Brooks Thornhill
Quiz by , created more than 1 year ago

Questions 101- 150

18
0
0
Brooks Thornhill
Created by Brooks Thornhill almost 8 years ago
Close

SY0-301 Part 3

Question 1 of 50

1

A security administrator is asked to email an employee their password. Which of the following account policies
MUST be set to ensure the employee changes their password promptly?

Select one of the following:

  • Password expiration

  • Account lockout

  • Password recovery

  • Account enablement

Explanation

Question 2 of 50

1

Which of the following is the BEST way to mitigate data loss if a portable device is compromised?

Select one of the following:

  • Full disk encryption

  • Common access card

  • Strong password complexity

  • Biometric authentication

Explanation

Question 3 of 50

1

Data can potentially be stolen from a disk encrypted, screen-lock protected, smartphone by which of the
following?

Select one of the following:

  • Bluesnarfing

  • IV attack

  • Honeynet

  • SIM cloning

Explanation

Question 4 of 50

1

A purpose of LDAP authentication services is:

Select one of the following:

  • to implement mandatory access controls

  • a single point of user management

  • to prevent multifactor authentication

  • to issue one-time hashed passwords

Explanation

Question 5 of 50

1

Which of the following allows an attacker to identify vulnerabilities within a closed source software application?

Select one of the following:

  • Fuzzing

  • Compiling

  • Code reviews

  • Vulnerability scanning

Explanation

Question 6 of 50

1

Which of the following should the security administrator look at FIRST when implementing an AP to gain more
coverage?

Select one of the following:

  • Encryption methods

  • Power levels

  • SSID

  • Radio frequency

Explanation

Question 7 of 50

1

Which of the following elements of PKI are found in a browser's trusted root CA?

Select one of the following:

  • Private key

  • Symmetric key

  • Recovery key

  • Public key

Explanation

Question 8 of 50

1

Which of the following protocols should be blocked at the network perimeter to prevent host enumeration by
sweep devices?

Select one of the following:

  • HTTPS

  • SSH

  • IPv4

  • ICMP

Explanation

Question 9 of 50

1

Which of the following security threats does shredding mitigate?

Select one of the following:

  • Shoulder surfing

  • Document retention

  • Tailgating

  • Dumpster diving

Explanation

Question 10 of 50

1

A thumbprint scanner is used to test which of the following aspects of human authentication?

Select one of the following:

  • Something a user did

  • Something a user has

  • Something a user is

  • Something a user knows

Explanation

Question 11 of 50

1

Which of the following protocols requires the use of a CA based authentication process?

Select one of the following:

  • FTPS implicit

  • FTPS explicit

  • MD5

  • PEAP-TLS

Explanation

Question 12 of 50

1

Which of the following malware types is an antivirus scanner MOST unlikely to discover? (Select TWO)

Select one or more of the following:

  • Trojan

  • Pharming

  • Worms

  • Virus

  • Logic bomb

Explanation

Question 13 of 50

1

Which of the following is specific to a buffer overflow attack?

Select one of the following:

  • Memory addressing

  • Directory traversal

  • Initial vector

  • Session cookies

Explanation

Question 14 of 50

1

An existing application has never been assessed from a security perspective. Which of the following is the
BEST assessment technique in order to identify the application's security posture?

Select one of the following:

  • Baseline reporting

  • Protocol analysis

  • Threat modeling

  • Functional testing

Explanation

Question 15 of 50

1

A security administrator with full administrative rights on the network is forced to change roles on a quarterly
basis with another security administrator. Which of the following describes this form of access control?

Select one of the following:

  • Job rotation

  • Separation of duties

  • Mandatory vacation

  • Least privilege

Explanation

Question 16 of 50

1

DRPs should contain which of the following?

Select one of the following:

  • Hierarchical list of non-critical personnel

  • Hierarchical list of critical systems

  • Hierarchical access control lists

  • Identification of single points of failure

Explanation

Question 17 of 50

1

Which of the following is a security threat that hides itself within another piece of executable software?

Select one of the following:

  • Botnet

  • Logic Bomb

  • Trojan

  • Worm

Explanation

Question 18 of 50

1

A user was trying to update an open file but when they tried to access the file they were denied. Which of the
following would explain why the user could not access the file?

