Copy and Edit

SY0-301 Part 1

Description

Questions 1 - 50
Brooks Thornhill
Quiz by Brooks Thornhill, updated more than 1 year ago
Brooks Thornhill
Created by Brooks Thornhill over 7 years ago
12
0
0

Resource summary

Question 1

Question
Which of the following elements of PKI are found in a browser's trusted root CA?
Answer
  • Private key
  • Symmetric key
  • Recovery key
  • Public key

Question 2

Question
Which of the following protocols only encrypts password packets from client to server?
Answer
  • XTACACS
  • TACACS
  • RADIUS
  • TACACS+

Question 3

Question
Where are revoked certificates stored?
Answer
  • Recovery agent
  • Registration
  • Key escrow
  • CRL

Question 4

Question
DRPs should contain which of the following?
Answer
  • Hierarchical list of non-critical personnel
  • Hierarchical list of critical systems
  • Hierarchical access control lists
  • Identification of single points of failure

Question 5

Question
A system administrator could have a user level account and an administrator account to prevent:
Answer
  • password sharing
  • escalation of privileges
  • implicit deny
  • administrative account lockout

Question 6

Question
Which of the following is the BEST way to mitigate data loss if a portable device is compromised?
Answer
  • Full disk encryption
  • Common access card
  • Strong password complexity
  • Biometric authentication

Question 7

Question
Which of the following protocols should be blocked at the network perimeter to prevent host enumeration by sweep devices?
Answer
  • HTTPS
  • SSH
  • IPv4
  • ICMP

Question 8

Question
Which of the following is specific to a buffer overflow attack?
Answer
  • Memory addressing
  • Directory traversal
  • Initialization vector
  • Session cookies

Question 9

Question
Which of the following asymmetric encryption keys is used to encrypt data to ensure only the intended recipient can decrypt the ciphertext?
Answer
  • Private
  • Escrow
  • Public
  • Preshared

Question 10

Question
Which of the following should a security administrator implement to prevent users from disrupting network connectivity, if a user connects both ends of a network cable to different switch ports?
Answer
  • VLAN separation
  • Access control
  • Loop protection
  • DMZ

Question 11

Question
A new enterprise solution is currently being evaluated due to its potential to increase the company's profit margins. The security administrator has been asked to review its security implications. While evaluating the product, various vulnerability scans were performed. It was determined that the product is not a threat but has the potential to introduce additional vulnerabilities. Which of the following assessment types should the security administrator also take into consideration while evaluating this product?
Answer
  • Threat assessment
  • Vulnerability assessment
  • Code assessment
  • Risk assessment

Question 12

Question
Which of the following requires special handling and explicit policies for data retention and data distribution?
Answer
  • Personally identifiable information
  • Phishing attacks
  • Zero day exploits
  • Personal electronic devices

Question 13

Question
Centrally authenticating multiple systems and applications against a federated user database is an example of:
Answer
  • smart card
  • common access card
  • single sign-on
  • access control list

Question 14

Question
WEP is seen as an unsecure protocol based on its improper implementation and use of which of the following?
Answer
  • RC6
  • RC4
  • 3DES
  • AES

Question 15

Question
Which of the following should be performed if a smartphone is lost to ensure no data can be retrieved from it?
Answer
  • Device encryption
  • Remote wipe
  • Screen lock
  • GPS tracking

Question 16

Question
In an 802.11n network, which of the following provides the MOST secure method of both encryption and authorization?
Answer
  • WEP with 802.1x
  • WPA Enterprise
  • WPA2-PSK
  • WPA with TKIP

Question 17

Question
Which of the following methods of access, authentication, and authorization is the MOST secure by default?
Answer
  • Kerberos
  • TACACS
  • RADIUS
  • LDAP

Question 18

Question
Which of the following facilitates computing for heavily utilized systems and networks?
Answer
  • Remote access
  • Provider cloud
  • VPN concentrator
  • Telephony

Question 19

Question
With which of the following is RAID MOST concerned?
Answer
  • Integrity
  • Confidentiality
  • Availability
  • Baselining

Question 20

Question
Which of the following reduces the likelihood of a single point of failure when a server fails?
Answer
  • Clustering
  • Virtualization
  • RAID
  • Cold site

