CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 471:

  A software development company has hired a programmer to develop a plug-in module to an existing proprietary application. After completing the module, the developer needs to test the entire application to ensure that the module did not introduce new vulnerabilities. Which of the following is the developer performing when testing the application?

  A. Black box testing
  B. White box testing
  C. Gray box testing
  D. Design review
  C. Gray box testing

• Question 472:

  A company storing data on a secure server wants to ensure it is legally able to dismiss and prosecute staff who intentionally access the server via Telnet and illegally tamper with customer data. Which of the following administrative controls should be implemented to BEST achieve this?

  A. Command shell restrictions
  B. Restricted interface
  C. Warning banners
  D. Session output pipe to /dev/null
  C. Warning banners

• Question 473:

  Configuring key/value pairs on a RADIUS server is associated with deploying which of the following?

  A. WPA2-Enterprise wireless network
  B. DNS secondary zones
  C. Digital certificates
  D. Intrusion detection system
  A. WPA2-Enterprise wireless network

• Question 474:

  Everyone in the accounting department has the ability to print and sign checks. Internal audit has asked that only one group of employees may print checks while only two other employees may sign the checks. Which of the following concepts would enforce this process?

  A. Separation of Duties
  B. Mandatory Vacations
  C. Discretionary Access Control
  D. Job Rotation
  A. Separation of Duties

• Question 475:

  Pete, a security administrator, has observed repeated attempts to break into the network. Which of the following is designed to stop an intrusion on the network?

  A. NIPS
  B. HIDS
  C. HIPS
  D. NIDS
  A. NIPS

• Question 476:

  The Chief Information Officer (CIO) wants to implement a redundant server location to which the production server images can be moved within 48 hours and services can be quickly restored, in case of a catastrophic failure of the primary datacenter's HVAC. Which of the following can be implemented?

  A. Cold site
  B. Load balancing
  C. Warm site
  D. Hot site
  C. Warm site

• Question 477:

  Which of the following would provide the STRONGEST encryption?

  A. Random one-time pad
  B. DES with a 56-bit key
  C. AES with a 256-bit key
  D. RSA with a 1024-bit key
  A. Random one-time pad

• Question 478:

  Which of the following is a difference between TFTP and FTP?

  A. TFTP is slower than FTP.
  B. TFTP is more secure than FTP.
  C. TFTP utilizes TCP and FTP uses UDP.
  D. TFTP utilizes UDP and FTP uses TCP.
  D. TFTP utilizes UDP and FTP uses TCP.

• Question 479:

  Which of the following must a security administrator implement to isolate public facing servers from both the corporate network and the Internet?

  A. NAC
  B. IPSec
  C. DMZ
  D. NAT
  C. DMZ

• Question 480:

  Which of the following tools would a security administrator use in order to identify all running services throughout an organization?

  A. Architectural review
  B. Penetration test
  C. Port scanner
  D. Design review
  C. Port scanner