CompTIA CompTIA Security+ RC0-501 Questions & Answers

• Question 301:

  A system administrator wants to implement an internal communication system that will allow employees to send encrypted messages to each other. The system must also support nonrepudiation. Which of the following implements all these requirements?

  A. Bcrypt

  B. Blowfish

  C. PGP

  D. SHA

  Correct Answer: C

• Question 302:

  Given the log output:

  Max 15 00:15:23.431 CRT: #SEC_LOGIN-5-LOGIN_SUCCESS:

  Login Success [user: msmith] [Source: 10.0.12.45]

  [localport: 23] at 00:15:23:431 CET Sun Mar 15 2015

  Which of the following should the network administrator do to protect data security?

  A. Configure port security for logons

  B. Disable telnet and enable SSH

  C. Configure an AAA server

  D. Disable password and enable RSA authentication

  Correct Answer: B

• Question 303:

  Malware that changes its binary pattern on specific dates at specific times to avoid detection is known as a (n):

  A. armored virus

  B. logic bomb

  C. polymorphic virus

  D. Trojan

  Correct Answer: C

• Question 304:

  A company is planning to encrypt the files in several sensitive directories of a file server with a symmetric key. Which of the following could be used?

  A. RSA

  B. TwoFish

  C. Diffie-Helman

  D. NTLMv2

  E. RIPEMD

  Correct Answer: B

• Question 305:

  Which of the following is a document that contains detailed information about actions that include how something will be done, when the actions will be performed, and penalties for failure?

  A. MOU

  B. ISA

  C. BPA

  D. SLA

  Correct Answer: D

• Question 306:

  A Chief Security Officer (CSO) has been unsuccessful in attempts to access the website for a potential partner (www.example.net). Which of the following rules is preventing the CSO from accessing the site? Blocked sites: *.nonews.com, *.rumorhasit.net, *.mars?

  A. Rule 1: deny from inside to outside source any destination any service smtp

  B. Rule 2: deny from inside to outside source any destination any service ping

  C. Rule 3: deny from inside to outside source any destination {blocked sites} service http-https

  D. Rule 4: deny from any to any source any destination any service any

  Correct Answer: C

• Question 307:

  A security administrator wishes to implement a secure a method of file transfer when communicating with outside organizations. Which of the following protocols would BEST facilitate secure file transfers? (Select TWO)

  A. SCP

  B. TFTP

  C. SNMP

  D. FTP

  E. SMTP

  F. FTPS

  Correct Answer: AF

• Question 308:

  A technician needs to implement a system which will properly authenticate users by their username and password only when the users are logging in from a computer in the office building. Any attempt to authenticate from a location other than the office building should be rejected. Which of the following MUST the technician implement?

  A. Dual factor authentication

  B. Transitive authentication

  C. Single factor authentication

  D. Biometric authentication

  Correct Answer: B

• Question 309:

  After correctly configuring a new wireless enabled thermostat to control the temperature of the company's meeting room, Joe, a network administrator determines that the thermostat is not connecting to the internet-based control system. Joe verifies that the thermostat received the expected network parameters and it is associated with the AP. Additionally, the other wireless mobile devices connected to the same wireless network are functioning properly. The network administrator verified that the thermostat works when tested at his residence. Which of the following is the MOST likely reason the thermostat is not connecting to the internet?

  A. The company implements a captive portal

  B. The thermostat is using the incorrect encryption algorithm

  C. the WPA2 shared likely is incorrect

  D. The company's DHCP server scope is full

  Correct Answer: C

• Question 310:

  After a merger, it was determined that several individuals could perform the tasks of a network administrator in the merged organization. Which of the following should have been performed to ensure that employees have proper access?

  A. Time-of-day restrictions

  B. Change management

  C. Periodic auditing of user credentials

  D. User rights and permission review

  Correct Answer: D