CompTIA Security+ Certification Exam (SYO-501) Free Practice Test

Question 1

Smart home devices that ate always on or connected, such as HVAC system components, introduce SOHO networks to risks because of:

A. default factory settings and constant communication channels to cloud servers

B. loT devices requiring.

C. strong passwords which are not known by SOHO administrators preventing security patching

D. automatic firmware updates constantly shifting the threat landscape

Correct Answer: A

Question 2

An organization has hired a security analyst to perform a penetration test. The analyst captures 1GB worth of inbound network traffic to the server and transfers the pcap back to the machine for analysis. Which of the following tools should the analyst use to future review the pcap?

A. Nmap

B. Netcat

C. cURL

D. Wireshark

Correct Answer: D

Question 3

A security administrator wants to determine if a company's web servers have the latest operating system and application patches installed. Which of the following types of vulnerability scans should be conducted?

A. Red team

B. Passive

C. Credentialed

D. Non-credentialed

E. Active

F. Port

Correct Answer: C

Question 4

After discovering a buffer overflow vulnerability an application the security analyst needs to report it to the development team leader. Which of the following are MOST to appear m the impact section of the report? (Select TWO).

A. An attacker can execute arbitrary code using the application

B. An attacker can obtain privileged data handled by the application

C. An attacker can inject DLLs into the server via the application

D. An attacker can pivot to other servers using the application

E. An attacker can execute a DDoS on the server

Correct Answer: A,E

Question 5

A user's laptop is experiencing general slowness following the user's return from an extended time out of the office. After a week, the security team looks at the laptop, but nothing appears out of order. The only noticeable issue is that svchost.exe keeps launching even after the security team kills the process. After running netstat, the team notes svchost.exe is listening on port 443. Using an IoC creation tool, a security analyst does the following:
OR--
AND AND
file MD5 contains adf321122abce28873aad3e12f262a12c
PROCESS name contains svchost.exe PROCESS arguments does not contain -k fiLENAME contains svchost.exe fiLE DIRECTORY is not %system32% Based on the IoCs created and the netstat output, which of the following types of malware is present?

A. Rootkit

B. Backdoor

C. Logic bomb

D. Crypto-malware

Correct Answer: A

Question 6

A Chief Information Officer (CIO) is concerned that encryption keys might be exfiltrated by a contractor. The CIO wants to keep control over key visibility and management. Which of the following would be the BEST solution for the CIO to implement?"

A. HSM

B. CA

C. SSH

D. SSL

Correct Answer: A

Question 7

During an incident, a company's CIRT determines it is necessary to observe the continued network-based transactions between a callback domain and the malware running on an enterprise PC. Which of the following techniques would be BEST to enable this activity while reducing the risk of lateral spread and the risk that the adversary would notice any changes?

A. Physically move the PC to a separate Internet point of presence.

B. Create and apply microsegmentation rules.

C. Emulate the malware in a heavily monitored DMZ segment.

D. Apply network blacklisting rules for the adversary domain.

Correct Answer: B

Question 8

A company employee recently retired, and there was a schedule delay because no one was capable of filling the employee's position. Which of the following practices would BEST help to prevent this situation in the future?

A. Job rotation

B. Exit interviews

C. Mandatory vacation

D. Separation of duties

Correct Answer: D

Question 9

Which of the following security controls BEST mitigates social engineering attacks?

A. User awareness training

B. Least privilege

C. Mandatory vacation

D. Separation of duties

Correct Answer: A

Welcome to TestSimulate

CompTIA Security+ Certification (SYO-501) Free Practice Test