最新的CompTIA Security+ Certification - SYO-501免費考試真題
A newly hired Chief Security Officer (CSO) is reviewing the company's IRP and notices the procedures for zero-day malware attacks are being poorly executed, resulting m the CSIRT failing to address and coordinate malware removal from the system. Which of the following phases would BEST address these shortcomings?
正確答案: D
A company has a team of penetration testers. This team has located a file on the company file server that they believe contains cleartext usernames followed by a hash. Which of the following tools should the penetration testers use to learn more about the content of this file?
正確答案: B
Which of the following physical security controls is MOST effective when trying to prevent tailgating?
正確答案: B
A security administrator wants to implement strong security on the company smart phones and terminal servers located in the data center.
Drag and drop the applicable controls to each asset types?
Instructions: Controls can be used multiple times and not all placeholders need to be filled. When you have completed the simulation, please select the Done button to submit.

Drag and drop the applicable controls to each asset types?
Instructions: Controls can be used multiple times and not all placeholders need to be filled. When you have completed the simulation, please select the Done button to submit.

正確答案:

An organization recently acquired an ISO 27001 certification. Which of the following would MOST likely be considered a benefit of this certification?
正確答案: D
Which of the following would have the GREATEST impact on the supporting, database server if input handling is not properly implemented on a web application?
正確答案: C
During a penetration test, Joe, an analyst, contacts the target's service desk Impersonating a user, he attempts to obtain assistance with resetting an email password. Joe claims this needs to be done as soon as possible, as he is the vice president of sales and does not want to contact the Chief Operations Officer (COO) for approval, since the COO is on vacation. When challenged. Joe reaffirms that he needs this done immediately, and threatens to contact the service desk supervisor over the issue. Which of the following social engineering principles is Joe employing in this scenario? (Select TWO).
正確答案: A,E
Which of the following BEST describes a defense-in-depth strategy?
正確答案: C
A technician suspects that a desktop was compromised with a rootkit. After removing lhe hard drive from the desktop and running an offline file integrity check, the technician reviews the following output:

Based on the above output, which of the following is the malicious file?

Based on the above output, which of the following is the malicious file?
正確答案: B