CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 31:

  Public key certificates and keys that are compromised or were issued fraudulently are listed on which of the following?

  A. PKI
  B. ACL
  C. CA
  D. CRL
  D. CRL

• Question 32:

  Which of the following may cause Jane, the security administrator, to seek an ACL work around?

  A. Zero day exploit
  B. Dumpster diving
  C. Virus outbreak
  D. Tailgating
  A. Zero day exploit

• Question 33:

  Visitors entering a building are required to close the back door before the front door of the same entry room is open. Which of the following is being described?

  A. Tailgating
  B. Fencing
  C. Screening
  D. Mantrap
  D. Mantrap

• Question 34:

  While previously recommended as a security measure, disabling SSID broadcast is not effective against most attackers because network SSIDs are:

  A. no longer used to authenticate to most wireless networks.
  B. contained in certain wireless packets in plaintext.
  C. contained in all wireless broadcast packets by default.
  D. no longer supported in 802.11 protocols.
  B. contained in certain wireless packets in plaintext.

• Question 35:

  Pete, an employee, is terminated from the company and the legal department needs documents from his encrypted hard drive. Which of the following should be used to accomplish this task? (Select TWO).

  A. Private hash
  B. Recovery agent
  C. Public key
  D. Key escrow
  E. CRL
  B. Recovery agent
  D. Key escrow

• Question 36:

  A security administrator must implement all requirements in the following corporate policy:

  Passwords shall be protected against offline password brute force attacks.

  Passwords shall be protected against online password brute force attacks.

  Which of the following technical controls must be implemented to enforce the corporate policy? (Select THREE).

  A. Account lockout
  B. Account expiration
  C. Screen locks
  D. Password complexity
  E. Minimum password lifetime
  F. Minimum password length
  A. Account lockout
  D. Password complexity
  F. Minimum password length

• Question 37:

  A security administrator is concerned about the strength of user's passwords. The company does not want to implement a password complexity policy. Which of the following can the security administrator implement to mitigate the risk of an online password attack against users with weak passwords?

  A. Increase the password length requirements
  B. Increase the password history
  C. Shorten the password expiration period
  D. Decrease the account lockout time
  C. Shorten the password expiration period

• Question 38:

  Pete, a developer, writes an application. Jane, the security analyst, knows some things about the overall application but does not have all the details. Jane needs to review the software before it is released to production. Which of the following reviews should Jane conduct?

  A. Gray Box Testing
  B. Black Box Testing
  C. Business Impact Analysis
  D. White Box Testing
  A. Gray Box Testing

• Question 39:

  A software development company wants to implement a digital rights management solution to protect its intellectual property. Which of the following should the company implement to enforce software digital rights?

  A. Transport encryption
  B. IPsec
  C. Non-repudiation
  D. Public key infrastructure
  D. Public key infrastructure

• Question 40:

  Which of the following allows Pete, a security technician, to provide the MOST secure wireless implementation?

  A. Implement WPA
  B. Disable SSID
  C. Adjust antenna placement
  D. Implement WEP
  A. Implement WPA