Online Access Free RC0-501 Practice Test

A company hires a third-party firm to conduct an assessment of vulnerabilities exposed to the Internet. The firm informs the company that an exploit exists for an FTP server that had a version installed from eight years ago. The company has decided to keep the system online anyway, as no upgrade exists form the vendor. Which of the following BEST describes the reason why the vulnerability exists?

• A.Weak cipher suite
• B.End-of-life system
• C.Default configuration
• D.Zero-day threats

A systems administrator is reviewing the following information from a compromised server:

Given the above information, which of the following processes was MOST likely exploited via a remote buffer overflow attack?

• A.TFTP
• B.LSASS
• C.Apache
• D.MySQL

Users report the following message appears when browsing to the company's secure site:
This website cannot be trusted. Which of the following actions should a security analyst take to resolve these messages? (Select two.)

• A.Update the root certificate into the client computer certificate store.
• B.Have users clear their browsing history and relaunch the session.
• C.Install the updated private key on the web server.
• D.Ensure the certificate has a .pfx extension on the server.
• E.Verify the certificate has not expired on the server.

A security analyst is hardening a server with the directory services role installed. The analyst must ensure LDAP traffic cannot be monitored or sniffed and maintains compatibility with LDAP clients. Which of the following should the analyst implement to meet these requirements? (Select two.)

• A.Install and configure an SSH tunnel on the LDAP server.
• B.Generate an X.509-compliant certificate that is signed by a trusted CA.
• C.Ensure port 389 is open between the clients and the servers using the communication.
• D.Ensure port 636 is open between the clients and the servers using the communication.
• E.Remote the LDAP directory service role from the server.

Which of the following technologies employ the use of SAML? (Select two.)

• A.Secure token
• B.Federation
• C.RADIUS
• D.LDAP
• E.Single sign-on