SY0-301 Exam Questions

Which of the following devices is BEST suited for servers that need to store private keys?

All of the following are valid cryptographic hash functions EXCEPT:

In regards to secure coding practices, why is input validation important?

Which of the following would be used when a higher level of security is desired for encryption key storage?

A security administrator needs to determine which system a particular user is trying to login to at various times of the day. Which of the following log types would the administrat...

Which of the following MUST be updated immediately when an employee is terminated to prevent unauthorized access?

Employee badges are encoded with a private encryption key and specific personal information. The encoding is then used to provide access to the network. Which of the following desc...

Which of the following devices would MOST likely have a DMZ interface?

Which of the following application security testing techniques is implemented when an automated system generates random input data?

Which of the following can be used by a security administrator to successfully recover a user's forgotten password on a password protected file?

A security administrator wants to check user password complexity. Which of the following is the BEST tool to use?

Certificates are used for: (Select TWO).

Which of the following is a hardware based encryption device?

Which of the following BEST describes a protective countermeasure for SQL injection?

Which of the following MOST interferes with network-based detection techniques?

A certificate authority takes which of the following actions in PKI?

Use of a smart card to authenticate remote servers remains MOST susceptible to which of the following attacks?

Separation of duties is often implemented between developers and administrators in order to separate which of the following?

A security administrator needs to update the OS on all the switches in the company. Which of the following MUST be done before any actual switch configuration is performed?

Jane, an individual, has recently been calling various financial offices pretending to be another person to gain financial information. Which of the following attacks is being desc...

A user in the company is in charge of various financial roles but needs to prepare for an upcoming audit. They use the same account to access each financial system. Which of the fo...

A CRL is comprised of:

Sara, a user, downloads a keygen to install pirated software. After running the keygen, system performance is extremely slow and numerous antivirus alerts are displayed. Which of t...

Which of the following may significantly reduce data loss if multiple drives fail at the same time?

Which of the following should be considered to mitigate data theft when using CAT5 wiring?

To help prevent unauthorized access to PCs, a security administrator implements screen savers that lock the PC after five minutes of inactivity. Which of the following controls is...

Pete, a network administrator, is capturing packets on the network and notices that a large amount of the traffic on the LAN is SIP and RTP protocols. Which of the following should...

Which of the following IP addresses would be hosts on the same subnet given the subnet mask 255.255.255.224? (Select TWO).

Which of the following algorithms has well documented collisions? (Select TWO).

Which of the following is BEST used as a secure replacement for TELNET?

An email client says a digital signature is invalid and the sender cannot be verified. The recipient is concerned with which of the following concepts?

Which of the following is an effective way to ensure the BEST temperature for all equipment within a datacenter?

Which of the following transportation encryption protocols should be used to ensure maximum security between a web browser and a web server?

Developers currently have access to update production servers without going through an approval process. Which of the following strategies would BEST mitigate this risk?

Which of the following is a difference between TFTP and FTP?

Matt, an administrator, notices a flood fragmented packet and retransmits from an email server. After disabling the TCP offload setting on the NIC, Matt sees normal traffic with pa...

Which of the following is characterized by an attacker attempting to map out an organization's staff hierarchy in order to send targeted emails?

Which of the following would a security administrator implement in order to discover comprehensive security threats on a network?

Which of the following is an example of a false positive?

Data execution prevention is a feature in most operating systems intended to protect against which type of attack?

Use of group accounts should be minimized to ensure which of the following?

Privilege creep among long-term employees can be mitigated by which of the following procedures?

In which of the following scenarios is PKI LEAST hardened?

Configuring the mode, encryption methods, and security associations are part of which of the following?

Which of the following assessments would Pete, the security administrator, use to actively test that an application's security controls are in place?

A security administrator has just finished creating a hot site for the company. This implementation relates to which of the following concepts?

In the initial stages of an incident response, Matt, the security administrator, was provided the hard drives in question from the incident manager. Which of the following incident...

Which of the following is used to certify intermediate authorities in a large PKI deployment?

Which of the following components MUST be trusted by all parties in PKI?

Which of the following should Matt, a security administrator, include when encrypting smartphones? (Select TWO).