Brooks Thornhill
Test por , creado hace más de 1 año

Questions 51-100

29
0
0
Brooks Thornhill
Creado por Brooks Thornhill hace alrededor de 10 años
Cerrar

SY0-301 Part 2

Pregunta 1 de 50

1

Which of the following is seen as non-secure based on its ability to only store seven uppercase characters of
data making it susceptible to brute force attacks?

Selecciona una de las siguientes respuestas posibles:

  • PAP

  • NTLMv2

  • LANMAN

  • CHAP

Explicación

Pregunta 2 de 50

1

Which of the following should be used to help prevent device theft of unused assets?

Selecciona una de las siguientes respuestas posibles:

  • HSM device

  • Locking cabinet

  • Device encryption

  • GPS tracking

Explicación

Pregunta 3 de 50

1

Which of the following security practices should occur initially in software development?

Selecciona una de las siguientes respuestas posibles:

  • Secure code review

  • Patch management

  • Fuzzing

  • Penetration tests

Explicación

Pregunta 4 de 50

1

Which of the following uses tickets to identify users to the network?

Selecciona una de las siguientes respuestas posibles:

  • RADIUS

  • LDAP

  • TACACS+

  • Kerberos

Explicación

Pregunta 5 de 50

1

Which of the following file transfer protocols is an extension of SSH Protocol Version 2.0?

Selecciona una de las siguientes respuestas posibles:

  • FTP

  • TFTP

  • SFTP

  • FTPS

Explicación

Pregunta 6 de 50

1

Due to sensitive data concerns, a security administrator has enacted a policy preventing the use of flash drives.
Additionally, which of the following can the administrator implement to reduce the risk of data leakage?

Selecciona una de las siguientes respuestas posibles:

  • Enact a policy that all work files are to be password protected

  • Enact a policy banning users from bringing in personal music devices

  • Provide users with unencrypted storage devices that remain on-site

  • Disallow users from saving data to any network share

Explicación

Pregunta 7 de 50

1

The security administrator implemented privacy screens, password protected screen savers, and hired a secure
shredding and disposal service. Which of the following attacks is the security administrator trying to mitigate?
(Select TWO).

Selecciona una o más de las siguientes respuestas posibles:

  • Whaling

  • Dumpster diving

  • Shoulder surfing

  • Tailgating

  • Impersonation

Explicación

Pregunta 8 de 50

1

Performing routine security audits is a form of which of the following controls?

Selecciona una de las siguientes respuestas posibles:

  • Preventive

  • Detective

  • Protective

  • Proactive

Explicación

Pregunta 9 de 50

1

Which of the following web application security weaknesses can be mitigated by preventing the use of HTML
tags?

Selecciona una de las siguientes respuestas posibles:

  • LDAP injection

  • SQL injection

  • Error and exception handling

  • Cross-site scripting

Explicación

Pregunta 10 de 50

1

Which of the following access control technologies provides a rolling password for one-time use?

Selecciona una de las siguientes respuestas posibles:

  • RSA tokens

  • ACL

  • Multifactor authentication

  • PIV card

Explicación

Pregunta 11 de 50

1

Which of the following would be the BEST action to perform when conducting a corporate vulnerability
assessment?

Selecciona una de las siguientes respuestas posibles:

  • Document scan results for the change control board

  • Organize data based on severity and asset value

  • Examine the vulnerability data using a network analyzer

  • Update antivirus signatures and apply patches

Explicación

Pregunta 12 de 50

1

Which of the following would allow traffic to be redirected through a malicious machine by sending false
hardware address updates to a switch?

Selecciona una de las siguientes respuestas posibles:

  • ARP poisoning

  • MAC spoofing

  • pWWN spoofing

  • DNS poisoning

Explicación

Pregunta 13 de 50

1

Which of the following devices would be installed on a single computer to prevent intrusion?

