SY0-501

SY0-501 practice questions, page 31 of 46, with answer review and explanations.

Question 151

A network technician is setting up a segmented network that will utilize a separate ISP to provide wireless access to the public area for a company. Which of the following wireless security methods should the technician implement to provide basic accountability for access to the public network?

  1. Pre-shared key
  2. Enterprise
  3. Wi-Fi Protected setup
  4. Captive portal

Question 152

After a routine audit, a company discovers that engineering documents have been leaving the network on a particular port. The company must allow outbound traffic on this port, as it has a legitimate business use. Blocking the port would cause an outage. Which of the following technology controls should the company implement?

  1. NAC
  2. Web proxy
  3. DLP
  4. ACL

Question 153

A security analyst has received the following alert snippet from the HIDS appliance: Given the above logs, which of the following is the cause of the attack?

  1. The TCP ports on destination are all open
  2. FIN, URG, and PSH flags are set in the packet header
  3. TCP MSS is configured improperly
  4. There is improper Layer 2 segmentation

Question 154

A security analyst reviews the following output: The analyst loads the hash into the SIEM to discover if this hash is seen in other parts of the network. After inspecting a large number of files, the security analyst reports the following: Which of the following is the MOST likely cause of the hash being found in other areas?

  1. Jan Smith is an insider threat
  2. There are MD5 hash collisions
  3. The file is encrypted
  4. Shadow copies are present

Question 155

A company's AUP requires: ✑ Passwords must meet complexity requirements. ✑ Passwords are changed at least once every six months. ✑ Passwords must be at least eight characters long. An auditor is reviewing the following report: Which of the following controls should the auditor recommend to enforce the AUP?

  1. Account lockout thresholds
  2. Account recovery
  3. Password expiration
  4. Prohibit password reuse