SY0-301 Exam Questions

A security analyst implemented group-based privileges within the company active directory. Which of the following account management techniques should be undertaken regularly to en...

A technician has just installed a new firewall onto the network. Users are reporting that they cannot reach any website. Upon further investigation, the technician determines that...

The system administrator has been notified that many users are having difficulty connecting to the company's wireless network. They take a new laptop and physically go to the acces...

The systems administrator wishes to implement a hardware-based encryption method that could also be used to sign code. They can achieve this by:

The Chief Information Security Officer (CISO) has mandated that all IT systems with credit card data be segregated from the main corporate network to prevent unauthorized access an...

One of the servers on the network stops responding due to lack of available memory. Server administrators did not have a clear definition of what action should have taken place bas...

Used in conjunction, which of the following are PII? (Select TWO).

Which of the following is the BEST way to prevent Cross-Site Request Forgery (XSRF) attacks?

Which of the following practices is used to mitigate a known security vulnerability?

Which of the following would Jane, an administrator, use to detect an unknown security vulnerability?

When reviewing a digital certificate for accuracy, which of the following would Matt, a security administrator, focus on to determine who affirms the identity of the certificate ow...

An administrator values transport security strength above network speed when implementing an SSL VPN. Which of the following encryption ciphers would BEST meet their needs?

All of the following are encryption types EXCEPT:

Which of the following is used by Matt, a security administrator, to lower the risks associated with electrostatic discharge, corrosion, and thermal breakdown?

When integrating source material from an open source project into a highly secure environment, which of the following precautions should prevent hidden threats?

Which of the following would MOST likely belong in the DMZ? (Select TWO).

When verifying file integrity on a remote system that is bandwidth limited, which of the following tool combinations provides the STRONGEST confidence?

Requiring technicians to report spyware infections is a step in which of the following?

An organization is recovering data following a datacenter outage and determines that backup copies of files containing personal information were stored in an unsecure location, bec...

Which of the following provides the LEAST availability?

FTP/S uses which of the following TCP ports by default?

Which of the following is mainly used for remote access into the network?

Which of the following types of data encryption would Matt, a security administrator, use to encrypt a specific table?

Several users' computers are no longer responding normally and sending out spam email to the users' entire contact list. This is an example of which of the following?

Sara, an attacker, is recording a person typing in their ID number into a keypad to gain access to the building. Sara then calls the helpdesk and informs them that their PIN no lon...

A company replaces a number of devices with a mobile appliance, combining several functions. Which of the following descriptions fits this new implementation? (Select TWO).

Which of the following risks could IT management be mitigating by removing an all-in-one device?

Which of the following could a security administrator implement to mitigate the risk of tailgating for a large organization?

Which of the following concepts defines the requirement for data availability?

Pete, a security engineer, is trying to inventory all servers in a rack. The engineer launches RDP sessions to five different PCs and notices that the hardware properties are simil...

Sara, a security administrator, is noticing a slow down in the wireless network response. Sara launches a wireless sniffer and sees a large number of ARP packets being sent to the...

Pete, the security administrator, has been notified by the IDS that the company website is under attack. Analysis of the web logs show the following string, indicating a user is tr...

Which of the following techniques describes the use of application isolation during execution to prevent system compromise if the application is compromised?

Matt, an IT administrator, wants to protect a newly built server from zero day attacks. Which of the following would provide the BEST level of protection?

Jane, an IT administrator, is implementing security controls on a Microsoft Windows based kiosk used at a bank branch. This kiosk is used by the public for Internet banking. Which...

Sara, the Chief Information Officer (CIO), has tasked the IT department with redesigning the network to rely less on perimeter firewalls, to implement a standard operating environm...

Which of the following data loss prevention strategies mitigates the risk of replacing hard drives that cannot be sanitized?

Which of the following does Jane, a software developer, need to do after compiling the source code of a program to attest the authorship of the binary?

The annual loss expectancy can be calculated by:

Which of the following should Jane, the security administrator, do FIRST when an employee reports the loss of a corporate mobile device?

An application company sent out a software patch for one of their applications on Monday. The company has been receiving reports about intrusion attacks from their customers on Tue...

Which of the following protocols would be implemented to secure file transfers using SSL?

Which of the following are used to implement VPNs? (Select TWO).

A company recently implemented a TLS on their network. The company is MOST concerned with:

Which of the following describes how an attacker can send unwanted advertisements to a mobile device?

A network device that protects an enterprise based only on source and destination addresses is BEST described as:

A human resources employee receives an email from a family member stating there is a new virus going around. In order to remove the virus, a user must delete the Boot.ini file from...

A third party application has the ability to maintain its own user accounts or it may use single sign- on. To use single sign-on, the application is requesting the following inform...

Power and data cables from the network center travel through the building's boiler room. Which of the following should be used to prevent data emanation?

Which of the following must a security administrator implement to isolate public facing servers from both the corporate network and the Internet?