SY0-501

SY0-501 practice questions, page 42 of 46, with answer review and explanations.

Question 206

Which of the following is the GREATEST risk to a company by allowing employees to physically bring their personal smartphones to work?

  1. Taking pictures of proprietary information and equipment in restricted areas.
  2. Installing soft token software to connect to the company's wireless network.
  3. Company cannot automate patch management on personally-owned devices.
  4. Increases the attack surface by having more target devices on the company's campus

Question 207

Which of the following is the summary of loss for a given year?

  1. MTBF
  2. ALE
  3. SLA
  4. ARO

Question 208

A Security Officer on a military base needs to encrypt several smart phones that will be going into the field. Which of the following encryption solutions should be deployed in this situation?

  1. Elliptic curve
  2. One-time pad
  3. 3DES
  4. AES-256

Question 209

An organization relies heavily on an application that has a high frequency of security updates. At present, the security team only updates the application on the first Monday of each month, even though the security updates are released as often as twice a week. Which of the following would be the BEST method of updating this application?

  1. Configure testing and automate patch management for the application.
  2. Configure security control testing for the application.
  3. Manually apply updates for the application when they are released.
  4. Configure a sandbox for testing patches before the scheduled monthly update.

Question 210

A technician must configure a firewall to block external DNS traffic from entering a network. Which of the following ports should they block on the firewall?

  1. 53
  2. 110
  3. 143
  4. 443