CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 241:

  The librarian wants to secure the public Internet kiosk PCs at the back of the library. Which of the following would be the MOST appropriate? (Select TWO).

  A. Device encryption
  B. Antivirus
  C. Privacy screen
  D. Cable locks
  E. Remote wipe
  B. Antivirus
  D. Cable locks

• Question 242:

  Which of the following attacks allows access to contact lists on cellular phones?

  A. War chalking
  B. Blue jacking
  C. Packet sniffing
  D. Bluesnarfing
  D. Bluesnarfing

• Question 243:

  Jane, a security administrator, has observed repeated attempts to break into a server. Which of the following is designed to stop an intrusion on a specific server?

  A. HIPS
  B. NIDS
  C. HIDS
  D. NIPS
  A. HIPS

• Question 244:

  Pete, an employee, needs a certificate to encrypt data. Which of the following would issue Pete a certificate?

  A. Certification authority
  B. Key escrow
  C. Certificate revocation list
  D. Registration authority
  A. Certification authority

• Question 245:

  Matt, an administrator, is concerned about the wireless network being discovered by war driving. Which of the following can be done to mitigate this?

  A. Enforce a policy for all users to authentic through a biometric device.
  B. Disable all SSID broadcasting.
  C. Ensure all access points are running the latest firmware.
  D. Move all access points into public access areas.
  B. Disable all SSID broadcasting.

• Question 246:

  Which of the following malware types is MOST likely to execute its payload after Jane, an employee, has left the company?

  A. Rootkit
  B. Logic bomb
  C. Worm
  D. Botnet
  B. Logic bomb

• Question 247:

  Which of the following can be used on a smartphone to BEST protect against sensitive data loss if the device is stolen? (Select TWO).

  A. Tethering B. Screen lock PIN
  C. Remote wipe
  D. Email password
  E. GPS tracking
  F. Device encryption
  C. Remote wipe
  F. Device encryption

• Question 248:

  In which of the following scenarios is PKI LEAST hardened?

  A. The CRL is posted to a publicly accessible location.
  B. The recorded time offsets are developed with symmetric keys.
  C. A malicious CA certificate is loaded on all the clients.
  D. All public keys are accessed by an unauthorized user.
  C. A malicious CA certificate is loaded on all the clients.

• Question 249:

  Based on information leaked to industry websites, business management is concerned that unauthorized employees are accessing critical project information for a major, well-known new product. To identify any such users, the security administrator could:

  A. Set up a honeypot and place false project documentation on an unsecure share.
  B. Block access to the project documentation using a firewall.
  C. Increase antivirus coverage of the project servers.
  D. Apply security updates and harden the OS on all project servers.
  A. Set up a honeypot and place false project documentation on an unsecure share.

• Question 250:

  An administrator needs to segment internal traffic between layer 2 devices within the LAN. Which of the following types of network design elements would MOST likely be used?

  A. Routing
  B. DMZ
  C. VLAN
  D. NAT
  C. VLAN