CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 791:

  Which of the following protocols uses TCP instead of UDP and is incompatible with all previous versions?

  A. TACACS
  B. XTACACS
  C. RADIUS
  D. TACACS+
  D. TACACS+

• Question 792:

  A user in the company is in charge of various financial roles but needs to prepare for an upcoming audit. They use the same account to access each financial system. Which of the following security controls will MOST likely be implemented within the company?

  A. Account lockout policy
  B. Account password enforcement
  C. Password complexity enabled
  D. Separation of duties
  D. Separation of duties

• Question 793:

  After an assessment, auditors recommended that an application hosting company should contract with additional data providers for redundant high speed Internet connections. Which of the following is MOST likely the reason for this recommendation? (Select TWO).

  A. To allow load balancing for cloud support
  B. To allow for business continuity if one provider goes out of business
  C. To eliminate a single point of failure
  D. To allow for a hot site in case of disaster
  E. To improve intranet communication speeds
  B. To allow for business continuity if one provider goes out of business
  C. To eliminate a single point of failure

• Question 794:

  The administrator would like to implement hardware assisted full disk encryption on laptops. Which of the following would MOST likely be used to meet this goal?

  A. TPM
  B. USB Drive
  C. Key Escrow
  D. PKI
  A. TPM

• Question 795:

  Which of the following MOST specifically defines the procedures to follow when scheduled system patching fails resulting in system outages?

  A. Risk transference
  B. Change management
  C. Configuration management
  D. Access control revalidation
  B. Change management

• Question 796:

  An investigator recently discovered that an attacker placed a remotely accessible CCTV camera in a public area overlooking several Automatic Teller Machines (ATMs). It is also believed that user accounts belonging to ATM operators may have been compromised. Which of the following attacks has MOST likely taken place?

  A. Shoulder surfing
  B. Dumpster diving
  C. Whaling attack
  D. Vishing attack
  A. Shoulder surfing

• Question 797:

  A network device that protects an enterprise based only on source and destination addresses is BEST described as:

  A. IDS.
  B. ACL.
  C. Stateful packet filtering.
  D. Simple packet filtering.
  D. Simple packet filtering.

• Question 798:

  After a recent breach, the security administrator performs a wireless survey of the corporate network. The security administrator notices a problem with the following output:

  MAC SSID ENCRYPTION POWER BEACONS 00:10:A1:36:12:CC MYCORP WPA2 CCMP 60 1202 00:10:A1:49:FC:37 MYCORP WPA2 CCMP 70 9102 FB:90:11:42:FA:99 MYCORP WPA2 CCMP 40 3031 00:10:A1:AA:BB:CC MYCORP WPA2 CCMP 55 2021 00:10:A1:FA:B1:07 MYCORP WPA2 CCMP 30 6044

  Given that the corporate wireless network has been standardized, which of the following attacks is underway?

  A. Evil twin
  B. IV attack
  C. Rogue AP
  D. DDoS
  A. Evil twin

• Question 799:

  A company wants to ensure that its hot site is prepared and functioning. Which of the following would be the BEST process to verify the backup datacenter is prepared for such a scenario?

  A. Site visit to the backup data center
  B. Disaster recovery plan review
  C. Disaster recovery exercise
  D. Restore from backup
  C. Disaster recovery exercise

• Question 800:

  Which of the following wireless security technologies continuously supplies new keys for WEP?

  A. TKIP
  B. Mac filtering
  C. WPA2
  D. WPA
  A. TKIP