nerdexam
CompTIACompTIA

SY0-501 · Question #292

SY0-501 Question #292: Real Exam Question with Answer & Explanation

Sign in or unlock SY0-501 to reveal the answer and full explanation for question #292. The question stem and answer options stay visible for context.

Submitted by fatema_kw· Mar 4, 2026CompTIA Security+ - Threats, Attacks and Vulnerabilities / Implement cybersecurity controls to mitigate phishing attacks using content filtering rules

Question

Many employees are receiving email messages similar to the one shown below: From IT department To employee Subject email quota exceeded username and password to increase your email quota. Upon reviewing other similar emails, the security administrator realized that all the phishing URLs have the following common elements; they all use HTTP, they all come from .info domains, and they all contain the same URI. Which of the following should the security administrator configure on the corporate content filter to prevent users from accessing the phishing URL, while at the same time minimizing false positives?

Options

  • ABLOCK http://www.*.info/"
  • BDROP http://website.info/email.php?"
  • CRedirect http://www.*.info/email.php?quota=*TOhttp://company.com/corporate_polict.html
  • DDENY http://*.info/email.php?quota=1Gb

Unlock SY0-501 to see the answer

You've previewed enough free SY0-501 questions. Unlock SY0-501 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Content Filtering#Phishing Prevention#URL Filtering#Threat Mitigation
Full SY0-501 PracticeBrowse All SY0-501 Questions