CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 421:

  Which of the following can be used as an equipment theft deterrent?

  A. Screen locks
  B. GPS tracking
  C. Cable locks
  D. Whole disk encryption
  C. Cable locks

• Question 422:

  A user casually browsing the Internet is redirected to a warez site where a number of pop-ups appear. After clicking on a pop-up to complete a survey, a drive-by download occurs. Which of the following is MOST likely to be contained in the download?

  A. Backdoor
  B. Spyware
  C. Logic bomb
  D. DDoS
  E. Smurf
  B. Spyware

• Question 423:

  Which of the following types of encryption will help in protecting files on a PED?

  A. Mobile device encryption
  B. Transport layer encryption
  C. Encrypted hidden container
  D. Database encryption
  A. Mobile device encryption

• Question 424:

  Which of the following authentication services uses a ticket granting system to provide access?

  A. RADIUS
  B. LDAP
  C. TACACS+
  D. Kerberos
  D. Kerberos

• Question 425:

  To ensure proper evidence collection, which of the following steps should be preformed FIRST?

  A. Take hashes from the live system
  B. Review logs
  C. Capture the system image
  D. Copy all compromised files
  C. Capture the system image

• Question 426:

  A user commuting to work via public transport received an offensive image on their smart phone from another commuter. Which of the following attacks MOST likely took place?

  A. War chalking
  B. Bluejacking
  C. War driving
  D. Bluesnarfing
  B. Bluejacking

• Question 427:

  Which of the following should be enabled in a laptop's BIOS prior to full disk encryption?

  A. USB
  B. HSM
  C. RAID
  D. TPM
  D. TPM

• Question 428:

  A security analyst implemented group-based privileges within the company active directory. Which of the following account management techniques should be undertaken regularly to ensure least privilege principles?

  A. Leverage role-based access controls.
  B. Perform user group clean-up.
  C. Verify smart card access controls.
  D. Verify SHA-256 for password hashes.
  B. Perform user group clean-up.

• Question 429:

  Which of the following can be implemented in hardware or software to protect a web server from cross-site scripting attacks?

  A. Intrusion Detection System
  B. Flood Guard Protection
  C. Web Application Firewall
  D. URL Content Filter
  C. Web Application Firewall

• Question 430:

  Which of the following assessments would Pete, the security administrator, use to actively test that an application's security controls are in place?

  A. Code review
  B. Penetration test
  C. Protocol analyzer
  D. Vulnerability scan
  B. Penetration test