CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 661:

  All executive officers have changed their monitor location so it cannot be easily viewed when passing by their offices. Which of the following attacks does this action remediate?

  A. Dumpster Diving
  B. Impersonation
  C. Shoulder Surfing
  D. Whaling
  C. Shoulder Surfing

• Question 662:

  Which of the following devices is BEST suited to protect an HTTP-based application that is susceptible to injection attacks?

  A. Protocol filter
  B. Load balancer
  C. NIDS
  D. Layer 7 firewall
  D. Layer 7 firewall

• Question 663:

  A computer supply company is located in a building with three wireless networks. The system security team implemented a quarterly security scan and saw the following. Which of the following is this an example of?

  SSID State Channel Level Computer AreUs1 connected 1 70dbm Computer AreUs2 connected 5 80dbm Computer AreUs3 connected 3 75dbm Computer AreUs4 connected 6 95dbm

  A. Rouge access point
  B. Near field communication
  C. Jamming
  D. Packet sniffing
  A. Rouge access point

• Question 664:

  Which of the following are used to implement VPNs? (Select TWO).

  A. SFTP
  B. IPSec
  C. HTTPS
  D. SNMP
  E. SSL
  B. IPSec
  E. SSL

• Question 665:

  Sara, a company's security officer, often receives reports of unauthorized personnel having access codes to the cipher locks of secure areas in the building. Sara should immediately implement which of the following?

  A. Acceptable Use Policy
  B. Physical security controls
  C. Technical controls
  D. Security awareness training
  D. Security awareness training

• Question 666:

  Which of the following must a user implement if they want to send a secret message to a co- worker by embedding it within an image?

  A. Transport encryption
  B. Steganography
  C. Hashing
  D. Digital signature
  B. Steganography

• Question 667:

  Which of the following would be used to identify the security posture of a network without actually exploiting any weaknesses?

  A. Penetration test
  B. Code review
  C. Vulnerability scan
  D. Brute Force scan
  C. Vulnerability scan

• Question 668:

  Which of the following technologies can store multi-tenant data with different security requirements?

  A. Data loss prevention
  B. Trusted platform module
  C. Hard drive encryption
  D. Cloud computing
  D. Cloud computing

• Question 669:

  An administrator notices that former temporary employees' accounts are still active on a domain. Which of the following can be implemented to increase security and prevent this from happening?

  A. Implement a password expiration policy.
  B. Implement an account expiration date for permanent employees.
  C. Implement time of day restrictions for all temporary employees.
  D. Run a last logon script to look for inactive accounts.
  D. Run a last logon script to look for inactive accounts.

• Question 670:

  The finance department works with a bank which has recently had a number of cyber attacks. The finance department is concerned that the banking website certificates have been compromised. Which of the following can the finance department check to see if any of the bank's certificates are still valid?

  A. Bank's CRL
  B. Bank's private key
  C. Bank's key escrow
  D. Bank's recovery agent
  A. Bank's CRL