Free RC0-501 Exam Braindumps
CompTIA Security+ Recertification Exam Questions 76–80 (page: 17)

Updated On: 10-Feb-2026

Which of the following specifically describes the exploitation of an interactive process to access otherwise restricted areas of the OS?

  1. Privilege escalation
  2. Pivoting
  3. Process affinity
  4. Buffer overflow

Answer(s): A



Recently several employees were victims of a phishing email that appeared to originate from the company president. The email claimed the employees would be disciplined if they did not click on a malicious link in the message.
Which of the following principles of social engineering made this attack successful?

  1. Authority
  2. Spamming
  3. Social proof
  4. Scarcity

Answer(s): A



Which of the following network vulnerability scan indicators BEST validates a successful, active scan?

  1. The scan job is scheduled to run during off-peak hours.
  2. The scan output lists SQL injection attack vectors.
  3. The scan data identifies the use of privileged-user credentials.
  4. The scan results identify the hostname and IP address.

Answer(s): D



An analyst wants to implement a more secure wireless authentication for office access points. Which of the following technologies allows for encrypted authentication of wireless clients over TLS?

  1. PEAP
  2. EAP
  3. WPA2
  4. RADIUS

Answer(s): A

Explanation:

EAP by itself is only an authentication framework.
PEAP (Protected Extensible Authentication Protocol) fully encapsulates EAP and is designed to work within a TLS (Transport Layer Security) tunnel that may be encrypted but is authenticated. The primary motivation behind the creation of PEAP was to help correct the deficiencies discovered within EAP since that protocol assumes that the communications channel are protected. As a result, when EAP messages are able to be discovered in the “clear” they do not provide the protection that was assumed when the protocol was originally authored.
PEAP, EAP-TTLS, and EAP-TLS “protect” inner EAP authentication within SSL/TLS sessions.



When systems, hardware, or software are not supported by the original vendor, it is a vulnerability known as:

  1. system sprawl
  2. end-of-life systems
  3. resource exhaustion
  4. a default configuration

Answer(s): B



Viewing page 17 of 35
Viewing questions 81 - 85 out of 346 questions


Post your Comments and Discuss CompTIA RC0-501 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!