SY0-501

SY0-501 practice questions, page 22 of 46, with answer review and explanations.

Question 106

A security analyst is testing both Windows and Linux systems for unauthorized DNS zone transfers within a LAN on comptia.org from example.org. Which of the following commands should the security analyst use? (Choose two.) A. B. C. dig `"axfr comptia.org @example.org D. ipconfig /flushDNS - E. F. dig @example.org comptia.org -

Question 107

Which of the following are the MAIN reasons why a systems administrator would install security patches in a staging environment before the patches are applied to the production server? (Choose two.)

  1. To prevent server availability issues
  2. To verify the appropriate patch is being installed
  3. To generate a new baseline hash after patching
  4. To allow users to test functionality
  5. To ensure users are trained on new functionality

Question 108

A Chief Information Officer (CIO) drafts an agreement between the organization and its employees. The agreement outlines ramifications for releasing information without consent and/or approvals. Which of the following BEST describes this type of agreement?

  1. ISA
  2. NDA
  3. MOU
  4. SLA

Question 109

Which of the following would meet the requirements for multifactor authentication?

  1. Username, PIN, and employee ID number
  2. Fingerprint and password
  3. Smart card and hardware token
  4. Voice recognition and retina scan

Question 110

A manager suspects that an IT employee with elevated database access may be knowingly modifying financial transactions for the benefit of a competitor. Which of the following practices should the manager implement to validate the concern?

  1. Separation of duties
  2. Mandatory vacations
  3. Background checks
  4. Security awareness training