Free CompTIA SYO-501 Exam Dumps Questions & Answers

A security analyst is assessing a small company's internal servers against recommended security practices. Which of the following should the analyst do to conduct the assessment? (Select TWO).

• A.  Confirm adherence to the company's industry-specific regulations.
• B.  Run an exploitation framework to confirm vulnerabilities
• C.  Review the company's current security baseline,
• D.  Compare configurations against platform benchmarks,
• E.  Verify alignment with policy related to regulatory compliance

An organization uses simulated phishing attacks on its users to better prepare them to recognize actual phishing attacks and get them accustomed to reporting the attacks to the security team. This is an example of:

• A.  stress testing
• B.  user training
• C.  baselining
• D.  continuous monitoring

A common asymmetric algorithm utilizes the user's login name to create the key to encrypt communications. To ensure the key is Afferent each time the user encrypts data which of the following should be added to the login name?

• A.  PSK
• B.  Certificate
• C.  Nonce
• D.  PGP

A user from the financial aid office is having trouble interacting with the finaid directory on the university's ERP system. The systems administrator who took the call ran a command and received the following output:

Subsequently, the systems administrator has also confirmed the user is a member of the finaid group on the ERP system.
Which of the following is the MOST likely reason for the issue?

• A.  The problem is local to the user, and the user should reboot the machine.
• B.  The finaid directory should be d---rwx---
• C.  The permissions on the finaid directory should be drwxrwxrwx.
• D.  The files on the finaid directory has an improper group assignment.

An organization prefers to apply account permissions to groups and not individual users, but allows for exceptions that are justified. Some systems require a machine-to-machine data exchange and an associated account to perform this data exchange. One particular system has data in a folder that must be modified by another system. No user requires access to this folder; only the other system needs access to this folder. Which of the following is the BEST account management practice?

• A.  Create a generic account that will only be used for accessing the folder, but disable the account until it is needed for the data exchange
• B.  Create a guest account and restrict the permissions to only the folder with the data
• C.  Create a service account and apply the necessary permissions directly to the service account itself
• D.  Create a service account group, place the service account in the group, and apply the permissions on the group
• E.  Create a shared account that administrators can use to exchange the data, but audit the shared account activity