SY0-501

SY0-501 practice questions, page 29 of 46, with answer review and explanations.

Question 141

Which of the following types of attacks precedes the installation of a rootkit on a server?

  1. Pharming
  2. DDoS
  3. Privilege escalation
  4. DoS

Question 142

Which of the following cryptographic algorithms is irreversible?

  1. RC4
  2. SHA-256
  3. DES
  4. AES

Question 143

A security analyst receives an alert from a WAF with the following payload: var data= ` ` ++ ` Which of the following types of attacks is this?

  1. Cross-site request forgery
  2. Buffer overflow
  3. SQL injection
  4. JavaScript data insertion
  5. Firewall evasion script

Question 144

A workstation puts out a network request to locate another system. Joe, a hacker on the network, responds before the real system does, and he tricks the workstation into communicating with him. Which of the following BEST describes what occurred?

  1. The hacker used a race condition.
  2. The hacker used a pass-the-hash attack.
  3. The hacker-exploited improper key management.
  4. The hacker exploited weak switch configuration.

Question 145

Audit logs from a small company's vulnerability scanning software show the following findings: Destinations scanned: -Server001- Internal human resources payroll server -Server101-Internet-facing web server -Server201- SQL server for Server101 -Server301-Jumpbox used by systems administrators accessible from the internal network Validated vulnerabilities found: -Server001- Vulnerable to buffer overflow exploit that may allow attackers to install software -Server101- Vulnerable to buffer overflow exploit that may allow attackers to install software -Server201-OS updates not fully current -Server301- Accessible from internal network without the use of jumpbox -Server301-Vulnerable to highly publicized exploit that can elevate user privileges Assuming external attackers who are gaining unauthorized information are of the highest concern, which of the following servers should be addressed FIRST?

  1. Server001
  2. Server101
  3. Server201
  4. Server301