CompTIA CompTIA Security+ RC0-501 Questions & Answers

• Question 61:

  Which of the following is an important step to take BEFORE moving any installation packages from a test environment to production?

  A. Roll back changes in the test environment

  B. Verify the hashes of files

  C. Archive and compress the files

  D. Update the secure baseline

  Correct Answer: B

• Question 62:

  A company is developing a new secure technology and requires computers being used for development to be isolated. Which of the following should be implemented to provide the MOST secure environment?

  A. A perimeter firewall and IDS

  B. An air gapped computer network

  C. A honeypot residing in a DMZ

  D. An ad hoc network with NAT

  E. A bastion host

  Correct Answer: B

• Question 63:

  A company is terminating an employee for misbehavior. Which of the following steps is MOST important in the process of disengagement from this employee?

  A. Obtain a list of passwords used by the employee.

  B. Generate a report on outstanding projects the employee handled.

  C. Have the employee surrender company identification.

  D. Have the employee sign an NDA before departing.

  Correct Answer: C

• Question 64:

  A high-security defense installation recently begun utilizing large guard dogs that bark very loudly and excitedly at the slightest provocation. Which of the following types of controls does this BEST describe?

  A. Deterrent

  B. Preventive

  C. Detective

  D. Compensating

  Correct Answer: A

• Question 65:

  A company's user lockout policy is enabled after five unsuccessful login attempts. The help desk notices a user is repeatedly locked out over the course of a workweek. Upon contacting the user, the help desk discovers the user is on vacation and does not have network access. Which of the following types of attacks are MOST likely occurring? (Choose two.)

  A. Replay

  B. Rainbow tables

  C. Brute force

  D. Pass the hash

  E. Dictionary

  Correct Answer: CE

• Question 66:

  Ann. An employee in the payroll department, has contacted the help desk citing multiple issues with her device, including:

  Slow performance Word documents, PDFs, and images no longer opening A pop-up

  Ann states the issues began after she opened an invoice that a vendor emailed to her. Upon opening the invoice, she had to click several security warnings to view it in her word processor. With which of the following is the device MOST likely infected?

  A. Spyware

  B. Crypto-malware

  C. Rootkit

  D. Backdoor

  Correct Answer: D

• Question 67:

  When configuring settings in a mandatory access control environment, which of the following specifies the subjects that can access specific data objects?

  A. Owner

  B. System

  C. Administrator

  D. User

  Correct Answer: C

• Question 68:

  When connected to a secure WAP, which of the following encryption technologies is MOST likely to be configured when connecting to WPA2-PSK?

  A. DES

  B. AES

  C. MD5

  D. WEP

  Correct Answer: B

• Question 69:

  A company has a data system with definitions for "Private" and "Public". The company's security policy outlines how data should be protected based on type. The company recently added the data type "Proprietary". Which of the following is the MOST likely reason the company added this data type?

  A. Reduced cost

  B. More searchable data

  C. Better data classification

  D. Expanded authority of the privacy officer

  Correct Answer: C

• Question 70:

  A network administrator at a small office wants to simplify the configuration of mobile clients connecting to an encrypted wireless network. Which of the following should be implemented in the administrator does not want to provide the wireless password or he certificate to the employees?

  A. WPS

  B. 802.1x

  C. WPA2-PSK

  D. TKIP

  Correct Answer: A