CompTIA SY0-501 問題集

質問 1：
A company has had a BYOD policy in place for many years and now wants to roll out an MDM solution. The company has decided that end users who wish to utilize their personal devices for corporate use must opt in to the MDM solution. End users are voicing concerns about the company having access to their personal devices via the MDM solution. Which of the following should the company implement to ease these concerns?
A. Application management
B. Full device encryption
C. Sideloading
D. Containerization
正解：A

質問 2：
Which of the following is the main difference between symmetric end asymmetric cryptographic algorithms?
A. Random vs pseudo-random key generation
B. HSM-based key generation
C. Only one Key used in symmetric algorithms
D. The use of PKI in symmetric algorithms
正解：C

質問 3：
Smart home devices that ate always on or connected, such as HVAC system components, introduce SOHO networks to risks because of:
A. default factory settings and constant communication channels to cloud servers
B. loT devices requiring.
C. strong passwords which are not known by SOHO administrators preventing security patching
D. automatic firmware updates constantly shifting the threat landscape
正解：A

質問 4：
An organization is drafting an IRP and needs to determine which employees have the authority to take systems offline during an emergency situation. Which of the following is being outlined?
A. Reporting and escalation procedures
B. Roles and responsibilities
C. Permission auditing
D. Communication methodologies
正解：B

質問 5：
A security administrator discovers that an attack has been completed against a node on the corporate network. All available logs were collected and stored.
You must review all network logs to discover the scope of the attack, check the box of the node(s) that have been compromised and drag and drop the appropriate actions to complete the incident response on the network. The environment is a critical production environment; perform the LEAST disruptive actions on the network, while still performing the appropriate incid3nt responses.
Instructions: The web server, database server, IDS, and User PC are clickable. Check the box of the node(s) that have been compromised and drag and drop the appropriate actions to complete the incident response on the network. Not all actions may be used, and order is not important. If at any time you would like to bring back the initial state of the simulation, please select the Reset button. When you have completed the simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.

正解：
Database server was attacked, actions should be to capture network traffic and Chain of Custody.


IDS Server Log:

Web Server Log:


Database Server Log:

Users PC Log:


質問 6：
Which of the following terms BEST describes an exploitable vulnerability that exists but has not been publicly disclosed yet?
A. Logic bomb
B. Trojan
C. Zero-day
D. Design weakness
正解：C