CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 331:

  Which of the following ports should be opened on a firewall to allow for NetBIOS communication? (Select TWO).

  A. 110
  B. 137
  C. 139
  D. 143
  E. 161
  F. 443
  B. 137
  C. 139

• Question 332:

  The security administrator is implementing a malware storage system to archive all malware seen by the company into a central database. The malware must be categorized and stored based on similarities in the code. Which of the following should the security administrator use to identify similar malware?

  A. TwoFish
  B. SHA-512
  C. Fuzzy hashes
  D. HMAC
  C. Fuzzy hashes

• Question 333:

  In regards to secure coding practices, why is input validation important?

  A. It mitigates buffer overflow attacks.
  B. It makes the code more readable.
  C. It provides an application configuration baseline.
  D. It meets gray box testing standards.
  A. It mitigates buffer overflow attacks.

• Question 334:

  Which of the following concepts is used by digital signatures to ensure integrity of the data?

  A. Non-repudiation
  B. Hashing
  C. Transport encryption
  D. Key escrow
  B. Hashing

• Question 335:

  A way to assure data at-rest is secure even in the event of loss or theft is to use:

  A. Full device encryption.
  B. Special permissions on the file system.
  C. Trusted Platform Module integration.
  D. Access Control Lists.
  A. Full device encryption.

• Question 336:

  Disabling unnecessary services, restricting administrative access, and enabling auditing controls on a server are forms of which of the following?

  A. Application patch management
  B. Cross-site scripting prevention
  C. Creating a security baseline
  D. System hardening
  D. System hardening

• Question 337:

  An administrator notices an unusual spike in network traffic from many sources. The administrator suspects that:

  A. it is being caused by the presence of a rogue access point.
  B. it is the beginning of a DDoS attack.
  C. the IDS has been compromised.
  D. the internal DNS tables have been poisoned.
  B. it is the beginning of a DDoS attack.

• Question 338:

  A program has been discovered that infects a critical Windows system executable and stays dormant in memory. When a Windows mobile phone is connected to the host, the program infects the phone's boot loader and continues to target additional Windows PCs or phones. Which of the following malware categories BEST describes this program?

  A. Zero-day
  B. Trojan
  C. Virus
  D. Rootkit
  C. Virus

• Question 339:

  A technician is deploying virtual machines for multiple customers on a single physical host to reduce power consumption in a data center. Which of the following should be recommended to isolate the VMs from one another?

  A. Implement a virtual firewall
  B. Install HIPS on each VM
  C. Virtual switches with VLANs
  D. Develop a patch management guide
  C. Virtual switches with VLANs

• Question 340:

  Joe, a technician at the local power plant, notices that several turbines had ramp up in cycles during the week. Further investigation by the system engineering team determined that a timed .exe file had been uploaded to the system control console during a visit by international contractors. Which of the following actions should Joe recommend?

  A. Create a VLAN for the SCADA
  B. Enable PKI for the MainFrame
  C. Implement patch management
  D. Implement stronger WPA2 Wireless
  A. Create a VLAN for the SCADA