CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 631:

  During an audit, the security administrator discovers that there are several users that are no longer employed with the company but still have active user accounts. Which of the following should be performed?

  A. Account recovery
  B. Account disablement
  C. Account lockouts
  D. Account expiration
  B. Account disablement

• Question 632:

  A security analyst noticed a colleague typing the following command:

  `Telnet some-host 443'

  Which of the following was the colleague performing?

  A. A hacking attempt to the some-host web server with the purpose of achieving a distributed denial of service attack.
  B. A quick test to see if there is a service running on some-host TCP/443, which is being routed correctly and not blocked by a firewall.
  C. Trying to establish an insecure remote management session. The colleague should be using SSH or terminal services instead.
  D. A mistaken port being entered because telnet servers typically do not listen on port 443.
  B. A quick test to see if there is a service running on some-host TCP/443, which is being routed correctly and not blocked by a firewall.

• Question 633:

  Which of the following IP addresses would be hosts on the same subnet given the subnet mask 255.255.255.224? (Select TWO).

  A. 10.4.4.125
  B. 10.4.4.158
  C. 10.4.4.165
  D. 10.4.4.189
  E. 10.4.4.199
  C. 10.4.4.165
  D. 10.4.4.189

• Question 634:

  Which of the following is an effective way to ensure the BEST temperature for all equipment within a datacenter?

  A. Fire suppression
  B. Raised floor implementation
  C. EMI shielding
  D. Hot or cool aisle containment
  D. Hot or cool aisle containment

• Question 635:

  The helpdesk reports increased calls from clients reporting spikes in malware infections on their systems. Which of the following phases of incident response is MOST appropriate as a FIRST response?

  A. Recovery
  B. Follow-up
  C. Validation
  D. Identification
  E. Eradication
  F. Containment
  D. Identification

• Question 636:

  Which of the following relies on the use of shared secrets to protect communication?

  A. RADIUS
  B. Kerberos
  C. PKI
  D. LDAP
  A. RADIUS

• Question 637:

  A software developer is responsible for writing the code on an accounting application. Another software developer is responsible for developing code on a system in human resources. Once a year they have to switch roles for several weeks. Which of the following practices is being implemented?

  A. Mandatory vacations
  B. Job rotation
  C. Least privilege
  D. Separation of duties
  B. Job rotation

• Question 638:

  Which of the following protocols would be implemented to secure file transfers using SSL?

  A. TFTP
  B. SCP
  C. SFTP
  D. FTPS
  D. FTPS

• Question 639:

  Which of the following allows an organization to store a sensitive PKI component with a trusted third party?

  A. Trust model
  B. Public Key Infrastructure
  C. Private key
  D. Key escrow
  D. Key escrow

• Question 640:

  Which of the following would BEST be used to calculate the expected loss of an event, if the likelihood of an event occurring is known? (Select TWO).

  A. DAC
  B. ALE
  C. SLE
  D. ARO
  E. ROI
  B. ALE
  C. SLE