SY0-501 Free Practice Test

- (Exam Topic 5)
A security technician is configuring an access management system to track and record user actions. Which of the following functions should the technician configure?

1. A. Accounting
2. B. Authorization
3. C. Authentication
4. D. Identification

Correct Answer: A

- (Exam Topic 1)
A botnet has hit a popular website with a massive number of GRE-encapsulated packets to perform a DDoS attack. News outlets discover a certain type of refrigerator was exploited and used to send outbound packets to the website that crashed. To which of the following categories does the refrigerator belong?

1. A. SoC
2. B. ICS
3. C. IoT
4. D. MFD

Correct Answer: C

- (Exam Topic 3)
A new intern in the purchasing department requires read access to shared documents. Permissions are normally controlled through a group called "Purchasing", however, the purchasing group permissions allow write access. Which of the following would be the BEST course of action?

1. A. Modify all the shared files with read only permissions for the intern.
2. B. Create a new group that has only read permissions for the files.
3. C. Remove all permissions for the shared files.
4. D. Add the intern to the "Purchasing" group.

Correct Answer: B

- (Exam Topic 2)
An administrator is configuring access to information located on a network file server named “Bowman”. The files are located in a folder named “BalkFiles”. The files are only for use by the “Matthews” division and should be read-only. The security policy requires permissions for shares to be managed at the file system layer and also requires those permissions to be set according to a least privilege model. Security policy for this data type also dictates that administrator-level accounts on the system have full access to the files.
The administrator configures the file share according to the following table:
<>

1. A. Row 1
2. B. Row 2
3. C. Row 3
4. D. Row 4
5. E. Row 5

Correct Answer: D

- (Exam Topic 5)
After a recent internal breach, a company decided to regenerate and reissue all certificates used in the transmission of confidential information. The company places the greatest importance on confidentiality and non-repudiation, and decided to generate dual key pairs for each client. Which of the following BEST describes how the company will use these certificates?

1. A. One key pair will be used for encryption and decryptio
2. B. The other will be used to digitally sign the data.
3. C. One key pair will be used for encryptio
4. D. The other key pair will provide extended validation.
5. E. Data will be encrypted once by each key, doubling the confidentiality and non-repudiation strength.
6. F. One key pair will be used for internal communication, and the other will be used for external communication.

Correct Answer: A