SY0-501

SY0-501 practice questions, page 30 of 46, with answer review and explanations.

Question 146

A security analyst wants to harden the company's VoIP PBX. The analyst is worried that credentials may be intercepted and compromised when IP phones authenticate with the BPX. Which of the following would best prevent this from occurring?

  1. Implement SRTP between the phones and the PBX.
  2. Place the phones and PBX in their own VLAN.
  3. Restrict the phone connections to the PBX.
  4. Require SIPS on connections to the PBX.

Question 147

An organization is comparing and contrasting migration from its standard desktop configuration to the newest version of the platform. Before this can happen, the Chief Information Security Officer (CISO) voices the need to evaluate the functionality of the newer desktop platform to ensure interoperability with existing software in use by the organization. In which of the following principles of architecture and design is the CISO engaging?

  1. Dynamic analysis
  2. Change management
  3. Baselining
  4. Waterfalling

Question 148

A security administrator suspects a MITM attack aimed at impersonating the default gateway is underway. Which of the following tools should the administrator use to detect this attack? (Choose two.)

  1. Ping
  2. Ipconfig
  3. Tracert
  4. Netstat
  5. Dig
  6. Nslookup

Question 149

A user is presented with the following items during the new-hire onboarding process: -Laptop -Secure USB drive -Hardware OTP token -External high-capacity HDD -Password complexity policy -Acceptable use policy -HASP key -Cable lock Which of the following is one component of multifactor authentication?

  1. Secure USB drive
  2. Cable lock
  3. Hardware OTP token
  4. HASP key

Question 150

An organization requires users to provide their fingerprints to access an application. To improve security, the application developers intend to implement multifactor authentication. Which of the following should be implemented?

  1. Use a camera for facial recognition
  2. Have users sign their name naturally
  3. Require a palm geometry scan
  4. Implement iris recognition