SY0-301 Exam Questions

XYZ Corporation is about to purchase another company to expand its operations. The CEO is concerned about information leaking out, especially with the cleaning crew that comes in a...

The administrator would like to implement hardware assisted full disk encryption on laptops. Which of the following would MOST likely be used to meet this goal?

Jane, a security administrator, wants to harden the web server. Which of the following could she perform to accomplish this task?

Which of the following policies could be implemented to help prevent users from displaying their login credentials in open view for everyone to see?

Pete, the system administrator, has concerns regarding users losing their company provided smartphones. Pete's focus is on equipment recovery. Which of the following BEST addresses...

A security administrator wants to deploy security controls to mitigate the threat of company employees' personal information being captured online. Which of the following would BES...

Which of the following statements is MOST likely to be included in the security awareness training about P2P?

A company's chief information officer (CIO) has analyzed the financial loss associated with the company's database breach. They calculated that one single breach could cost the com...

After a production outage, which of the following documents contains detailed information on the order in which the system should be restored to service?

Which of the following wireless protocols could be vulnerable to a brute-force password attack? (Select TWO).

An auditor is given access to a conference room to conduct an analysis. When they connect their laptop's Ethernet cable into the wall jack, they are not able to get a connection to...

Which of the following types of trust models is used by a PKI?

A security architect has developed a framework in which several authentication servers work together to increase processing power for an application. Which of the following does th...

A technician has implemented a system in which all workstations on the network will receive security updates on the same schedule. Which of the following concepts does this illustr...

Which of the following offers the LEAST amount of protection against data theft by USB drives?

A security analyst has been informed that the development team has plans to develop an application which does not meet the company's password policy. Which of the following should...

A security administrator develops a web page and limits input into their fields on the web page as well as filters special characters in output. The administrator is trying to prev...

Sara, a hacker, is completing a website form to request a free coupon. The site has a field that limits the request to 3 or fewer coupons. While submitting the form, Sara runs an a...

Several users report to the administrator that they are having issues downloading files from the file server. Which of the following assessment tools can be used to determine if th...

When a new network drop was installed, the cable was run across several fluorescent lights. The users of the new network drop experience intermittent connectivity. Which of the fol...

An administrator configures all wireless access points to make use of a new network certificate authority. Which of the following is being used?

A security analyst noticed a colleague typing the following command: `Telnet some-host 443' Which of the following was the colleague performing?

An information bank has been established to store contacts, phone numbers and other records. An application running on UNIX would like to connect to this index server using port 88...

A database administrator contacts a security administrator to request firewall changes for a connection to a new internal application. The security administrator notices that the n...

Which of the following BEST describes a SQL Injection attack?

Digital signatures are used for ensuring which of the following items? (Select TWO).

Matt, an administrator, is concerned about the wireless network being discovered by war driving. Which of the following can be done to mitigate this?

A company wants to ensure that its hot site is prepared and functioning. Which of the following would be the BEST process to verify the backup datacenter is prepared for such a sce...

Which of the following are restricted to 64-bit block sizes? (Select TWO).

A security administrator is segregating all web-facing server traffic from the internal network and restricting it to a single interface on a firewall. Which of the following BEST...

Public keys are used for which of the following?

Which of the following is a requirement when implementing PKI if data loss is unacceptable?

Which of the following is true about PKI? (Select TWO).

The recovery agent is used to recover the:

Which of the following is true about the CRL?

A password history value of three means which of the following?

A user has forgotten their account password. Which of the following is the BEST recovery strategy?

Allowing unauthorized removable devices to connect to computers increases the risk of which of the following?

A computer is put into a restricted VLAN until the computer's virus definitions are up-to-date. Which of the following BEST describes this system type?

Without validating user input, an application becomes vulnerable to all of the following EXCEPT:

To protect corporate data on removable media, a security policy should mandate that all removable devices use which of the following?

Which of the following wireless security technologies continuously supplies new keys for WEP?

Which of the following malware types is MOST likely to execute its payload after Jane, an employee, has left the company?

Which of the following application security principles involves inputting random data into a program?

Which of the following is an important step in the initial stages of deploying a host-based firewall?

Identifying a list of all approved software on a system is a step in which of the following practices?

Which of the following BEST describes using a smart card and typing in a PIN to gain access to a system?

An administrator has advised against the use of Bluetooth phones due to bluesnarfing concerns. Which of the following is an example of this threat?

Which of the following is the difference between identification and authentication of a user?

The marketing department wants to distribute pens with embedded USB drives to clients. In the past this client has been victimized by social engineering attacks which led to a loss...