CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 681:

  If Organization A trusts Organization B and Organization B trusts Organization C, then Organization A trusts Organization C. Which of the following PKI concepts is this describing?

  A. Transitive trust
  B. Public key trust
  C. Certificate authority trust
  D. Domain level trust
  A. Transitive trust

• Question 682:

  Sara, the security administrator, must configure the corporate firewall to allow all public IP addresses on the internal interface of the firewall to be translated to one public IP address on the external interface of the same firewall. Which of the following should Sara configure?

  A. PAT
  B. NAP
  C. DNAT
  D. NAC
  A. PAT

• Question 683:

  Which of the following algorithms has well documented collisions? (Select TWO).

  A. AES
  B. MD5
  C. SHA
  D. SHA-256
  E. RSA
  B. MD5
  C. SHA

• Question 684:

  Which of the following does full disk encryption prevent?

  A. Client side attacks
  B. Clear text access
  C. Database theft
  D. Network-based attacks
  B. Clear text access

• Question 685:

  Which of the following BEST explains the use of an HSM within the company servers?

  A. Thumb drives present a significant threat which is mitigated by HSM.
  B. Software encryption can perform multiple functions required by HSM.
  C. Data loss by removable media can be prevented with DLP.
  D. Hardware encryption is faster than software encryption.
  D. Hardware encryption is faster than software encryption.

• Question 686:

  Which of the following must be kept secret for a public key infrastructure to remain secure?

  A. Certificate Authority
  B. Certificate revocation list
  C. Public key ring
  D. Private key
  D. Private key

• Question 687:

  -- Exhibit

  

  

  -- Exhibit -

  Which of the following BEST describes the type of attack that is occurring?

  A. Smurf Attack
  B. Man in the middle
  C. Backdoor
  D. Replay
  E. Spear Phishing
  F. Xmas Attack
  G. Blue Jacking
  H. Ping of Death
  A. Smurf Attack

• Question 688:

  Digital signatures are used for ensuring which of the following items? (Select TWO).

  A. Confidentiality
  B. Integrity
  C. Non-Repudiation
  D. Availability
  E. Algorithm strength
  B. Integrity
  C. Non-Repudiation

• Question 689:

  Data execution prevention is a feature in most operating systems intended to protect against which type of attack?

  A. Cross-site scripting
  B. Buffer overflow
  C. Header manipulation
  D. SQL injection
  B. Buffer overflow

• Question 690:

  A security analyst needs to logon to the console to perform maintenance on a remote server. Which of the following protocols would provide secure access?

  A. SCP
  B. SSH
  C. SFTP
  D. HTTPS
  B. SSH