SY0-501

SY0-501 practice questions, page 33 of 46, with answer review and explanations.

Question 161

An administrator is configuring access to information located on a network file server named `Bowman`. The files are located in a folder named `BalkFiles`. The files are only for use by the `Matthews` division and should be read-only. The security policy requires permissions for shares to be managed at the file system layer and also requires those permissions to be set according to a least privilege model. Security policy for this data type also dictates that administrator-level accounts on the system have full access to the files. The administrator configures the file share according to the following table: Which of the following rows has been misconfigured?

  1. Row 1
  2. Row 2
  3. Row 3
  4. Row 4
  5. Row 5

Question 162

A copy of a highly confidential salary report was recently found on a printer in the IT department. The human resources department does not have this specific printer mapped to its devices, and it is suspected that an employee in the IT department browsed to the share where the report was located and printed it without authorization. Which of the following technical controls would be the BEST choice to immediately prevent this from happening again?

  1. Implement a DLP solution and classify the report as confidential, restricting access only to human resources staff
  2. Restrict access to the share where the report resides to only human resources employees and enable auditing
  3. Have all members of the IT department review and sign the AUP and disciplinary policies
  4. Place the human resources computers on a restricted VLAN and configure the ACL to prevent access from the IT department

Question 163

A company is developing a new system that will unlock a computer automatically when an authorized user sits in front of it, and then lock the computer when the user leaves. The user does not have to perform any action for this process to occur. Which of the following technologies provides this capability?

  1. Facial recognition
  2. Fingerprint scanner
  3. Motion detector
  4. Smart cards

Question 164

A security analyst accesses corporate web pages and inputs random data in the forms. The response received includes the type of database used and SQL commands that the database accepts. Which of the following should the security analyst use to prevent this vulnerability?

  1. Application fuzzing
  2. Error handling
  3. Input validation
  4. Pointer dereference

Question 165

Which of the following differentiates a collision attack from a rainbow table attack?

  1. A rainbow table attack performs a hash lookup
  2. A rainbow table attack uses the hash as a password
  3. In a collision attack, the hash and the input data are equivalent
  4. In a collision attack, the same input results in different hashes