SY0-501

SY0-501 practice questions, page 40 of 46, with answer review and explanations.

Question 196

A chief Financial Officer (CFO) has asked the Chief Information Officer (CISO) to provide responses to a recent audit report detailing deficiencies in the organization security controls. The CFO would like to know ways in which the organization can improve its authorization controls. Given the request by the CFO, which of the following controls should the CISO focus on in the report? (Choose three)

  1. Password complexity policies
  2. Hardware tokens
  3. Biometric systems
  4. Role-based permissions
  5. One time passwords
  6. Separation of duties
  7. Multifactor authentication
  8. Single sign-on
  9. Lease privilege

Question 197

A mobile device user is concerned about geographic positioning information being included in messages sent between users on a popular social network platform. The user turns off the functionality in the application, but wants to ensure the application cannot re-enable the setting without the knowledge of the user. Which of the following mobile device capabilities should the user disable to achieve the stated goal?

  1. Device access control
  2. Location based services
  3. Application control
  4. GEO-Tagging

Question 198

A member of a digital forensics team, Joe arrives at a crime scene and is preparing to collect system data. Before powering the system off, Joe knows that he must collect the most volatile date first. Which of the following is the correct order in which Joe should collect the data?

  1. CPU cache, paging/swap files, RAM, remote logging data
  2. RAM, CPU cache. Remote logging data, paging/swap files
  3. Paging/swap files, CPU cache, RAM, remote logging data
  4. CPU cache, RAM, paging/swap files, remote logging data

Question 199

An organization has hired a penetration tester to test the security of its ten web servers. The penetration tester is able to gain root/administrative access in several servers by exploiting vulnerabilities associated with the implementation of SMTP, POP, DNS, FTP, Telnet, and IMAP. Which of the following recommendations should the penetration tester provide to the organization to better protect their web servers in the future?

  1. Use a honeypot
  2. Disable unnecessary services
  3. Implement transport layer security
  4. Increase application event logging

Question 200

A security engineer is faced with competing requirements from the networking group and database administrators. The database administrators would like ten application servers on the same subnet for ease of administration, whereas the networking group would like to segment all applications from one another. Which of the following should the security administrator do to rectify this issue?

  1. Recommend performing a security assessment on each application, and only segment the applications with the most vulnerability
  2. Recommend classifying each application into like security groups and segmenting the groups from one another
  3. Recommend segmenting each application, as it is the most secure approach
  4. Recommend that only applications with minimal security features should be segmented to protect them