CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 321:

  A recent computer breach has resulted in the incident response team needing to perform a forensics examination. Upon examination, the forensics examiner determines that they cannot tell which captured hard drive was from the device in question. Which of the following would have prevented the confusion experienced during this examination?

  A. Perform routine audit
  B. Chain of custody
  C. Evidence labeling
  D. Hashing the evidence
  C. Evidence labeling

• Question 322:

  Which of the following helps to apply the proper security controls to information?

  A. Data classification
  B. Deduplication
  C. Clean desk policy
  D. Encryption
  A. Data classification

• Question 323:

  A security analyst informs the Chief Executive Officer (CEO) that a security breach has just occurred. This results in the Risk Manager and Chief Information Officer (CIO) being caught unaware when the CEO asks for further information. Which of the following strategies should be implemented to ensure the Risk Manager and CIO are not caught unaware in the future?

  A. Procedure and policy management
  B. Chain of custody management
  C. Change management
  D. Incident management
  D. Incident management

• Question 324:

  When using PGP, which of the following should the end user protect from compromise? (Select TWO).

  A. Private key
  B. CRL details
  C. Public key
  D. Key password
  E. Key escrow
  F. Recovery agent
  A. Private key
  D. Key password

• Question 325:

  Which of the following mitigation strategies is established to reduce risk when performing updates to business critical systems?

  A. Incident management
  B. Server clustering
  C. Change management
  D. Forensic analysis
  C. Change management

• Question 326:

  In order to prevent and detect fraud, which of the following should be implemented?

  A. Job rotation
  B. Risk analysis
  C. Incident management
  D. Employee evaluations
  A. Job rotation

• Question 327:

  A security administrator needs to image a large hard drive for forensic analysis. Which of the following will allow for faster imaging to a second hard drive?

  A. cp /dev/sda /dev/sdb bs=8k
  B. tail -f /dev/sda > /dev/sdb bs=8k
  C. dd in=/dev/sda out=/dev/sdb bs=4k
  D. locate /dev/sda /dev/sdb bs=4k
  C. dd in=/dev/sda out=/dev/sdb bs=4k

• Question 328:

  Which of the following implementation steps would be appropriate for a public wireless hot- spot?

  A. Reduce power level
  B. Disable SSID broadcast
  C. Open system authentication
  D. MAC filter
  C. Open system authentication

• Question 329:

  A network administrator has purchased two devices that will act as failovers for each other. Which of the following concepts does this BEST illustrate?

  A. Authentication
  B. Integrity
  C. Confidentiality
  D. Availability
  D. Availability

• Question 330:

  A network administrator uses an RFID card to enter the datacenter, a key to open the server rack, and a username and password to logon to a server. These are examples of which of the following?

  A. Multifactor authentication
  B. Single factor authentication
  C. Separation of duties
  D. Identification
  B. Single factor authentication