New CompTIA Security+ SY0-501 Dumps Is Available Now

1. An application developer has neglected to include input validation checks in the design of the company’s new web application. An employee discovers that repeatedly submitting large amounts of data, including custom code, to an application will allow the execution of the custom code at the administrator level.

Which of the following BEST identifies this application attack?

2. Which of the following identity access methods creates a cookie on the first login to a central authority to allow logins to subsequent applications without re-entering credentials?

3. A network technician is designing a network for a small company. The network technician needs to implement an email server and web server that will be accessed by both internal employees and external customers.

Which of the following would BEST secure the internal network and allow access to the needed servers?

4. When used together, which of the following qualify as two-factor authentication?

5. A security administrator is choosing an algorithm to generate password hashes.

Which of the following would offer the BEST protection against offline brute force attacks?

6. A company has a team of penetration testers. This team has located a file on the company file server that they believe contains cleartext usernames followed by a hash.

Which of the following tools should the penetration testers use to learn more about the content of this file?

7. The Chief Information Security Officer (CISO) in a company is working to maximize protection efforts of sensitive corporate data. The CISO implements a "100% shred" policy within the organization, with the intent to destroy any documentation that is not actively in use in a way that it cannot be recovered or reassembled.

Which of the following attacks is this deterrent MOST likely to mitigate?

8. A Chief Information Security Officer (CISO) has instructed the information assurance staff to act upon a fast-spreading virus.

Which of the following steps in the incident response process should be taken NEXT?

9. An organization has air gapped a critical system.

Which of the following BEST describes the type of attacks that are prevented by this security measure?

10. An organization wants to ensure network access is granted only after a user or device has been authenticated.

Which of the following should be used to achieve this objective for both wired and wireless networks?