Selecciona una de las siguientes respuestas posibles:

  • Host intrusion detection

  • Network firewall

  • Host-based firewall

  • VPN concentrator

Explicación

Pregunta 14 de 50

1

Which of the following is a policy that would force all users to organize their areas as well as help in reducing
the risk of possible data theft?

Selecciona una de las siguientes respuestas posibles:

  • Password behaviors

  • Clean desk policy

  • Data handling

  • Data disposal

Explicación

Pregunta 15 de 50

1

A penetration test shows that almost all database servers were able to be compromised through a default
database user account with the default password. Which of the following is MOST likely missing from the
operational procedures?

Selecciona una de las siguientes respuestas posibles:

  • Application hardening

  • OS hardening

  • Application patch management

  • SQL injection

Explicación

Pregunta 16 de 50

1

Isolation mode on an AP provides which of the following functionality types?

Selecciona una de las siguientes respuestas posibles:

  • Segmentation of each wireless user from other wireless users

  • Disallows all users from communicating directly with the AP

  • Hides the service set identifier

  • Makes the router invisible to other routers

Explicación

Pregunta 17 de 50

1

Which of the following secure protocols is MOST commonly used to remotely administer Unix/Linux systems?

Selecciona una de las siguientes respuestas posibles:

  • SSH

  • SCP

  • SFTP

  • SNMP

Explicación

Pregunta 18 de 50

1

Which of the following is MOST likely to be the last rule contained on any firewall?

Selecciona una de las siguientes respuestas posibles:

  • IP allow any any

  • Implicit deny

  • Separation of duties

  • Time of day restrictions

Explicación

Pregunta 19 de 50

1

During the analysis of malicious code, a security analyst discovers JavaScript being used to send random data
to another service on the same system. This is MOST likely an example of which of the following?

Selecciona una de las siguientes respuestas posibles:

  • Buffer overflow

  • XML injection

  • SQL injection

  • Distributed denial of service

Explicación

Pregunta 20 de 50

1

Which of the following is true about hardware encryption? (Select TWO).

Selecciona una o más de las siguientes respuestas posibles:

  • It must use elliptical curve encryption

  • It requires a HSM file system

  • It only works when data is not highly fragmented

  • It is faster than software encryption

  • It is available on computers using TPM

Explicación

Pregunta 21 de 50

1

Which of the following is an example of verifying new software changes on a test system?

Selecciona una de las siguientes respuestas posibles:

  • User access control

  • Patch management

  • Intrusion prevention

  • Application hardening

Explicación

Pregunta 22 de 50

1

Which of the following is a technical control?

Selecciona una de las siguientes respuestas posibles:

  • System security categorization requirement

  • Baseline configuration development

  • Contingency planning

  • Least privilege implementation

Explicación

Pregunta 23 de 50

1

Public keys are used for which of the following?

Selecciona una de las siguientes respuestas posibles:

  • Decrypting wireless messages

  • Decrypting the hash of an electronic signature

  • Bulk encryption of IP based email traffic

  • Encrypting web browser traffic

Explicación

Pregunta 24 de 50

1

Which of the following penetration testing types is performed by security professionals with limited inside
knowledge of the network?

Selecciona una de las siguientes respuestas posibles:

  • Passive vulnerability scan

  • Gray box

  • White box

  • Black box

Explicación

Pregunta 25 de 50

1

Which of the following devices BEST allows a security administrator to identify malicious activity after it has
occurred?

Selecciona una de las siguientes respuestas posibles:

  • Spam filter

  • IDS

  • Firewall

  • Malware inspection

Explicación

Pregunta 26 de 50

1

Which of the following cloud computing concepts is BEST described as providing an Operating System on
which the customer can install your own applications or software on-demand ?

Selecciona una de las siguientes respuestas posibles:

  • Platform as a Service

  • Software as a Service

  • Infrastructure as a Service

  • Trusted OS as a Service

Explicación

Pregunta 27 de 50

1

A security administrator wants to prevent users in sales from accessing their servers after 6:00 p.m., and
prevent them from accessing accounting's network at all times. Which of the following should the administrator
implement to accomplish these goals? (Select TWO).

