CompTIA CompTIA Security+ RC0-501 Questions & Answers

• Question 281:

  A company would like to prevent the use of a known set of applications from being used on company computers. Which of the following should the security administrator implement?

  A. Whitelisting

  B. Anti-malware

  C. Application hardening

  D. Blacklisting

  E. Disable removable media

  Correct Answer: D

• Question 282:

  A new hire wants to use a personally owned phone to access company resources. The new hire expresses concern about what happens to the data on the phone when they leave the company. Which of the following portions of the company's mobile device management configuration would allow the company data to be removed from the device without touching the new hire's data?

  A. Asset control

  B. Device access control

  C. Storage lock out

  D. Storage segmentation

  Correct Answer: B

• Question 283:

  Which of the following can affect electrostatic discharge in a network operations center?

  A. Fire suppression

  B. Environmental monitoring

  C. Proximity card access

  D. Humidity controls

  Correct Answer: D

• Question 284:

  A malicious attacker has intercepted HTTP traffic and inserted an ASCII line that sets the referrer URL. Which of the following is the attacker most likely utilizing?

  A. Header manipulation

  B. Cookie hijacking

  C. Cross-site scripting

  D. Xml injection

  Correct Answer: A

• Question 285:

  Which of the following is commonly used for federated identity management across multiple organizations?

  A. SAML

  B. Active Directory

  C. Kerberos

  D. LDAP

  Correct Answer: A

• Question 286:

  While performing surveillance activities, an attacker determines that an organization is using 802.1X to secure LAN access. Which of the following attack mechanisms can the attacker utilize to bypass the identified network security?

  A. MAC spoofing

  B. Pharming

  C. Xmas attack

  D. ARP poisoning

  Correct Answer: A

• Question 287:

  A security administrator has been asked to implement a VPN that will support remote access over IPSEC. Which of the following is an encryption algorithm that would meet this requirement?

  A. MD5

  B. AES

  C. UDP

  D. PKI

  Correct Answer: B

• Question 288:

  A security administrator is evaluating three different services: radius, diameter, and Kerberos. Which of the following is a feature that is UNIQUE to Kerberos?

  A. It provides authentication services

  B. It uses tickets to identify authenticated users

  C. It provides single sign-on capability

  D. It uses XML for cross-platform interoperability

  Correct Answer: B

• Question 289:

  An information system owner has supplied a new requirement to the development team that calls for increased non-repudiation within the application. After undergoing several audits, the owner determined that current levels of non-repudiation were insufficient. Which of the following capabilities would be MOST appropriate to consider implementing is response to the new requirement?

  A. Transitive trust

  B. Symmetric encryption

  C. Two-factor authentication

  D. Digital signatures

  E. One-time passwords

  Correct Answer: D

• Question 290:

  Joe a website administrator believes he owns the intellectual property for a company invention and has been replacing image files on the company's public facing website in the DMZ. Joe is using steganography to hide stolen data. Which of the following controls can be implemented to mitigate this type of inside threat?

  A. Digital signatures

  B. File integrity monitoring

  C. Access controls

  D. Change management

  E. Stateful inspection firewall

  Correct Answer: B