Select one of the following:

  • Audit only access

  • Execute only access

  • Rights are not set correctly

  • Write only access

Explanation

Question 19 of 50

1

A technician is deciding between implementing a HIDS on the database server or implementing a NIDS. Which
of the following are reasons why a NIDS may be better to implement? (Select TWO)

Select one or more of the following:

  • Many HIDS require frequent patches and updates

  • Many HIDS are not able to detect network attacks

  • Many HIDS have a negative impact on system performance

  • Many HIDS only offer a low level of detection granularity

  • Many HIDS are not good at detecting attacks on database servers

Explanation

Question 20 of 50

1

Which of the following organizational documentation describes step by step how tasks or job functions should
be conducted?

Select one of the following:

  • Standards

  • Guideline

  • Policy

  • Procedures

Explanation

Question 21 of 50

1

According to company policy an administrator must logically keep the Human Resources department separated
from the Accounting department. Which of the following would be the simplest way to accomplish this?

Select one of the following:

  • NIDS

  • DMZ

  • NAT

  • VLAN

Explanation

Question 22 of 50

1

Which of the following is the MOST common logical access control method?

Select one of the following:

  • Access control lists

  • Usernames and password

  • Multifactor authentication

  • Security ID badges

Explanation

Question 23 of 50

1

Which of the following access control methods could the administrator implement because of constant hiring of
new personnel?

Select one of the following:

  • Rule-based

  • Role-based

  • Discretionary

  • Decentralized

Explanation

Question 24 of 50

1

After a period of high employee turnover, which of the following should be implemented?

Select one of the following:

  • A review of NTLM hashes on the domain servers

  • A review of group policies

  • A review of user access and rights

  • A review of storage and retention policies

Explanation

Question 25 of 50

1

Multiple web servers are fed from a load balancer. Which of the following is this an example of?

Select one of the following:

  • RAID

  • Backup generator

  • Hot site

  • Redundant servers

Explanation

Question 26 of 50

1

An instance where an IDS identifies legitimate traffic as malicious activity is called which of the following?

Select one of the following:

  • False positive

  • True negative

  • False negative

  • True positive

Explanation

Question 27 of 50

1

Which of the following protocols are used to secure e-commerce transactions? (Select TWO).

Select one or more of the following:

  • TLS

  • IPSec

  • SSH

  • SSL

  • RTP

Explanation

Question 28 of 50

1

Which of the following sends unsolicited messages to another user cell phone via Bluetooth?

Select one of the following:

  • Blue jacking

  • Smurfing

  • Data emanation

  • Bluesnarfing

Explanation

Question 29 of 50

1

Which of the following network protocols facilitates hiding internal addresses from the Internet?

Select one of the following:

  • DMZ

  • NAT

  • NAC

  • ARP

Explanation

Question 30 of 50

1

An administrator wishes to deploy an IPSec VPN connection between two routers across a WAN. The
administrator wants to ensure that the VPN is encrypted in the most secure fashion possible. Which of the
following BEST identifies the correct IPSec mode and the proper configuration?

Select one of the following:

  • IPSec in tunnel mode, using both the ESP and AH protocols

  • IPSec in tunnel mode, using the ESP protocol

  • IPSec in transport mode, using the AH protocol

  • IPSec in transport mode, using both ESP and AH protocols

Explanation

Question 31 of 50

1

A company wants to ensure that users only use their accounts between 8AM and 6PM Monday thru Friday.
Which of the following access control methods would be MOST effective for this purpose?

Select one of the following:

  • Account expiration

  • Logical tokens

  • Time of day restrictions

  • Group policies

Explanation

Question 32 of 50

1

Which of the following sends data packets to various IP ports on a host to determine the responsive ports?

Select one of the following:

  • OVAL

  • Network sniffer

  • Protocol analyzer

  • Network mappers

Explanation

Question 33 of 50

1

Which of the following would be a benefit of testing a program of an unknown source on a virtual machine?

Select one of the following:

  • Virtual machines render it impossible for the code to escape

  • Virtual machines allow for faster performance, so the speed of benchmark testing is increased

  • Virtual machines come equipped with a firewall by default, thus preventing outside contamination

  • Virtual machines can easily be restored to an earlier point if the code is malicious or causes instability

Explanation

Question 34 of 50

1

A company has a problem with users inadvertently posting company information on the Internet. Which of the
following is the BEST method for the company to address it?

