SYO-501 Exam Question 76

A third-party penetration testing company was able to successfully use an ARP cache poison technique to gain root access on a server. The tester successfully moved to another server that was not in the original network.
Which of the following is the MOST likely method used to gain access to the other host?
  • SYO-501 Exam Question 77

    A security analyst is hardening an authentication server. One of the primary requirements is to ensure there is mutual authentication and delegation. Given these requirements, which of the following technologies should the analyst recommend and configure?
  • SYO-501 Exam Question 78

    A company has two wireless networks utilizing captive portals. Some employees report getting a trust error in their browsers when connecting to one of the networks.
    Both captive portals are using the same server certificate for authentication, but the analyst notices the following differences between the two certificate details:
    Certificate 1
    Certificate Path:
    Geotrust Global CA
    *company.com
    Certificate 2
    Certificate Path:
    *company.com
    Which of the following would resolve the problem?
  • SYO-501 Exam Question 79

    A security analyst is hardening a server with the directory services role installed. The analyst must ensure LDAP traffic cannot be monitored or sniffed and maintains compatibility with LDAP clients.
    Which of the following should the analyst implement to meet these requirements? (Select two.)
  • SYO-501 Exam Question 80

    An administrator needs to protect five websites with SSL certificates. Three of the websites have different domain names, and two of the websites share the domain name but have different subdomain prefixes. Which of the following SSL certificates should the administrator purchase to protect all the websites and be able to administer them easily at a later time?