SY0-501

SY0-501 practice questions, page 44 of 46, with answer review and explanations.

Question 216

Recently several employees were victims of a phishing email that appeared to originate from the company president. The email claimed the employees would be disciplined if they did not click on a malicious link in the message. Which of the following principles of social engineering made this attack successful?

  1. Authority
  2. Spamming
  3. Social proof
  4. Scarcity

Question 217

Which of the following is the LEAST secure hashing algorithm?

  1. SHA1
  2. RIPEMD
  3. MD5
  4. DES

Question 218

An employee uses RDP to connect back to the office network. If RDP is misconfigured, which of the following security exposures would this lead to?

  1. A virus on the administrator's desktop would be able to sniff the administrator's username and password.
  2. Result in an attacker being able to phish the employee's username and password.
  3. A social engineering attack could occur, resulting in the employee's password being extracted.
  4. A man in the middle attack could occur, resulting the employee's username and password being captured.

Question 219

Joe, the security administrator, sees this in a vulnerability scan report: "The server 10.1.2.232 is running Apache 2.2.20 which may be vulnerable to a mod_cgi exploit.` Joe verifies that the mod_cgi module is not enabled on 10.1.2.232. This message is an example of:

  1. a threat.
  2. a risk.
  3. a false negative.
  4. a false positive.

Question 220

An auditor has identified an access control system that can incorrectly accept an access attempt from an unauthorized user. Which of the following authentication systems has the auditor reviewed?

  1. Password-based
  2. Biometric-based
  3. Location-based
  4. Certificate-based