SY0-501

SY0-501 practice questions, page 26 of 46, with answer review and explanations.

Question 126

Which of the following AES modes of operation provide authentication? (Choose two.)

  1. CCM
  2. CBC
  3. GCM
  4. DSA
  5. CFB

Question 127

An audit takes place after company-wide restricting, in which several employees changed roles. The following deficiencies are found during the audit regarding access to confidential data: Which of the following would be the BEST method to prevent similar audit findings in the future?

  1. Implement separation of duties for the payroll department.
  2. Implement a DLP solution on the payroll and human resources servers.
  3. Implement rule-based access controls on the human resources server.
  4. Implement regular permission auditing and reviews.

Question 128

A security engineer is configuring a wireless network that must support mutual authentication of the wireless client and the authentication server before users provide credentials. The wireless network must also support authentication with usernames and passwords. Which of the following authentication protocols MUST the security engineer select?

  1. EAP-FAST
  2. EAP-TLS
  3. PEAP
  4. EAP

Question 129

A system's administrator has finished configuring firewall ACL to allow access to a new web server. The security administrator confirms form the following packet capture that there is network traffic from the internet to the web server: The company's internal auditor issues a security finding and requests that immediate action be taken. With which of the following is the auditor MOST concerned?

  1. Misconfigured firewall
  2. Clear text credentials
  3. Implicit deny
  4. Default configuration

Question 130

Which of the following vulnerability types would the type of hacker known as a script kiddie be MOST dangerous against?

  1. Passwords written on the bottom of a keyboard
  2. Unpatched exploitable Internet-facing services
  3. Unencrypted backup tapes
  4. Misplaced hardware token