CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 291:

  A company requires that a user's credentials include providing something they know and something they are in order to gain access to the network. Which of the following types of authentication is being described?

  A. Biometrics
  B. Kerberos
  C. Token
  D. Two-factor
  D. Two-factor

• Question 292:

  Employee badges are encoded with a private encryption key and specific personal information. The encoding is then used to provide access to the network. Which of the following describes this access control type?

  A. Smartcard
  B. Token
  C. Discretionary access control
  D. Mandatory access control
  A. Smartcard

• Question 293:

  Which of the following is designed to ensure high availability of web based applications?

  A. Proxies
  B. Load balancers
  C. URL filtering
  D. Routers
  B. Load balancers

• Question 294:

  Which of the following should Pete, a security manager, implement to reduce the risk of employees working in collusion to embezzle funds from their company?

  A. Privacy Policy
  B. Least Privilege
  C. Acceptable Use
  D. Mandatory Vacations
  D. Mandatory Vacations

• Question 295:

  Recent data loss on financial servers due to security breaches forced the system administrator to harden their systems. Which of the following algorithms with transport encryption would be implemented to provide the MOST secure web connections to manage and access these servers?

  A. SSL
  B. TLS
  C. HTTP
  D. FTP
  B. TLS

• Question 296:

  Joe, a security administrator, believes that a network breach has occurred in the datacenter as a result of a misconfigured router access list, allowing outside access to an SSH server. Which of the following should Joe search for in the log files?

  A. Failed authentication attempts
  B. Network ping sweeps
  C. Host port scans
  D. Connections to port 22
  D. Connections to port 22

• Question 297:

  A database administrator contacts a security administrator to request firewall changes for a connection to a new internal application. The security administrator notices that the new application uses a port typically monopolized by a virus. The security administrator denies the request and suggests a new port or service be used to complete the application's task. Which of the following is the security administrator practicing in this example?

  A. Explicit deny
  B. Port security
  C. Access control lists
  D. Implicit deny
  C. Access control lists

• Question 298:

  The recovery agent is used to recover the:

  A. Root certificate
  B. Key in escrow
  C. Public key
  D. Private key
  D. Private key

• Question 299:

  All of the following are valid cryptographic hash functions EXCEPT:

  A. RIPEMD.
  B. RC4.
  C. SHA-512.
  D. MD4.
  B. RC4.

• Question 300:

  Which of the following network design elements allows for many internal devices to share one public IP address?

  A. DNAT
  B. PAT
  C. DNS
  D. DMZ
  B. PAT