SY0-501

SY0-501 practice questions, page 21 of 46, with answer review and explanations.

Question 101

Which of the following must be intact for evidence to be admissible in court?

  1. Chain of custody
  2. Order of volatility
  3. Legal hold
  4. Preservation

Question 102

A vulnerability scanner that uses its running service's access level to better assess vulnerabilities across multiple assets within an organization is performing a:

  1. Credentialed scan.
  2. Non-intrusive scan.
  3. Privilege escalation test.
  4. Passive scan.

Question 103

Which of the following cryptography algorithms will produce a fixed-length, irreversible output?

  1. AES
  2. 3DES
  3. RSA
  4. MD5

Question 104

A technician suspects that a system has been compromised. The technician reviews the following log entry: WARNING- hash mismatch: C:\Window\SysWOW64\user32.dll WARNING- hash mismatch: C:\Window\SysWOW64\kernel32.dll Based solely ono the above information, which of the following types of malware is MOST likely installed on the system?

  1. Rootkit
  2. Ransomware
  3. Trojan
  4. Backdoor

Question 105

A new firewall has been places into service at an organization. However, a configuration has not been entered on the firewall. Employees on the network segment covered by the new firewall report they are unable to access the network. Which of the following steps should be completed to BEST resolve the issue?

  1. The firewall should be configured to prevent user traffic form matching the implicit deny rule.
  2. The firewall should be configured with access lists to allow inbound and outbound traffic.
  3. The firewall should be configured with port security to allow traffic.
  4. The firewall should be configured to include an explicit deny rule.