Selecciona una o más de las siguientes respuestas posibles:

  • Separation of duties

  • Time of day restrictions

  • Access control lists

  • Mandatory access control

  • Single sign-on

Explicación

Pregunta 28 de 50

1

Which of the following environmental controls would BEST be used to regulate cooling and flow of air within a
datacenter?

Selecciona una de las siguientes respuestas posibles:

  • Fire suppression

  • Video monitoring

  • EMI shielding

  • Hot and cold aisles

Explicación

Pregunta 29 de 50

1

Which of the following is used when performing a quantitative risk analysis?

Selecciona una de las siguientes respuestas posibles:

  • Focus groups

  • Asset value

  • Surveys

  • Best practice

Explicación

Pregunta 30 de 50

1

Which of the following BEST describes the function of TPM?

Selecciona una de las siguientes respuestas posibles:

  • High speed secure removable storage device

  • Third party certificate trust authority

  • Hardware chip that stores encryption keys

  • A trusted OS model

Explicación

Pregunta 31 de 50

1

Which of the following PKI implementation element is responsible for verifying the authenticity of certificate
contents?

Selecciona una de las siguientes respuestas posibles:

  • CRL

  • Key escrow

  • Recovery agent

  • CA

Explicación

Pregunta 32 de 50

1

Which of the following describes an active attempt to identify weaknesses?

Selecciona una de las siguientes respuestas posibles:

  • Vulnerability scanning

  • Zero day attack

  • Port scanning

  • Penetration testing

Explicación

Pregunta 33 de 50

1

The security administrator is getting reports from users that they are accessing certain websites and are unable
to download anything off of those sites. The security administrator is also receiving several alarms from the IDS
about suspicious traffic on the network. Which of the following is the MOST likely cause?

Selecciona una de las siguientes respuestas posibles:

  • NIPS is blocking activities from those specific websites

  • NIDS is blocking activities from those specific websites

  • The firewall is blocking web activity

  • The router is denying all traffic from those sites

Explicación

Pregunta 34 de 50

1

Which of the following should be enabled to ensure only certain wireless clients can access the network?

Selecciona una de las siguientes respuestas posibles:

  • DHCP

  • SSID broadcast

  • MAC filtering

  • AP isolation

Explicación

Pregunta 35 de 50

1

Which of the following is the BEST standard for encryption on a wireless network?

Selecciona una de las siguientes respuestas posibles:

  • WPA2-PSK

  • AES

  • WPA

  • WEP

Explicación

Pregunta 36 de 50

1

Which of the following would you educate your employees about in order to prevent them to become victim of
an attacker attempting to obtain bank account information?

Selecciona una de las siguientes respuestas posibles:

  • Password complexity requirements

  • Phishing techniques

  • Handling PII

  • Tailgating techniques

Explicación

Pregunta 37 de 50

1

If a user wishes to receive a file encrypted with PGP, the user must FIRST supply which of the following to the
person who wishes to securely send the file:

Selecciona una de las siguientes respuestas posibles:

  • public key

  • recovery agent

  • key escrow account

  • private key

Explicación

Pregunta 38 de 50

1

Which of the following is a reason to perform a penetration test?

Selecciona una de las siguientes respuestas posibles:

  • To passively test security controls within the enterprise

  • To provide training to white hat attackers

  • To identify all vulnerabilities and weaknesses within the enterprise

  • To determine the potential impact of a threat against the enterprise

Explicación

Pregunta 39 de 50

1

Which of the following methods BEST describes the use of hiding data within other files?

Selecciona una de las siguientes respuestas posibles:

  • Digital signatures

  • PKI

  • Transport encryption

  • Steganography

Explicación

Pregunta 40 de 50

1

Which of the following BEST describes the proper method and reason to implement port security?

