CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 81:

  It is important to staff who use email messaging to provide PII to others on a regular basis to have confidence that their messages are not intercepted or altered during transmission. They are concerned about which of the following types of security control?

  A. Integrity
  B. Safety
  C. Availability
  D. Confidentiality
  A. Integrity

• Question 82:

  Developers currently have access to update production servers without going through an approval process. Which of the following strategies would BEST mitigate this risk?

  A. Incident management
  B. Clean desk policy
  C. Routine audits
  D. Change management
  D. Change management

• Question 83:

  Sara, an attacker, is recording a person typing in their ID number into a keypad to gain access to the building. Sara then calls the helpdesk and informs them that their PIN no longer works and would like to change it. Which of the following attacks occurred LAST?

  A. Phishing
  B. Shoulder surfing
  C. Impersonation
  D. Tailgating
  C. Impersonation

• Question 84:

  Which of the following risk mitigation strategies will allow Ann, a security analyst, to enforce least privilege principles?

  A. User rights reviews
  B. Incident management
  C. Risk based controls
  D. Annual loss expectancy
  A. User rights reviews

• Question 85:

  Which of the following devices will help prevent a laptop from being removed from a certain location?

  A. Device encryption
  B. Cable locks
  C. GPS tracking
  D. Remote data wipes
  B. Cable locks

• Question 86:

  A password history value of three means which of the following?

  A. Three different passwords are used before one can be reused.
  B. A password cannot be reused once changed for three years.
  C. After three hours a password must be re-entered to continue.
  D. The server stores passwords in the database for three days.
  A. Three different passwords are used before one can be reused.

• Question 87:

  Which of the following protocols is used to authenticate the client and server's digital certificate?

  A. PEAP
  B. DNS
  C. TLS
  D. ICMP
  C. TLS

• Question 88:

  How often, at a MINIMUM, should Sara, an administrator, review the accesses and right of the users on her system?

  A. Annually
  B. Immediately after an employee is terminated
  C. Every five years
  D. Every time they patch the server
  A. Annually

• Question 89:

  The Chief Technical Officer (CTO) is worried about an increased amount of malware detected on end user's workstations. Which of the following technologies should be recommended to detect such anomalies?

  A. NIDS
  B. Web content filter
  C. Host-based IDS
  D. Web application firewall
  C. Host-based IDS

• Question 90:

  A security architect has developed a framework in which several authentication servers work together to increase processing power for an application. Which of the following does this represent?

  A. Warm site
  B. Load balancing
  C. Clustering
  D. RAID
  C. Clustering