CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 381:

  While opening an email attachment, Pete, a customer, receives an error that the application has encountered an unexpected issue and must be shut down. This could be an example of which of the following attacks?

  A. Cross-site scripting
  B. Buffer overflow
  C. Header manipulation
  D. Directory traversal
  B. Buffer overflow

• Question 382:

  In the initial stages of an incident response, Matt, the security administrator, was provided the hard drives in question from the incident manager. Which of the following incident response procedures would he need to perform in order to begin the analysis? (Select TWO).

  A. Take hashes
  B. Begin the chain of custody paperwork
  C. Take screen shots
  D. Capture the system image
  E. Decompile suspicious files
  A. Take hashes
  D. Capture the system image

• Question 383:

  A network stream needs to be encrypted. Sara, the network administrator, has selected a cipher which will encrypt 8 bits at a time before sending the data across the network. Which of the following has Sara selected?

  A. Block cipher
  B. Stream cipher
  C. CRC
  D. Hashing algorithm
  A. Block cipher

• Question 384:

  Ann, a newly hired human resource employee, sent out confidential emails with digital signatures, to an unintended group. Which of the following would prevent her from denying accountability?

  A. Email Encryption
  B. Steganography
  C. Non Repudiation
  D. Access Control
  C. Non Repudiation

• Question 385:

  A computer is put into a restricted VLAN until the computer's virus definitions are up-to-date. Which of the following BEST describes this system type?

  A. NAT
  B. NIPS
  C. NAC
  D. DMZ
  C. NAC

• Question 386:

  Which of the following malware types typically allows an attacker to monitor a user's computer, is characterized by a drive-by download, and requires no user interaction?

  A. Virus
  B. Logic bomb
  C. Spyware
  D. Adware
  C. Spyware

• Question 387:

  Which of the following is used by the recipient of a digitally signed email to verify the identity of the sender?

  A. Recipient's private key
  B. Sender's public key
  C. Recipient's public key
  D. Sender's private key
  B. Sender's public key

• Question 388:

  Sara, the Chief Information Officer (CIO), has requested an audit take place to determine what services and operating systems are running on the corporate network. Which of the following should be used to complete this task?

  A. Fingerprinting and password crackers
  B. Fuzzing and a port scan
  C. Vulnerability scan and fuzzing
  D. Port scan and fingerprinting
  D. Port scan and fingerprinting

• Question 389:

  An advantage of virtualizing servers, databases, and office applications is:

  A. Centralized management.
  B. Providing greater resources to users.
  C. Stronger access control.
  D. Decentralized management.
  A. Centralized management.

• Question 390:

  FTP/S uses which of the following TCP ports by default?

  A. 20 and 21
  B. 139 and 445
  C. 443 and 22
  D. 989 and 990
  D. 989 and 990