.

  B. Use implicit TLS on the FTP server.

  C. Use explicit FTPS for the connections.

  D. Use SSH tunneling to encrypt the FTP traffic.

  Correct Answer: C

• Question 144:

  The Chief Technology Officer (CTO) of a company, Ann, is putting together a hardware budget for the next 10 years. She is asking for the average lifespan of each hardware device so that she is able to calculate when she will have to replace

  each device.

  Which of the following categories BEST describes what she is looking for?

  A. ALE

  B. MTTR

  C. MTBF

  D. MTTF

  Correct Answer: D

• Question 145:

  A software developer wants to ensure that the application is verifying that a key is valid before establishing SSL connections with random remote hosts on the Internet. Which of the following should be used in the code? (Select TWO.)

  A. Escrowed keys

  B. SSL symmetric encryption key

  C. Software code private key

  D. Remote server public key

  E. OCSP

  Correct Answer: CE

• Question 146:

  A security guard has informed the Chief Information Security Officer that a person with a tablet has been walking around the building. The guard also noticed strange white markings in different areas of the parking lot. The person is attempting which of the following types of attacks?

  A. Jamming

  B. War chalking

  C. Packet sniffing

  D. Near field communication

  Correct Answer: B

• Question 147:

  Recently several employees were victims of a phishing email that appeared to originate from the company president. The email claimed the employees would be disciplined if they did not click on a malicious link in the message. Which of the following principles of social engineering made this attack successful?

  A. Authority

  B. Spamming

  C. Social proof

  D. Scarcity

  Correct Answer: A

• Question 148:

  Which of the following is the LEAST secure hashing algorithm?

  A. SHA1

  B. RIPEMD

  C. MD5

  D. DES

  Correct Answer: C

• Question 149:

  An employee uses RDP to connect back to the office network. If RDP is misconfigured, which of the following security exposures would this lead to?

  A. A virus on the administrator's desktop would be able to sniff the administrator's username and password.

  B. Result in an attacker being able to phish the employee's username and password.

  C. A social engineering attack could occur, resulting in the employee's password being extracted.

  D. A man in the middle attack could occur, resulting the employee's username and password being captured.

  Correct Answer: D

• Question 150:

  Joe is exchanging encrypted email with another party. Joe encrypts the initial email with a key. When Joe receives a response, he is unable to decrypt the response with the same key he used initially. Which of the following would explain the situation?

  A. An ephemeral key was used for one of the messages

  B. A stream cipher was used for the initial email; a block cipher was used for the reply

  C. Out-of-band key exchange has taken place

  D. Asymmetric encryption is being used

  Correct Answer: D

  Asymmetric algorithms use two keys to encrypt and decrypt dat A. These asymmetric keys are

  referred to as the public key and the private key. The sender uses the public key to encrypt a message, and the receiver uses the private key to decrypt the message; what one key does, the other one undoes.