CompTIA CompTIA Security+ RC0-501 Questions & Answers

• Question 291:

  The process of applying a salt and cryptographic hash to a password then repeating the process many times is known as which of the following?

  A. Collision resistance

  B. Rainbow table

  C. Key stretching

  D. Brute force attack

  Correct Answer: C

• Question 292:

  Joe notices there are several user accounts on the local network generating spam with embedded malicious code. Which of the following technical control should Joe put in place to BEST reduce these incidents?

  A. Account lockout

  B. Group Based Privileges

  C. Least privilege

  D. Password complexity

  Correct Answer: A

• Question 293:

  Two users need to securely share encrypted files via email. Company policy prohibits users from sharing credentials or exchanging encryption keys. Which of the following can be implemented to enable users to share encrypted data while abiding by company policies?

  A. Key escrow

  B. Digital signatures

  C. PKI

  D. Hashing

  Correct Answer: B

• Question 294:

  In an effort to reduce data storage requirements, some company devices to hash every file and eliminate duplicates. The data processing routines are time sensitive so the hashing algorithm is fast and supported on a wide range of systems. Which of the following algorithms is BEST suited for this purpose?

  A. MD5

  B. SHA

  C. RIPEMD

  D. AES

  Correct Answer: B

• Question 295:

  A new security policy in an organization requires that all file transfers within the organization be completed using applications that provide secure transfer. Currently, the organization uses FTP and HTTP to transfer files. Which of the following should the organization implement in order to be compliant with the new policy?

  A. Replace FTP with SFTP and replace HTTP with TLS

  B. Replace FTP with FTPS and replaces HTTP with TFTP

  C. Replace FTP with SFTP and replace HTTP with Telnet

  D. Replace FTP with FTPS and replaces HTTP with IPSec

  Correct Answer: B

• Question 296:

  A product manager is concerned about continuing operations at a facility located in a region undergoing significant political unrest. After consulting with senior management, a decision is made to suspend operations at the facility until the situation stabilizes. Which of the following risk management strategies BEST describes management's response?

  A. Deterrence

  B. Mitigation

  C. Avoidance

  D. Acceptance

  Correct Answer: C

• Question 297:

  The firewall administrator is adding a new certificate for the company's remote access solution. The solution requires that the uploaded file contain the entire certificate chain for the certificate to load properly. The administrator loads the

  company certificate and the root CA certificate into the file.

  The file upload is rejected.

  Which of the following is required to complete the certificate chain?

  A. Certificate revocation list

  B. Intermediate authority

  C. Recovery agent

  D. Root of trust

  Correct Answer: B

• Question 298:

  The Chief Executive Officer (CEO) of a major defense contracting company a traveling overseas for a conference. The CEO will be taking a laptop. Which of the following should the security administrator implement to ensure confidentiality of the data if the laptop were to be stolen or lost during the trip?

  A. Remote wipe

  B. Full device encryption

  C. BIOS password

  D. GPS tracking

  Correct Answer: B

• Question 299:

  Which of the following are MOST susceptible to birthday attacks?

  A. Hashed passwords

  B. Digital certificates

  C. Encryption passwords

  D. One time passwords

  Correct Answer: A

• Question 300:

  Joe a computer forensic technician responds to an active compromise of a database server. Joe first collects information in memory, then collects network traffic and finally conducts an image of the hard drive. Which of the following procedures did Joe follow?

  A. Order of volatility

  B. Chain of custody

  C. Recovery procedure

  D. Incident isolation

  Correct Answer: A