CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 11:

  Which of the following would the security engineer set as the subnet mask for the servers below to utilize host addresses on separate broadcast domains?

  Server 1: 192.168.100.6 Server 2: 192.168.100.9 Server 3: 192.169.100.20

  A. /24
  B. /27
  C. /28
  D. /29
  E. /30
  D. /29

• Question 12:

  While rarely enforced, mandatory vacation policies are effective at uncovering:

  A. Help desk technicians with oversight by multiple supervisors and detailed quality control systems.
  B. Collusion between two employees who perform the same business function.
  C. Acts of incompetence by a systems engineer designing complex architectures as a member of a team.
  D. Acts of gross negligence on the part of system administrators with unfettered access to system and no oversight.
  D. Acts of gross negligence on the part of system administrators with unfettered access to system and no oversight.

• Question 13:

  Which of the following offers the LEAST amount of protection against data theft by USB drives?

  A. DLP
  B. Database encryption
  C. TPM
  D. Cloud computing
  D. Cloud computing

• Question 14:

  Which of the following is an important implementation consideration when deploying a wireless network that uses a shared password?

  A. Authentication server
  B. Server certificate
  C. Key length
  D. EAP method
  C. Key length

• Question 15:

  After viewing wireless traffic, an attacker notices the following networks are being broadcasted by local access points:

  Corpnet Coffeeshop FreePublicWifi

  Using this information the attacker spoofs a response to make nearby laptops connect back to a malicious device. Which of the following techniques are used above? (Select TWO).

  A. Blue snarfing
  B. Evil twin
  C. Packet sniffing
  D. War dialing
  E. Rogue access point
  B. Evil twin
  C. Packet sniffing

• Question 16:

  The information security team does a presentation on social media and advises the participants not to provide too much personal information on social media web sites. This advice would BEST protect people from which of the following?

  A. Rainbow tables attacks
  B. Brute force attacks
  C. Birthday attacks
  D. Cognitive passwords attacks
  D. Cognitive passwords attacks

• Question 17:

  Which of the following encrypts data a single bit at a time?

  A. Stream cipher
  B. Steganography
  C. 3DES
  D. Hashing
  A. Stream cipher

• Question 18:

  Who should be contacted FIRST in the event of a security breach?

  A. Forensics analysis team
  B. Internal auditors
  C. Incident response team
  D. Software vendors
  C. Incident response team

• Question 19:

  Which of the following could a security administrator implement to mitigate the risk of tailgating for a large organization?

  A. Train employees on correct data disposal techniques and enforce policies.
  B. Only allow employees to enter or leave through one door at specified times of the day.
  C. Only allow employees to go on break one at a time and post security guards 24/7 at each entrance.
  D. Train employees on risks associated with social engineering attacks and enforce policies.
  D. Train employees on risks associated with social engineering attacks and enforce policies.

• Question 20:

  Company employees are required to have workstation client certificates to access a bank website. These certificates were backed up as a precautionary step before the new computer upgrade. After the upgrade and restoration, users state

  they can access the bank's website, but not login.

  Which is the following is MOST likely the issue?

  A. The IP addresses of the clients have change
  B. The client certificate passwords have expired on the server
  C. The certificates have not been installed on the workstations
  D. The certificates have been installed on the CA
  C. The certificates have not been installed on the workstations