SY0-501

SY0-501 practice questions, page 15 of 46, with answer review and explanations.

Question 71

Two users need to send each other emails over unsecured channels. The system should support the principle of non-repudiation. Which of the following should be used to sign the user's certificates?

  1. RA
  2. CA
  3. CRL
  4. CSR

Question 72

Which of the following attack types BEST describes a client-side attack that is used to manipulate an HTML iframe with JavaScript code via a web browser?

  1. Buffer overflow
  2. MITM
  3. XSS
  4. SQLi

Question 73

An incident responder receives a call from a user who reports a computer is exhibiting symptoms consistent with a malware infection. Which of the following steps should the responder perform NEXT?

  1. Capture and document necessary information to assist in the response.
  2. Request the user capture and provide a screenshot or recording of the symptoms.
  3. Use a remote desktop client to collect and analyze the malware in real time.
  4. Ask the user to back up files for later recovery.

Question 74

A senior incident response manager receives a call about some external IPs communicating with internal computers during off hours. Which of the following types of malware is MOST likely causing this issue?

  1. Botnet
  2. Ransomware
  3. Polymorphic malware
  4. Armored virus

Question 75

Which of the following technologies employ the use of SAML? (Choose two.)

  1. Single sign-on
  2. Federation
  3. LDAP
  4. Secure token
  5. RADIUS