Free CompTIA SYO-501 Exam Dumps Questions & Answers

Which of the following BEST describes the concept of persistence in the context of penetration testing?

• A.The capability of maintaining service availability during a sustained DDoS attack providing persistent service
• B.The state where an attacker can interact with a network host's Internet-facing resources at will
• C.The ability of an attacker to retain access to a system despite the best efforts to dislodge an attacker.
• D.The property of a system used by penetration testers to exploit long-running network connections

Which of the following describes the BEST approach for deploying application patches?

• A.Test the patches in a staging environment, develop against them in the development environment, and then apply them to the production systems
• B.Test the patches in a test environment, apply them to the production systems, and then apply them to a staging environment.
• C.Apply the patches to the production systems, apply them in a staging environment, and then test all of them in a testing environment.
• D.Apply the patches to systems in a testing environment, then to systems in a staging environment, and finally to production systems.

A security administrator is reviewing the following information from a file that was found on a compromised host:

Which of the following types of malware is MOST likely installed on the compromised host?

• A.Trojan
• B.Spyware
• C.Rootkit
• D.Backdoor
• E.Keylogger

Which of the following could an attacker use to overwrite instruction pointers in order to execute malicious code?

• A.SQL injection
• B.Resource exhaustion
• C.Buffer overflow
• D.Memory leak

Which of the following enables a corporation to extend local security policies to corporate resources hosted in a CSP's infrastructure?

• A.Directory services
• B.CRL
• C.VDI
• D.PKI
• E.CASB