Online Access Free SY0-501 Practice Test

A security auditor is reviewing the following output from file integrity monitoring software installed on a very busy server at a large service provider. The server has not been updates since it was installed. Drag and drop the log entry that identifies the first instance of server compromise.

Correct Answer:

An attacker has gained control of several systems on the Internet and is using them to attack a website, causing it to stop responding to legitimate traffic. Which of the following BEST describes the attack?

• A.DNS poisoning
• B.DDoS
• C.Buffer overflow
• D.MITM

An Organization requires secure configuration baselines for all platforms and technologies that are used. If any system cannot conform to the secure baseline, the organization must process a risk acceptance and receive approval before the system is placed into production. It may have non-conforming systems in its lower environments (development and staging) without risk acceptance, but must receive risk approval before the system is placed in production. Weekly scan reports identify systems that do not conform to any secure baseline.
The application team receive a report with the following results:
There are currently no risk acceptances for baseline deviations. This is a mission-critical application, and the organization cannot operate If the application is not running. The application fully functions in the development and staging environments. Which of the following actions should the application team take?

• A.Shut down NYAccountingProd and Investigate the reason for the different scan results.
• B.Process a risk acceptance for 2633 and remediate 3124.
• C.Remediate 2633 and 3124 immediately.
• D.Process a risk acceptance for 2633 and 3124.

An organization requires three separate factors for authentication to sensitive systems. Which of the following would BEST satisfy the requirement?

• A.Password, one-time password sent to a smartphone, and text message sent to a smartphone
• B.One-time password sent to a smartphone, thumbprint, and home street address
• C.fingerprint, PIN, and mother's maiden name
• D.fingerprint, voice recognition, and password

A security administrator is adding a NAC requirement for all VPN users to ensure the co requirement?

• A.Implement a permanent agent.
• B.Install antivirus software.
• C.Use an agentless implementation.
• D.Implement PKI.