Selecciona una de las siguientes respuestas posibles:

  • Apply a security control which ties specific ports to end-device MAC addresses and prevents additional
    devices from being connected to the network

  • Apply a security control which ties specific networks to end-device IP addresses and prevents new devices from being connected to the network

  • Apply a security control which ties specific ports to end-device MAC addresses and prevents all devices from being connected to the network

  • Apply a security control which ties specific ports to end-device IP addresses and prevents mobile devices from being connected to the network

Explicación

Pregunta 41 de 50

1

Which of the following attacks is manifested as an embedded HTML image object or JavaScript image tag in an
email?

Selecciona una de las siguientes respuestas posibles:

  • Exception handling

  • Adware

  • Cross-site request forgery

  • Cross-site scripting

Explicación

Pregunta 42 de 50

1

Which of the following is MOST likely to result in a data loss or compromise?

Selecciona una de las siguientes respuestas posibles:

  • Accounting transferring confidential staff details via SFTP to the payroll department

  • Back office staff accessing and updating details on the mainframe via SSH

  • Encrypted backup tapes left unattended at reception for offsite storage

  • Developers copying data from production to the test environments via a USB stick

Explicación

Pregunta 43 de 50

1

A security administrator has discovered through a password auditing software that most passwords can be
discovered by cracking the first seven characters and then cracking the second part of the password. Which of
the following is in use by the company?

Selecciona una de las siguientes respuestas posibles:

  • LANMAN

  • MD5

  • WEP

  • 3DES

Explicación

Pregunta 44 de 50

1

Which of the following concepts ensures that the data is only viewable to authorized users?

Selecciona una de las siguientes respuestas posibles:

  • Availability

  • Biometrics

  • Integrity

  • Confidentiality

Explicación

Pregunta 45 de 50

1

Which of the following BEST describes an intrusion prevention system?

Selecciona una de las siguientes respuestas posibles:

  • A system that stops an attack in progress

  • A system that allows an attack to be identified

  • A system that logs the attack for later analysis

  • A system that serves as a honeypot

Explicación

Pregunta 46 de 50

1

A user reports that their 802.11n capable interface connects and disconnects frequently to an access point that
was recently installed. The user has a Bluetooth enabled laptop. A company in the next building had their
wireless network breached last month. Which of the following is MOST likely causing the disconnections?

Selecciona una de las siguientes respuestas posibles:

  • An attacker inside the company is performing a bluejacking attack on the user's laptop

  • Another user's Bluetooth device is causing interference with the Bluetooth on the laptop

  • The new access point was mis-configured and is interfering with another nearby access point

  • The attacker that breached the nearby company is in the parking lot implementing a war driving attack

Explicación

Pregunta 47 de 50

1

Risk can be managed in the following ways EXCEPT:

Selecciona una de las siguientes respuestas posibles:

  • mitigation

  • acceptance

  • elimination

  • transference

Explicación

Pregunta 48 de 50

1

A web application has been found to be vulnerable to a SQL injection attack. Which of the following BEST
describes the required remediation action?

Selecciona una de las siguientes respuestas posibles:

  • Change the server's SSL key and add the previous key to the CRL

  • Install a host-based firewall

  • Install missing security updates for the operating system

  • Add input validation to forms

Explicación

Pregunta 49 de 50

1

While browsing the Internet, an administrator notices their browser behaves erratically, appears to download
something, and then crashes. Upon restarting the PC, the administrator notices performance is extremely slow
and there are hundreds of outbound connections to various websites. Which of the following BEST describes
what has occurred?

Selecciona una de las siguientes respuestas posibles:

  • The PC has become part of a botnet

  • The PC has become infected with spyware

  • The PC has become a spam host

  • The PC has become infected with adware

Explicación

Pregunta 50 de 50

1

Which of the following is a best practice when securing a switch from physical access?

Selecciona una de las siguientes respuestas posibles:

  • Disable unnecessary accounts

  • Print baseline configuration

  • Enable access lists

  • Disable unused ports

Explicación

Anterior
Siguiente