CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 431:

  Which of the following should a security technician implement to identify untrusted certificates?

  A. CA
  B. PKI
  C. CRL
  D. Recovery agent
  C. CRL

• Question 432:

  Use of a smart card to authenticate remote servers remains MOST susceptible to which of the following attacks?

  A. Malicious code on the local system
  B. Shoulder surfing
  C. Brute force certificate cracking
  D. Distributed dictionary attacks
  A. Malicious code on the local system

• Question 433:

  Which of the following is a requirement when implementing PKI if data loss is unacceptable?

  A. Web of trust
  B. Non-repudiation
  C. Key escrow
  D. Certificate revocation list
  C. Key escrow

• Question 434:

  Which of the following can be implemented if a security administrator wants only certain devices connecting to the wireless network?

  A. Disable SSID broadcast
  B. Install a RADIUS server
  C. Enable MAC filtering
  D. Lowering power levels on the AP
  C. Enable MAC filtering

• Question 435:

  Ann works at a small company and she is concerned that there is no oversight in the finance department; specifically, that Joe writes, signs and distributes paychecks, as well as other expenditures. Which of the following controls can she implement to address this concern?

  A. Mandatory vacations
  B. Time of day restrictions
  C. Least privilege
  D. Separation of duties
  D. Separation of duties

• Question 436:

  Identifying a list of all approved software on a system is a step in which of the following practices?

  A. Passively testing security controls
  B. Application hardening
  C. Host software baselining
  D. Client-side targeting
  C. Host software baselining

• Question 437:

  An online store wants to protect user credentials and credit card information so that customers can store their credit card information and use their card for multiple separate transactions. Which of the following database designs provides the BEST security for the online store?

  A. Use encryption for the credential fields and hash the credit card field
  B. Encrypt the username and hash the password
  C. Hash the credential fields and use encryption for the credit card field
  D. Hash both the credential fields and the credit card field
  C. Hash the credential fields and use encryption for the credit card field

• Question 438:

  A recent audit has revealed weaknesses in the process of deploying new servers and network devices. Which of the following practices could be used to increase the security posture during deployment? (Select TWO).

  A. Deploy a honeypot
  B. Disable unnecessary services
  C. Change default passwords
  D. Implement an application firewall
  E. Penetration testing
  B. Disable unnecessary services
  C. Change default passwords

• Question 439:

  A perimeter survey finds that the wireless network within a facility is easily reachable outside of the physical perimeter. Which of the following should be adjusted to mitigate this risk?

  A. CCMP
  B. MAC filter
  C. SSID broadcast
  D. Power level controls
  D. Power level controls

• Question 440:

  Which of the following protocols uses an asymmetric key to open a session and then establishes a symmetric key for the remainder of the session?

  A. SFTP
  B. HTTPS
  C. TFTP
  D. TLS
  B. HTTPS