Free RC0-501 Exam Braindumps
CompTIA Security+ Recertification Exam Questions 66–70 (page: 15)

Updated On: 10-Feb-2026

A company hires a consulting firm to crawl its Active Directory network with a non-domain account looking for unpatched systems. Actively taking control of systems is out of scope, as is the creation of new administrator accounts. For which of the following is the company hiring the consulting firm?

  1. Vulnerability scanning
  2. Penetration testing
  3. Application fuzzing
  4. User permission auditing

Answer(s): A



An administrator is replacing a wireless router. The configuration of the old wireless router was not documented before it stopped functioning. The equipment connecting to the wireless network uses older legacy equipment that was manufactured prior to the release of the 802.11i standard. Which of the following configuration options should the administrator select for the new wireless router?

  1. WPA+CCMP
  2. WPA2+CCMP
  3. WPA+TKIP
  4. WPA2+TKIP

Answer(s): D



An application team is performing a load-balancing test for a critical application during off-hours and has requested access to the load balancer to review which servers are up without having the administrator on call. The security analyst is hesitant to give the application team full access due to other critical applications running on the load balancer. Which of the following is the BEST solution for security analyst to process the request?

  1. Give the application team administrator access during off-hours.
  2. Disable other critical applications before granting the team access.
  3. Give the application team read-only access.

Answer(s): C



Which of the following cryptographic attacks would salting of passwords render ineffective?

  1. Brute force
  2. Dictionary
  3. Rainbow tables
  4. Birthday

Answer(s): C



A security analyst is hardening an authentication server. One of the primary requirements is to ensure there is mutual authentication and delegation. Given these requirements, which of the following technologies should the analyst recommend and configure?

  1. LDAP services
  2. Kerberos services
  3. NTLM services
  4. CHAP services

Answer(s): B

Explanation:

Only Kerberos that can do Mutual Auth and Delegation.
https://docs.microsoft.com/en-us/windows-server/security/kerberos/kerberos-authenticationoverview



Viewing page 15 of 35
Viewing questions 71 - 75 out of 346 questions


Post your Comments and Discuss CompTIA RC0-501 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!