SY0-501

SY0-501 practice questions, page 34 of 46, with answer review and explanations.

Question 166

A help desk is troubleshooting user reports that the corporate website is presenting untrusted certificate errors to employees and customers when they visit the website. Which of the following is the MOST likely cause of this error, provided the certificate has not expired?

  1. The certificate was self signed, and the CA was not imported by employees or customers
  2. The root CA has revoked the certificate of the intermediate CA
  3. The valid period for the certificate has passed, and a new certificate has not been issued
  4. The key escrow server has blocked the certificate from being validated

Question 167

A security analyst is investigating a suspected security breach and discovers the following in the logs of the potentially compromised server: Which of the following would be the BEST method for preventing this type of suspected attack in the future?

  1. Implement password expirations
  2. Implement restrictions on shared credentials
  3. Implement account lockout settings
  4. Implement time-of-day restrictions on this server

Question 168

A security administrator is given the security and availability profiles for servers that are being deployed. 1. Match each RAID type with the correct configuration and MINIMUM number of drives. 2. Review the server profiles and match them with the appropriate RAID type based on integrity, availability, I/O, storage requirements. Instructions: ✑ All drive definitions can be dragged as many times as necessary ✑ Not all placeholders may be filled in the RAID configuration boxes ✑ If parity is required, please select the appropriate number of parity checkboxes ✑ Server profiles may be dragged only once If at any time you would like to bring back the initial state of the simulation, please select the Reset button. When you have completed the simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue. Select and Place:

Question 169

A security administrator is trying to encrypt communication. For which of the following reasons should administrator take advantage of the Subject Alternative Name (SAM) attribute of a certificate?

  1. It can protect multiple domains
  2. It provides extended site validation
  3. It does not require a trusted certificate authority
  4. It protects unlimited subdomains

Question 170

After a merger between two companies a security analyst has been asked to ensure that the organization's systems are secured against infiltration by any former employees that were terminated during the transition. Which of the following actions are MOST appropriate to harden applications against infiltration by former employees? (Choose two.)

  1. Monitor VPN client access
  2. Reduce failed login out settings
  3. Develop and implement updated access control policies
  4. Review and address invalid login attempts
  5. Increase password complexity requirements
  6. Assess and eliminate inactive accounts