SY0-301 Exam Questions

Which of the following ports would be blocked if Pete, a security administrator, wants to deny access to websites?

Which of the following would Pete, a security administrator, do to limit a wireless signal from penetrating the exterior walls?

Which of the following is where an unauthorized device is found allowing access to a network?

Which of the following attacks allows access to contact lists on cellular phones?

Which of the following can hide confidential or malicious data in the whitespace of other files (e.g. JPEGs)?

Which of the following identifies certificates that have been compromised or suspected of being compromised?

Which of the following BEST allows Pete, a security administrator, to determine the type, source, and flags of the packet traversing a network for troubleshooting purposes?

Which of the following is the MOST important step for preserving evidence during forensic procedures?

Highly sensitive data is stored in a database and is accessed by an application on a DMZ server. The disk drives on all servers are fully encrypted. Communication between the appli...

The fundamental information security principals include confidentiality, availability and which of the following?

Which of the following is the MOST likely cause of users being unable to verify a single user's email signature and that user being unable to decrypt sent messages?

Full disk encryption is MOST effective against which of the following threats?

Which of the following may cause Jane, the security administrator, to seek an ACL work around?

In order to use a two-way trust model the security administrator MUST implement which of the following?

Which of the following would a security administrator use to verify the integrity of a file?

Which of the following is a best practice when securing a switch from physical access?

A security administrator needs to image a large hard drive for forensic analysis. Which of the following will allow for faster imaging to a second hard drive?

Sara, an employee, tethers her smartphone to her work PC to bypass the corporate web security gateway while connected to the LAN. While Sara is out at lunch her PC is compromised v...

Which of the following can be implemented if a security administrator wants only certain devices connecting to the wireless network?

Which of the following malware types typically allows an attacker to monitor a user's computer, is characterized by a drive-by download, and requires no user interaction?

Which of the following malware types may require user interaction, does not hide itself, and is commonly identified by marketing pop-ups based on browsing habits?

Which of the following is characterized by an attack against a mobile device?

Which of the following application attacks is used against a corporate directory service where there are unknown servers on the network?

Which of the following protocols allows for the LARGEST address space?

Who should be contacted FIRST in the event of a security breach?

A security administrator examines a network session to a compromised database server with a packet analyzer. Within the session there is a repeated series of the hex character 90 (...

Which of the following is an example of a false negative?

Which of the following access controls enforces permissions based on data labeling at specific levels?

Sara, a security administrator, manually hashes all network device configuration files daily and compares them to the previous days' hashes. Which of the following security concept...

Which of the following would be used to identify the security posture of a network without actually exploiting any weaknesses?

Which of the following authentication services uses a ticket granting system to provide access?

Matt, a security administrator, wants to configure all the switches and routers in the network in order to securely monitor their status. Which of the following protocols would he...

Jane, the security administrator, sets up a new AP but realizes too many outsiders are able to connect to that AP and gain unauthorized access. Which of the following would be the...

The public key is used to perform which of the following? (Select THREE).

Which of the following is BEST used to break a group of IP addresses into smaller network segments or blocks?

Which of the following would BEST be used to calculate the expected loss of an event, if the likelihood of an event occurring is known? (Select TWO).

An administrator wants to minimize the amount of time needed to perform backups during the week. It is also acceptable to the administrator for restoration to take an extended time...

Which of the following can be utilized in order to provide temporary IT support during a disaster, where the organization sets aside funds for contingencies, but does not necessari...

Which of the following is BEST utilized to identify common misconfigurations throughout the enterprise?

Which of the following is an attack vector that can cause extensive physical damage to a datacenter without physical access?

Which of the following policies is implemented in order to minimize data loss or theft?

Which of the following provides the HIGHEST level of confidentiality on a wireless network?

A security administrator is aware that a portion of the company's Internet-facing network tends to be non-secure due to poorly configured and patched systems. The business owner ha...

Which of the following should be implemented to stop an attacker from mapping out addresses and/or devices on a network?

Sara, the Chief Information Officer (CIO), has requested an audit take place to determine what services and operating systems are running on the corporate network. Which of the fol...

Matt, a systems security engineer, is determining which credential-type authentication to use within a planned 802.1x deployment. He is looking for a method that does not require a...

Matt, the Chief Information Security Officer (CISO), tells the network administrator that a security company has been hired to perform a penetration test against his network. The s...

Corporate IM presents multiple concerns to enterprise IT. Which of the following concerns should Jane, the IT security manager, ensure are under control? (Select THREE).

The use of social networking sites introduces the risk of:

Account lockout is a mitigation strategy used by Jane, the administrator, to combat which of the following attacks? (Select TWO).