Free CompTIA SY0-501 Exam Dumps Questions & Answers

Which of the following BEST explains why sandboxing is a best practice for testing software from an untrusted vendor prior to an enterprise deployment?

• A.  It eliminates the possibility of privilege escalation attacks against the local VM host.
• B.  It facilitates the analysis of possible malware by allowing it to run until resources are exhausted.
• C.  It restricts the access of the software to a contained logical space and limits possible damage.
• D.  It allows the software to run in an unconstrained environment with full network access.

Which of the following BEST describes the purpose of authorization?

• A.  Authorization provides identification to a resource and comes after authentication.
• B.  Authorization provides permissions to a resource and comes after authentication.
• C.  Authorization provides logging to a resource and comes after authentication.
• D.  Authorization provides authentication to a resource and comes after identification.

A network engineer needs to allow an organization's users to conned their laptops to wired and wireless networks from multiple locations and facilities, while preventing unauthorized connections to the corporate networks. Which of the following should be Implemented to fulfill the engineer's requirements?

• A.  Configure VLANs.
• B.  Enable MAC filtering.
• C.  Implement a VPN concentrator.
• D.  Install a honeypot.

While reviewing system logs, a security analyst notices that a large number of end users are changing their passwords four times on the day the passwords are set to expire. The analyst suspects they are cycling their passwords to circumvent current password controls. Which of the following would provide a technical control to prevent this activity from occurring?

• A.  Increase the password history from three to five.
• B.  Implement password complexity requirements.
• C.  Set password aging requirements.
• D.  Create an AUP that prohibits password reuse.

A company is looking for an all-in-one solution to provide identification authentication, authorization, and accounting services. Which of the following technologies should the company use?

• A.  SAML
• B.  Kerberos
• C.  Diameter
• D.  CHAP