CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 811:

  A security administrator implements access controls based on the security classification of the data and need-to-know information. Which of the following BEST describes this level of access control?

  A. Implicit deny
  B. Role-based Access Control
  C. Mandatory Access Controls
  D. Least privilege
  C. Mandatory Access Controls

• Question 812:

  Pete, the system administrator, has blocked users from accessing social media web sites. In addition to protecting company information from being accidentally leaked, which additional security benefit does this provide?

  A. No competition with the company's official social presence
  B. Protection against malware introduced by banner ads
  C. Increased user productivity based upon fewer distractions
  D. Elimination of risks caused by unauthorized P2P file sharing
  B. Protection against malware introduced by banner ads

• Question 813:

  Which of the following MUST Matt, a security administrator, implement to verify both the integrity and authenticity of a message while requiring a shared secret?

  A. RIPEMD
  B. MD5
  C. SHA
  D. HMAC
  D. HMAC

• Question 814:

  A user attempting to log on to a workstation for the first time is prompted for the following information before being granted access: username, password, and a four-digit security pin that was mailed to him during account registration. This is an example of which of the following?

  A. Dual-factor authentication
  B. Multifactor authentication
  C. Single factor authentication
  D. Biometric authentication
  C. Single factor authentication

• Question 815:

  After a new firewall has been installed, devices cannot obtain a new IP address. Which of the following ports should Matt, the security administrator, open on the firewall?

  A. 25
  B. 68
  C. 80
  D. 443
  B. 68

• Question 816:

  Which of the following BEST describes a SQL Injection attack?

  A. The attacker attempts to have the receiving server pass information to a back-end database from which it can compromise the stored information.
  B. The attacker attempts to have the receiving server run a payload using programming commonly found on web servers.
  C. The attacker overwhelms a system or application, causing it to crash and bring the server down to cause an outage.
  D. The attacker overwhelms a system or application, causing it to crash, and then redirects the memory address to read from a location holding the payload.
  A. The attacker attempts to have the receiving server pass information to a back-end database from which it can compromise the stored information.

• Question 817:

  Determine the types of Attacks from right to specific action.

  Select and Place:

  

  

• Question 818:

  Which of the following types of wireless attacks would be used specifically to impersonate another WAP in order to gain unauthorized information from mobile users?

  A. IV attack
  B. Evil twin
  C. War driving
  D. Rogue access point
  B. Evil twin

• Question 819:

  Joe, a newly hired employee, has a corporate workstation that has been compromised due to several visits to P2P sites. Joe insisted that he was not aware of any company policy that prohibits the use of such web sites. Which of the following is the BEST method to deter employees from the improper use of the company's information systems?

  A. Acceptable Use Policy
  B. Privacy Policy
  C. Security Policy
  D. Human Resource Policy
  A. Acceptable Use Policy

• Question 820:

  Which of the following network architecture concepts is used to securely isolate at the boundary between networks?

  A. VLAN
  B. Subnetting
  C. DMZ
  D. NAT
  C. DMZ