SY0-501

SY0-501 practice questions, page 38 of 46, with answer review and explanations.

Question 186

A web application is configured to target browsers and allow access to bank accounts to siphon money to a foreign account. This is an example of which of the following attacks?

  1. SQL injection
  2. Header manipulation
  3. Cross-site scripting
  4. Flash cookie exploitation

Question 187

Technicians working with servers hosted at the company's datacenter are increasingly complaining of electric shocks when touching metal items which have been linked to hard drive failures. Which of the following should be implemented to correct this issue?

  1. Decrease the room temperature
  2. Increase humidity in the room
  3. Utilize better hot/cold aisle configurations
  4. Implement EMI shielding

Question 188

A portable data storage device has been determined to have malicious firmware. Which of the following is the BEST course of action to ensure data confidentiality?

  1. Format the device
  2. Re-image the device
  3. Perform virus scan in the device
  4. Physically destroy the device

Question 189

A security administrator must implement a system to ensure that invalid certificates are not used by a custom developed application. The system must be able to check the validity of certificates even when internet access is unavailable. Which of the following MUST be implemented to support this requirement?

  1. CSR
  2. OCSP
  3. CRL
  4. SSH

Question 190

A technician has installed new vulnerability scanner software on a server that is joined to the company domain. The vulnerability scanner is able to provide visibility over the patch posture of all company's clients. Which of the following is being used?

  1. Gray box vulnerability testing
  2. Passive scan
  3. Credentialed scan
  4. Bypassing security controls