CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 1:

  Sara, a security architect, has developed a framework in which several authentication servers work together to increase processing power for an application. Which of the following does this represent?

  A. Warm site
  B. Load balancing
  C. Clustering
  D. RAID
  C. Clustering

• Question 2:

  Which of the following risks could IT management be mitigating by removing an all-in-one device?

  A. Continuity of operations
  B. Input validation
  C. Single point of failure
  D. Single sign on
  C. Single point of failure

• Question 3:

  Which of the following is true about PKI? (Select TWO).

  A. When encrypting a message with the public key, only the public key can decrypt it.
  B. When encrypting a message with the private key, only the private key can decrypt it.
  C. When encrypting a message with the public key, only the CA can decrypt it.
  D. When encrypting a message with the public key, only the private key can decrypt it.
  E. When encrypting a message with the private key, only the public key can decrypt it.
  D. When encrypting a message with the public key, only the private key can decrypt it.
  E. When encrypting a message with the private key, only the public key can decrypt it.

• Question 4:

  A user has forgotten their account password. Which of the following is the BEST recovery strategy?

  A. Upgrade the authentication system to use biometrics instead.
  B. Temporarily disable password complexity requirements.
  C. Set a temporary password that expires upon first use.
  D. Retrieve the user password from the credentials database.
  C. Set a temporary password that expires upon first use.

• Question 5:

  The BEST methods for a web developer to prevent the website application code from being vulnerable to cross-site request forgery (XSRF) is to: (Select TWO).

  A. Permit redirection to Internet-facing web URLs.
  B. Ensure all HTML tags are enclosed in angle brackets, e.g., "".
  C. Validate and filter input on the server side and client side.
  D. Use a web proxy to pass website requests between the user and the application.
  E. Restrict and sanitize use of special characters in input and URLs.
  C. Validate and filter input on the server side and client side.
  E. Restrict and sanitize use of special characters in input and URLs.

• Question 6:

  Which of the following application attacks is used against a corporate directory service where there are unknown servers on the network?

  A. Rogue access point
  B. Zero day attack
  C. Packet sniffing
  D. LDAP injection
  D. LDAP injection

• Question 7:

  Which of the following is an application security coding problem?

  A. Error and exception handling
  B. Patch management
  C. Application hardening
  D. Application fuzzing
  A. Error and exception handling

• Question 8:

  A system administrator attempts to ping a hostname and the response is 2001:4860:0:2001::68. Which of the following replies has the administrator received?

  A. The loopback address
  B. The local MAC address
  C. IPv4 address
  D. IPv6 address
  D. IPv6 address

• Question 9:

  An administrator configures all wireless access points to make use of a new network certificate authority. Which of the following is being used?

  A. WEP
  B. LEAP
  C. EAP-TLS
  D. TKIP
  C. EAP-TLS

• Question 10:

  An insurance company requires an account recovery process so that information created by an employee can be accessed after that employee is no longer with the firm. Which of the following is the BEST approach to implement this process?

  A. Employee is required to share their password with authorized staff prior to leaving the firm
  B. Passwords are stored in a reversible form so that they can be recovered when needed
  C. Authorized employees have the ability to reset passwords so that the data is accessible
  D. All employee data is exported and imported by the employee prior to them leaving the firm
  C. Authorized employees have the ability to reset passwords so that the data is accessible