Online Access Free SY0-501 Exam Questions

An organization wants to control user accounts and privileged access to database servers. The organization wants to create an audit trail of account requests and approvals, Out also wants to facilitate operational efficiency when account and access changes are needed. The organization has the following account management practices.
* Access requests are processed through a service ticket that requires server and system owner approval.
* Once approved, user access is granted directly to the user's privileged account
* The requests and approvals are sent to the security officer where they are retained for future audits.
* Account activity and user activity are monitored and audited monthly by the business unit.
Which of the following changes should be implemented?

• A.Requests and approvals should be sent to the system owner for retention
• B.The user should be added to an existing group that already has the necessary access
• C.Access requests should only be initiated by the system owner with subsequent approval by the server owner.
• D.Account activity should be monitored dally with any violations reported to the system owner immediately.

An organization wishes to allow its users to select devices for business use but does not want to overwhelm the service desk with requests for too many different device types and models. Which of the following deployment models should the organization use to BEST meet these requirements?

• A.CYOD model
• B.DAC model
• C.VDI environment
• D.BYOD model

An auditor is requiring an organization to perform real-time validation of SSL certificates Which of the following should the organization implement?

• A.OCSP
• B.CSR
• C.CRL
• D.KDC

A recent audit uncovered a key finding regarding the use of a specific encryption standard in a web application that is used to communicate with business customers. Due to the technical limitations of its customers, the company is unable to upgrade the encryption standard. Which of the following types of controls should be used to reduce the risk created by this scenario?

• A.Preventive
• B.Compensating
• C.Detective
• D.Physical

A security analyst is emailing PII in a spreadsheet file to an audit validator for after-actions related to a security assessment. The analyst must make sure the PII data is protected with the following minimum requirements:
*Ensure confidentiality at rest.
* Ensure the integrity of the original email message.
Which of the following controls would ensure these data security requirements are carried out?

• A.Encrypt and sign the email using S/MIME.
• B.Encrypt the email and send it using TLS.
• C.Sign the email using MD5
• D.Hash the email using SHA-1.