CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 611:

  A company that purchased an HVAC system for the datacenter is MOST concerned with which of the following?

  A. Availability
  B. Integrity
  C. Confidentiality
  D. Fire suppression
  A. Availability

• Question 612:

  Which of the following types of cryptography should be used when minimal overhead is necessary for a mobile device?

  A. Block cipher
  B. Elliptical curve cryptography
  C. Diffie-Hellman algorithm
  D. Stream cipher
  B. Elliptical curve cryptography

• Question 613:

  Which of the following policies is implemented in order to minimize data loss or theft?

  A. PII handling
  B. Password policy
  C. Chain of custody
  D. Zero day exploits
  A. PII handling

• Question 614:

  During which of the following phases of the Incident Response process should a security administrator define and implement general defense against malware?

  A. Lessons Learned
  B. Preparation
  C. Eradication
  D. Identification
  B. Preparation

• Question 615:

  A network administrator has been tasked with securing the WLAN. Which of the following cryptographic products would be used to provide the MOST secure environment for the WLAN?

  A. WPA2 CCMP
  B. WPA
  C. WPA with MAC filtering
  D. WPA2 TKIP
  A. WPA2 CCMP

• Question 616:

  Sara, a security manager, has decided to force expiration of all company passwords by the close of business day. Which of the following BEST supports this reasoning?

  A. A recent security breach in which passwords were cracked.
  B. Implementation of configuration management processes.
  C. Enforcement of password complexity requirements.
  D. Implementation of account lockout procedures.
  A. A recent security breach in which passwords were cracked.

• Question 617:

  Which of the following types of application attacks would be used to identify malware causing security breaches that have NOT yet been identified by any trusted sources?

  A. Zero-day
  B. LDAP injection
  C. XML injection
  D. Directory traversal
  A. Zero-day

• Question 618:

  Which of the following malware types may require user interaction, does not hide itself, and is commonly identified by marketing pop-ups based on browsing habits?

  A. Botnet
  B. Rootkit
  C. Adware
  D. Virus
  C. Adware

• Question 619:

  A bank has a fleet of aging payment terminals used by merchants for transactional processing. The terminals currently support single DES but require an upgrade in order to be compliant with security standards. Which of the following is likely to be the simplest upgrade to the aging terminals which will improve in-transit protection of transactional data?

  A. AES
  B. 3DES
  C. RC4
  D. WPA2
  B. 3DES

• Question 620:

  A review of the company's network traffic shows that most of the malware infections are caused by users visiting gambling and gaming websites. The security manager wants to implement a solution that will block these websites, scan all web traffic for signs of malware, and block the malware before it enters the company network. Which of the following is suited for this purpose?

  A. ACL
  B. IDS
  C. UTM
  D. Firewall
  C. UTM