Select one of the following:

  • Educate the users and perform awareness training

  • Harden the password policies in case of future breaches

  • Routinely audit all users browser history

  • Implement HR policies with consequences

Explanation

Question 35 of 50

1

Which of the following describes what has occurred after a user has successfully gained access to a secure
system?

Select one of the following:

  • Authentication

  • Authenticity

  • Identification

  • Confidentiality

Explanation

Question 36 of 50

1

Which of the following is a benefit of applying operating system service packs, patches, and hotfixes?

Select one of the following:

  • Protects systems from known vulnerabilities

  • Minimizes the need to deploy honeypots

  • Hardens systems against dictionary attacks

  • Replaces default and guest accounts

Explanation

Question 37 of 50

1

Which of the following standards encodes messages blocks of 64-bit and uses 56 bits for the encryption key?

Select one of the following:

  • SHA

  • AES

  • DES

  • Blowfish

Explanation

Question 38 of 50

1

A user reports that after searching the Internet for office supplies and visiting one of the search engine results
websites, they began receiving unsolicited pop-ups on subsequent website visits. Which of the following is the
MOST likely cause of the unsolicited pop-ups?

Select one of the following:

  • Virus

  • Trojan

  • Adware

  • Spam

Explanation

Question 39 of 50

1

Which of the following encryption methods uses prime number factoring to obtain its strength?

Select one of the following:

  • Elliptic curve

  • RSA

  • AES

  • 3DES

Explanation

Question 40 of 50

1

An administrator is required to keep certain workstations free of malware at all times, but those workstations
need to be able to access any Internet site. Which of the following solutions would be the BEST choice?

Select one of the following:

  • Updated antivirus software

  • Pop-up blockers

  • Personal firewall

  • Updated anti-spam software

Explanation

Question 41 of 50

1

A network administrator places a firewall between a file server and the public Internet and another firewall
between the file server and the company internal servers. This is an example of which of the following design
elements?

Select one of the following:

  • DMZ

  • Subnetting

  • VLAN

  • NAT

Explanation

Question 42 of 50

1

Which of the following redundancy planning concepts is generally the MOST expensive?

Select one of the following:

  • Cold site

  • Hot site

  • Warm site

  • Field site

Explanation

Question 43 of 50

1

Which of the following behavior-based security appliances are used to block suspicious activity from entering
the network?

Select one of the following:

  • Antivirus

  • HIDS

  • IPS

  • IDS

Explanation

Question 44 of 50

1

Which of the following design elements could be set to only allow machines on the network if they are current
with patches and antivirus definitions?

Select one of the following:

  • RBAC

  • NAC

  • MAC

  • DAC

Explanation

Question 45 of 50

1

Which of the following would be implemented to detect attacks on an individual system?

Select one of the following:

  • Firewall

  • Honeypot

  • NIPS

  • HIDS

Explanation

Question 46 of 50

1

Which of the following logs would MOST likely indicate that there is an ongoing brute force attack against a
server local administrator account?

Select one of the following:

  • Firewall

  • System

  • Performance

  • Access

Explanation

Question 47 of 50

1

Which of the following is a best practice for coding applications in a secure manner?

Select one of the following:

  • Input validation

  • Object oriented coding

  • Rapid Application Development (RAD)

  • Cross-site scripting

Explanation

Question 48 of 50

1

Which of the following may be an indication of a possible system compromise?

Select one of the following:

  • A port monitor utility shows that there are many connections to port 8 on the Internet facing web server

  • A performance monitor indicates a recent and ongoing drop in speed, disk space or memory utilization from the baseline

  • A protocol analyzer records a high number of UDP packets to a streaming media server on the Internet

  • The certificate for one of the web servers has expired and transactions on that server begins to drop rapidly

Explanation

Question 49 of 50

1

Which of the following authentication methods would MOST likely prevent an attacker from being able to
successfully deploy a replay attack?

Select one of the following:

  • TACACS

  • RAS

  • RADIUS

  • Kerberos

Explanation

Question 50 of 50

1

Which of the following allows an attacker to manipulate files by using the least significant bit(s) to secretly
embed data?

Select one of the following:

  • Steganography

  • Worm

  • Trojan horse

  • Virus

Explanation

Previous
Next