SY0-501

SY0-501 practice questions, page 43 of 46, with answer review and explanations.

Question 211

A software development company needs to share information between two remote servers, using encryption to protect it. A programmer suggests developing a new encryption protocol, arguing that using an unknown protocol with secure, existing cryptographic algorithm libraries will provide strong encryption without being susceptible to attacks on other known protocols. Which of the following summarizes the BEST response to the programmer's proposal?

  1. The newly developed protocol will only be as secure as the underlying cryptographic algorithms used.
  2. New protocols often introduce unexpected vulnerabilities, even when developed with otherwise secure and tested algorithm libraries.
  3. A programmer should have specialized training in protocol development before attempting to design a new encryption protocol.
  4. The obscurity value of unproven protocols against attacks often outweighs the potential for introducing new vulnerabilities.

Question 212

A security technician would like to obscure sensitive data within a file so that it can be transferred without causing suspicion. Which of the following technologies would BEST be suited to accomplish this?

  1. Transport Encryption
  2. Stream Encryption
  3. Digital Signature
  4. Steganography

Question 213

A supervisor in your organization was demoted on Friday afternoon. The supervisor had the ability to modify the contents of a confidential database, as well as other managerial permissions. On Monday morning, the database administrator reported that log files indicated that several records were missing from the database. Which of the following risk mitigation strategies should have been implemented when the supervisor was demoted?

  1. Incident management
  2. Routine auditing
  3. IT governance
  4. Monthly user rights reviews

Question 214

Which of the following attack types is being carried out where a target is being sent unsolicited messages via Bluetooth?

  1. War chalking
  2. Bluejacking
  3. Bluesnarfing
  4. Rogue tethering

Question 215

Joe is exchanging encrypted email with another party. Joe encrypts the initial email with a key. When Joe receives a response, he is unable to decrypt the response with the same key he used initially. Which of the following would explain the situation?

  1. An ephemeral key was used for one of the messages
  2. A stream cipher was used for the initial email; a block cipher was used for the reply
  3. Out-of-band key exchange has taken place
  4. Asymmetric encryption is being used