CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 551:

  A security technician wishes to gather and analyze all Web traffic during a particular time period. Which of the following represents the BEST approach to gathering the required data?

  A. Configure a VPN concentrator to log all traffic destined for ports 80 and 443.
  B. Configure a proxy server to log all traffic destined for ports 80 and 443.
  C. Configure a switch to log all traffic destined for ports 80 and 443.
  D. Configure a NIDS to log all traffic destined for ports 80 and 443.
  B. Configure a proxy server to log all traffic destined for ports 80 and 443.

• Question 552:

  Matt, an administrator, notices a flood fragmented packet and retransmits from an email server. After disabling the TCP offload setting on the NIC, Matt sees normal traffic with packets flowing in sequence again. Which of the following utilities was he MOST likely using to view this issue?

  A. Spam filter
  B. Protocol analyzer
  C. Web application firewall
  D. Load balancer
  B. Protocol analyzer

• Question 553:

  In the case of a major outage or business interruption, the security office has documented the expected loss of earnings, potential fines and potential consequence to customer service. Which of the following would include the MOST detail on these objectives?

  A. Business Impact Analysis
  B. IT Contingency Plan
  C. Disaster Recovery Plan
  D. Continuity of Operations
  A. Business Impact Analysis

• Question 554:

  Allowing unauthorized removable devices to connect to computers increases the risk of which of the following?

  A. Data leakage prevention
  B. Data exfiltration
  C. Data classification
  D. Data deduplication
  B. Data exfiltration

• Question 555:

  Establishing a published chart of roles, responsibilities, and chain of command to be used during a disaster is an example of which of the following?

  A. Fault tolerance
  B. Succession planning
  C. Business continuity testing
  D. Recovery point objectives
  B. Succession planning

• Question 556:

  Which of the following can Joe, a security administrator, implement on his network to capture attack details that are occurring while also protecting his production network?

  A. Security logs
  B. Protocol analyzer
  C. Audit logs
  D. Honeypot
  D. Honeypot

• Question 557:

  A customer service department has a business need to send high volumes of confidential information to customers electronically. All emails go through a DLP scanner. Which of the following is the BEST solution to meet the business needs and protect confidential information?

  A. Automatically encrypt impacted outgoing emails
  B. Automatically encrypt impacted incoming emails
  C. Monitor impacted outgoing emails
  D. Prevent impacted outgoing emails
  A. Automatically encrypt impacted outgoing emails

• Question 558:

  Pete, a network administrator, is capturing packets on the network and notices that a large amount of the traffic on the LAN is SIP and RTP protocols. Which of the following should he do to segment that traffic from the other traffic?

  A. Connect the WAP to a different switch.
  B. Create a voice VLAN.
  C. Create a DMZ.
  D. Set the switch ports to 802.1q mode.
  B. Create a voice VLAN.

• Question 559:

  Which of the following offerings typically allows the customer to apply operating system patches?

  A. Software as a service
  B. Public Clouds
  C. Cloud Based Storage
  D. Infrastructure as a service
  D. Infrastructure as a service

• Question 560:

  Connections using point-to-point protocol authenticate using which of the following? (Select TWO).

  A. RIPEMD
  B. PAP
  C. CHAP
  D. RC4
  E. Kerberos
  B. PAP
  C. CHAP