SY0-501

SY0-501 practice questions, page 27 of 46, with answer review and explanations.

Question 131

An in-house penetration tester is using a packet capture device to listen in on network communications. This is an example of:

  1. Passive reconnaissance
  2. Persistence
  3. Escalation of privileges
  4. Exploiting the switch

Question 132

A black hat hacker is enumerating a network and wants to remain covert during the process. The hacker initiates a vulnerability scan. Given the task at hand the requirement of being covert, which of the following statements BEST indicates that the vulnerability scan meets these requirements?

  1. The vulnerability scanner is performing an authenticated scan.
  2. The vulnerability scanner is performing local file integrity checks.
  3. The vulnerability scanner is performing in network sniffer mode.
  4. The vulnerability scanner is performing banner grabbing.

Question 133

A development team has adopted a new approach to projects in which feedback is iterative and multiple iterations of deployments are provided within an application's full life cycle. Which of the following software development methodologies is the development team using?

  1. Waterfall
  2. Agile
  3. Rapid
  4. Extreme

Question 134

A Chief Executive Officer (CEO) suspects someone in the lab testing environment is stealing confidential information after working hours when no one else is around. Which of the following actions can help to prevent this specific threat?

  1. Implement time-of-day restrictions.
  2. Audit file access times.
  3. Secretly install a hidden surveillance camera.
  4. Require swipe-card access to enter the lab.

Question 135

A company hires a third-party firm to conduct an assessment of vulnerabilities exposed to the Internet. The firm informs the company that an exploit exists for an FTP server that had a version installed from eight years ago. The company has decided to keep the system online anyway, as no upgrade exists form the vendor. Which of the following BEST describes the reason why the vulnerability exists?

  1. Default configuration
  2. End-of-life system
  3. Weak cipher suite
  4. Zero-day threats