CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 61:

  Ann, the network administrator, has learned from the helpdesk that employees are accessing the wireless network without entering their domain credentials upon connection. Once the connection is made, they cannot reach any internal resources, while wired network connections operate smoothly. Which of the following is MOST likely occurring?

  A. A user has plugged in a personal access point at their desk to connect to the network wirelessly.
  B. The company is currently experiencing an attack on their internal DNS servers.
  C. The company's WEP encryption has been compromised and WPA2 needs to be implemented instead.
  D. An attacker has installed an access point nearby in an attempt to capture company information.
  D. An attacker has installed an access point nearby in an attempt to capture company information.

• Question 62:

  Datacenter access is controlled with proximity badges that record all entries and exits from the datacenter. The access records are used to identify which staff members accessed the data center in the event of equipment theft. Which of the following MUST be prevented in order for this policy to be effective?

  A. Password reuse
  B. Phishing
  C. Social engineering
  D. Tailgating
  D. Tailgating

• Question 63:

  Which of the following access controls enforces permissions based on data labeling at specific levels?

  A. Mandatory access control
  B. Separation of duties access control
  C. Discretionary access control
  D. Role based access control
  A. Mandatory access control

• Question 64:

  Which of the following is the LEAST volatile when performing incident response procedures?

  A. Registers
  B. RAID cache
  C. RAM
  D. Hard drive
  D. Hard drive

• Question 65:

  When a new network drop was installed, the cable was run across several fluorescent lights. The users of the new network drop experience intermittent connectivity. Which of the following environmental controls was MOST likely overlooked during installation?

  A. Humidity sensors
  B. EMI shielding
  C. Channel interference
  D. Cable kinking
  B. EMI shielding

• Question 66:

  Which of the following is the below pseudo-code an example of?

  IF VARIABLE (CONTAINS NUMBERS = TRUE) THEN EXIT

  A. Buffer overflow prevention
  B. Input validation
  C. CSRF prevention
  D. Cross-site scripting prevention
  B. Input validation

• Question 67:

  Human Resources (HR) would like executives to undergo only two specific security training programs a year. Which of the following provides the BEST level of security training for the executives? (Select TWO).

  A. Acceptable use of social media
  B. Data handling and disposal
  C. Zero day exploits and viruses
  D. Phishing threats and attacks
  E. Clean desk and BYOD
  F. Information security awareness
  D. Phishing threats and attacks
  F. Information security awareness

• Question 68:

  Various network outages have occurred recently due to unapproved changes to network and security devices. All changes were made using various system credentials. The security analyst has been tasked to update the security policy. Which of the following risk mitigation strategies would also need to be implemented to reduce the number of network outages due to unauthorized changes?

  A. User rights and permissions review
  B. Configuration management
  C. Incident management
  D. Implement security controls on Layer 3 devices
  A. User rights and permissions review

• Question 69:

  Multi-tenancy is a concept found in which of the following?

  A. Full disk encryption
  B. Removable media
  C. Cloud computing
  D. Data loss prevention
  C. Cloud computing

• Question 70:

  A company that has a mandatory vacation policy has implemented which of the following controls?

  A. Risk control
  B. Privacy control
  C. Technical control
  D. Physical control
  A. Risk control