CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 181:

  Which of the following is BEST carried out immediately after a security breach is discovered?

  A. Risk transference
  B. Access control revalidation
  C. Change management
  D. Incident management
  D. Incident management

• Question 182:

  After a number of highly publicized and embarrassing customer data leaks as a result of social engineering attacks by phone, the Chief Information Officer (CIO) has decided user training will reduce the risk of another data leak. Which of the following would be MOST effective in reducing data leaks in this situation?

  A. Information Security Awareness
  B. Social Media and BYOD
  C. Data Handling and Disposal
  D. Acceptable Use of IT Systems
  A. Information Security Awareness

• Question 183:

  An IT director is looking to reduce the footprint of their company's server environment. They have decided to move several internally developed software applications to an alternate environment, supported by an external company. Which of the following BEST describes this arrangement?

  A. Infrastructure as a Service
  B. Storage as a Service
  C. Platform as a Service
  D. Software as a Service
  A. Infrastructure as a Service

• Question 184:

  Which of the following describes how an attacker can send unwanted advertisements to a mobile device?

  A. Man-in-the-middle
  B. Bluejacking
  C. Bluesnarfing
  D. Packet sniffing
  B. Bluejacking

• Question 185:

  Ann has taken over as the new head of the IT department. One of her first assignments was to implement AAA in preparation for the company's new telecommuting policy. When she takes inventory of the organizations existing network infrastructure, she makes note that it is a mix of several different vendors. Ann knows she needs a method of secure centralized access to the company's network resources. Which of the following is the BEST service for Ann to implement?

  A. RADIUS
  B. LDAP
  C. SAML
  D. TACACS+
  A. RADIUS

• Question 186:

  Which of the following BEST describes a demilitarized zone?

  A. A buffer zone between protected and unprotected networks.
  B. A network where all servers exist and are monitored.
  C. A sterile, isolated network segment with access lists.
  D. A private network that is protected by a firewall and a VLAN.
  A. A buffer zone between protected and unprotected networks.

• Question 187:

  Public keys are used for which of the following?

  A. Decrypting wireless messages
  B. Decrypting the hash of an electronic signature
  C. Bulk encryption of IP based email traffic
  D. Encrypting web browser traffic
  B. Decrypting the hash of an electronic signature

• Question 188:

  A malicious program modified entries in the LMHOSTS file of an infected system. Which of the following protocols would have been affected by this?

  A. ICMP
  B. BGP
  C. NetBIOS
  D. DNS
  C. NetBIOS

• Question 189:

  An IT staff member was entering the datacenter when another person tried to piggyback into the datacenter as the door was opened. While the IT staff member attempted to question the other individual by politely asking to see their badge, the individual refused and ran off into the datacenter. Which of the following should the IT staff member do NEXT?

  A. Call the police while tracking the individual on the closed circuit television system
  B. Contact the forensics team for further analysis
  C. Chase the individual to determine where they are going and what they are doing
  D. Contact the onsite physical security team with a description of the individual
  D. Contact the onsite physical security team with a description of the individual

• Question 190:

  A recent intrusion has resulted in the need to perform incident response procedures. The incident response team has identified audit logs throughout the network and organizational systems which hold details of the security breach. Prior to this incident, a security consultant informed the company that they needed to implement an NTP server on the network. Which of the following is a problem that the incident response team will likely encounter during their assessment?

  A. Chain of custody
  B. Tracking man hours
  C. Record time offset
  D. Capture video traffic
  C. Record time offset