Online Access Free RC0-501 Exam Questions

A security analyst observes the following events in the logs of an employee workstation:

Given the information provided, which of the following MOST likely occurred on the workstation?

• A.Antivirus software found and quarantined three malware files.
• B.Application whitelisting controls blocked an exploit payload from executing.
• C.Automatic updates were initiated but failed because they had not been approved.
• D.The SIEM log agent was not turned properly and reported a false positive.

A company is using a mobile device deployment model in which employees use their personal devices for work at their own discretion. Some of the problems the company is encountering include the following:
Which of the following is a deployment model that would help the company overcome these problems?

• A.VDI
• B.BYOD
• C.CYOD
• D.COPE

An auditor wants to test the security posture of an organization by running a tool that will display the following:

Which of the following commands should be used?

• A.nbtstat
• B.ipconfig
• C.nc
• D.arp

Two users need to send each other emails over unsecured channels. The system should support the principle of non-repudiation. Which of the following should be used to sign the user's certificates?

• A.CA
• B.RA
• C.CSR
• D.CRL

A security analyst captures forensic evidence from a potentially compromised system for further investigation. The evidence is documented and securely stored to FIRST:

• A.recover data at a later time
• B.obtain a legal hold
• C.maintain the chain of custody
• D.preserve the data