CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 581:

  A company's legacy server requires administration using Telnet. Which of the following protocols could be used to secure communication by offering encryption at a lower OSI layer? (Select TWO).

  A. IPv6
  B. SFTP
  C. IPSec
  D. SSH
  E. IPv4
  A. IPv6
  C. IPSec

• Question 582:

  Which of the following technical controls helps to prevent Smartphones from connecting to a corporate network?

  A. Application white listing
  B. Remote wiping
  C. Acceptable use policy
  D. Mobile device management
  D. Mobile device management

• Question 583:

  Which of the following is BEST utilized to identify common misconfigurations throughout the enterprise?

  A. Vulnerability scanning
  B. Port scanning
  C. Penetration testing
  D. Black box
  A. Vulnerability scanning

• Question 584:

  While setting up a secure wireless corporate network, which of the following should Pete, an administrator, avoid implementing?

  A. EAP-TLS
  B. PEAP
  C. WEP
  D. WPA
  C. WEP

• Question 585:

  Which of the following preventative controls would be appropriate for responding to a directive to reduce the attack surface of a specific host?

  A. Installing anti-malware
  B. Implementing an IDS
  C. Taking a baseline configuration
  D. Disabling unnecessary services
  D. Disabling unnecessary services

• Question 586:

  When implementing fire suppression controls in a datacenter it is important to:

  A. Select a fire suppression system which protects equipment but may harm technicians.
  B. Ensure proper placement of sprinkler lines to avoid accidental leakage onto servers.
  C. Integrate maintenance procedures to include regularly discharging the system.
  D. Use a system with audible alarms to ensure technicians have 20 minutes to evacuate.
  B. Ensure proper placement of sprinkler lines to avoid accidental leakage onto servers.

• Question 587:

  After visiting a website, a user receives an email thanking them for a purchase which they did not request. Upon investigation the security administrator sees the following source code in a pop-up window:

  Which of the following has MOST likely occurred?

  A. SQL injection
  B. Cookie stealing
  C. XSRF
  D. XSS
  C. XSRF

• Question 588:

  A company recently implemented a TLS on their network. The company is MOST concerned with:

  A. Confidentiality
  B. Availability
  C. Integrity
  D. Accessibility
  A. Confidentiality

• Question 589:

  Which of the following does Jane, a software developer, need to do after compiling the source code of a program to attest the authorship of the binary?

  A. Place Jane's name in the binary metadata
  B. Use Jane's private key to sign the binary
  C. Use Jane's public key to sign the binary
  D. Append the source code to the binary
  B. Use Jane's private key to sign the binary

• Question 590:

  A security engineer is given new application extensions each month that need to be secured prior to implementation. They do not want the new extensions to invalidate or interfere with existing application security. Additionally, the engineer wants to ensure that the new requirements are approved by the appropriate personnel. Which of the following should be in place to meet these two goals? (Select TWO).

  A. Patch Audit Policy
  B. Change Control Policy
  C. Incident Management Policy
  D. Regression Testing Policy
  E. Escalation Policy
  F. Application Audit Policy
  B. Change Control Policy
  D. Regression Testing Policy