CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 521:

  A new MPLS network link has been established between a company and its business partner. The link provides logical isolation in order to prevent access from other business partners. Which of the following should be applied in order to achieve confidentiality and integrity of all data across the link?

  A. MPLS should be run in IPVPN mode.
  B. SSL/TLS for all application flows.
  C. IPSec VPN tunnels on top of the MPLS link.
  D. HTTPS and SSH for all application flows.
  C. IPSec VPN tunnels on top of the MPLS link.

• Question 522:

  Which of the following statements is MOST likely to be included in the security awareness training about P2P?

  A. P2P is always used to download copyrighted material.
  B. P2P can be used to improve computer system response.
  C. P2P may prevent viruses from entering the network.
  D. P2P may cause excessive network bandwidth.
  D. P2P may cause excessive network bandwidth.

• Question 523:

  Which of the following uses both a public and private key?

  A. RSA
  B. AES
  C. MD5
  D. SHA
  A. RSA

• Question 524:

  Which of the following should Joe, a security manager, implement to reduce the risk of employees working in collusion to embezzle funds from his company?

  A. Privacy Policy
  B. Least Privilege
  C. Acceptable Use
  D. Mandatory Vacations
  D. Mandatory Vacations

• Question 525:

  In PKI, a key pair consists of: (Select TWO).

  A. A key ring
  B. A public key
  C. A private key
  D. Key escrow
  E. A passphrase
  B. A public key
  C. A private key

• Question 526:

  A security technician is attempting to access a wireless network protected with WEP. The technician does not know any information about the network. Which of the following should the technician do to gather information about the configuration of the wireless network?

  A. Spoof the MAC address of an observed wireless network client
  B. Ping the access point to discover the SSID of the network
  C. Perform a dictionary attack on the access point to enumerate the WEP key
  D. Capture client to access point disassociation packets to replay on the local PC's loopback
  A. Spoof the MAC address of an observed wireless network client

• Question 527:

  Which of the following is an authentication method that can be secured by using SSL?

  A. RADIUS
  B. LDAP
  C. TACACS+
  D. Kerberos
  B. LDAP

• Question 528:

  A security architect wishes to implement a wireless network with connectivity to the company's internal network. Before they inform all employees that this network is being put in place, the architect wants to roll it out to a small test segment. Which of the following allows for greater secrecy about this network during this initial phase of implementation?

  A. Disabling SSID broadcasting
  B. Implementing WPA2 - TKIP
  C. Implementing WPA2 - CCMP
  D. Filtering test workstations by MAC address
  A. Disabling SSID broadcasting

• Question 529:

  Which of the following is the MOST important step for preserving evidence during forensic procedures?

  A. Involve law enforcement
  B. Chain of custody
  C. Record the time of the incident
  D. Report within one hour of discovery
  B. Chain of custody

• Question 530:

  An incident response team member needs to perform a forensics examination but does not have the required hardware. Which of the following will allow the team member to perform the examination with minimal impact to the potential evidence?

  A. Using a software file recovery disc
  B. Mounting the drive in read-only mode
  C. Imaging based on order of volatility
  D. Hashing the image after capture
  B. Mounting the drive in read-only mode