Free RC0-501 Exam Braindumps
CompTIA Security+ Recertification Exam Questions 81–85 (page: 18)

Updated On: 10-Feb-2026

A company has three divisions, each with its own networks and services. The company decides to make its secure web portal accessible to all employees utilizing their existing usernames and passwords. The security administrator has elected to use SAML to support authentication. In this scenario, which of the following will occur when users try to authenticate to the portal? (Select two.)

  1. The portal will function as a service provider and request an authentication assertion.
  2. The portal will function as an identity provider and issue an authentication assertion.
  3. The portal will request an authentication ticket from each network that is transitively trusted.
  4. The back-end networks will function as an identity provider and issue an authentication assertion.
  5. The back-end networks will request authentication tickets from the portal, which will act as the third-party service provider authentication store.
  6. The back-end networks will verify the assertion token issued by the portal functioning as the identity provider.

Answer(s): A,B



A company wants to host a publicity available server that performs the following functions:
Evaluates MX record lookup
Can perform authenticated requests for A and AAA records Uses RRSIG
Which of the following should the company use to fulfill the above requirements?

  1. LDAPS
  2. DNSSEC
  3. SFTP
  4. nslookup
  5. dig

Answer(s): A



A system administrator wants to provide balance between the security of a wireless network and usability. The administrator is concerned with wireless encryption compatibility of older devices used by some employees. Which of the following would provide strong security and backward compatibility when accessing the wireless network?

  1. Open wireless network and SSL VPN
  2. WPA using a preshared key
  3. WPA2 using a RADIUS back-end for 802.1x authentication
  4. WEP with a 40-bit key

Answer(s): C



Joe is exchanging encrypted email with another party. Joe encrypts the initial email with a key. When Joe receives a response, he is unable to decrypt the response with the same key he used initially.
Which of the following would explain the situation?

  1. An ephemeral key was used for one of the messages
  2. A stream cipher was used for the initial email; a block cipher was used for the reply
  3. Out-of-band key exchange has taken place
  4. Asymmetric encryption is being used

Answer(s): D

Explanation:

Asymmetric algorithms use two keys to encrypt and decrypt data. These asymmetric keys are referred to as the public key and the private key. The sender uses the public key to encrypt a message, and the receiver uses the private key to decrypt the message; what one key does, the other one undoes.



In terms of encrypting data, which of the following is BEST described as a way to safeguard password data by adding random data to it in storage?

  1. Using salt
  2. Using hash algorithms
  3. Implementing elliptical curve
  4. Implementing PKI

Answer(s): A



Viewing page 18 of 35
Viewing questions 86 - 90 out of 346 questions


Post your Comments and Discuss CompTIA RC0-501 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!