CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 341:

  A certificate used on an ecommerce web server is about to expire. Which of the following will occur if the certificate is allowed to expire?

  A. The certificate will be added to the Certificate Revocation List (CRL).
  B. Clients will be notified that the certificate is invalid.
  C. The ecommerce site will not function until the certificate is renewed.
  D. The ecommerce site will no longer use encryption.
  B. Clients will be notified that the certificate is invalid.

• Question 342:

  Which of the following protocols provides transport security for virtual terminal emulation?

  A. TLS
  B. SSH
  C. SCP
  D. S/MIME
  B. SSH

• Question 343:

  Privilege creep among long-term employees can be mitigated by which of the following procedures?

  A. User permission reviews
  B. Mandatory vacations
  C. Separation of duties
  D. Job function rotation
  A. User permission reviews

• Question 344:

  A security administrator has implemented a policy to prevent data loss. Which of the following is the BEST method of enforcement?

  A. Internet networks can be accessed via personally-owned computers.
  B. Data can only be stored on local workstations.
  C. Wi-Fi networks should use WEP encryption by default.
  D. Only USB devices supporting encryption are to be used.
  D. Only USB devices supporting encryption are to be used.

• Question 345:

  Which of the following fire suppression systems is MOST likely used in a datacenter?

  A. FM-200
  B. Dry-pipe
  C. Wet-pipe
  D. Vacuum
  A. FM-200

• Question 346:

  Jane, a security administrator, has been tasked with explaining authentication services to the company's management team. The company runs an active directory infrastructure. Which of the following solutions BEST relates to the host authentication protocol within the company's environment?

  A. Kerberos
  B. Least privilege
  C. TACACS+
  D. LDAP
  A. Kerberos

• Question 347:

  An SSL/TLS private key is installed on a corporate web proxy in order to inspect HTTPS requests. Which of the following describes how this private key should be stored so that it is protected from theft?

  A. Implement full disk encryption
  B. Store on encrypted removable media
  C. Utilize a hardware security module
  D. Store on web proxy file system
  C. Utilize a hardware security module

• Question 348:

  Sara, a user, downloads a keygen to install pirated software. After running the keygen, system performance is extremely slow and numerous antivirus alerts are displayed. Which of the following BEST describes this type of malware?

  A. Logic bomb
  B. Worm
  C. Trojan
  D. Adware
  C. Trojan

• Question 349:

  A financial company requires a new private network link with a business partner to cater for real- time and batched data flows. Which of the following activities should be performed by the IT security staff member prior to establishing the link?

  A. Baseline reporting
  B. Design review
  C. Code review
  D. SLA reporting
  B. Design review

• Question 350:

  The manager has a need to secure physical documents every night, since the company began enforcing the clean desk policy. The BEST solution would includE. (Select TWO).

  A. Fire- or water-proof safe.
  B. Department door locks.
  C. Proximity card.
  D. 24-hour security guard.
  E. Locking cabinets and drawers.
  A. Fire- or water-proof safe.
  E. Locking cabinets and drawers.