Question 21

Question
A user downloads a keygen to install pirated software. After running the keygen, system performance is extremely slow and numerous antivirus alerts are displayed. Which of the following BEST describes this type of malware?
Answer
  • Logic bomb
  • Worm
  • Trojan
  • Adware

Question 22

Question
Which of the following is used in conjunction with PEAP to provide mutual authentication between peers?
Answer
  • LEAP
  • MSCHAPv2
  • PPP
  • MSCHAPv1

Question 23

Question
A targeted email attack sent to the company's Chief Executive Officer (CEO) is known as which of the following?
Answer
  • Whaling
  • Bluesnarfing
  • Vishing
  • Dumpster diving

Question 24

Question
Which of the following uses TCP port 22 by default?
Answer
  • SSL, SCP, and TFTP
  • SSH, SCP, and SFTP
  • HTTPS, SFTP, and TFTP
  • TLS, TELNET, and SCP

Question 25

Question
Actively monitoring data streams in search of malicious code or behavior is an example of:
Answer
  • load balancing
  • an Internet proxy
  • URL filtering
  • content inspection

Question 26

Question
A user is no longer able to transfer files to the FTP server. The security administrator has verified the ports are open on the network firewall. Which of the following should the security administrator check?
Answer
  • Anti-virus software
  • ACLs
  • Anti-spam software
  • NIDS

Question 27

Question
A Human Resource manager is assigning access to users in their specific department performing the same job function. This is an example of:
Answer
  • role-based access control
  • rule-based access control
  • centralized access control
  • mandatory access control

Question 28

Question
Which of the following BEST describes the process of key escrow?
Answer
  • Maintains a copy of a user's public key for the sole purpose of recovering messages if it is lost
  • Maintains a secured copy of a user's private key to recover the certificate revocation list
  • Maintains a secured copy of a user's private key for the sole purpose of recovering the key if it is lost
  • Maintains a secured copy of a user's public key in order to improve network performance

Question 29

Question
Which of the following network devices would MOST likely be used to detect but not react to suspicious behavior on the network?
Answer
  • Firewall
  • NIDS
  • NIPS
  • HIDS

Question 30

Question
Which of the following is an example of allowing a user to perform a self-service password reset?
Answer
  • Password length
  • Password recovery
  • Password complexity
  • Password expiration

Question 31

Question
Which of the following wireless attacks uses a counterfeit base station with the same SSID name as a nearby intended wireless network?
Answer
  • War driving
  • Evil twin
  • Rogue access point
  • War chalking

Question 32

Question
A security administrator finished taking a forensic image of a computer's memory. Which of the following should the administrator do to ensure image integrity?
Answer
  • Run the image through AES128
  • Run the image through a symmetric encryption algorithm
  • Compress the image to a password protected archive
  • Run the image through SHA256

Question 33

Question
Which of the following BEST explains the security benefit of a standardized server image?
Answer
  • All current security updates for the operating system will have already been applied
  • Mandated security configurations have been made to the operating system
  • Anti-virus software will be installed and current
  • Operating system license use is easier to track

Question 34

Question
Which of the following is the primary purpose of using a digital signature? (Select TWO)
Answer
  • Encryption
  • Integrity
  • Confidentiality
  • Non-repudiation
  • Availability

Question 35

Question
Which of the following must a security administrator do when the private key of a web server has been compromised by an intruder?
Answer
  • Submit the public key to the CRL
  • Use the recovery agent to revoke the key
  • Submit the private key to the CRL
  • Issue a new CA

Question 36

Question
The security administrator often observes that an employee who entered the datacenter does not match the owner of the PIN that was entered into the keypad. Which of the following would BEST prevent this situation?
Answer
  • Multifactor authentication
  • Username and password
  • Mandatory access control
  • Biometrics

Question 37

Question
A programmer allocates 16 bytes for a string variable, but does not adequately ensure that more than 16 bytes cannot be copied into the variable. This program may be vulnerable to which of the following attacks?
Answer
  • Buffer overflow
  • Cross-site scripting
  • Session hijacking
  • Directory traversal

Question 38

Question
An administrator is updating firmware on routers throughout the company. Where should the administrator document this work?
Answer
  • Event Viewer
  • Router's System Log
  • Change Management System
  • Compliance Review System

Question 39

Question
The fundamental difference between symmetric and asymmetric key cryptographic systems is that symmetric key cryptography uses:
Answer
  • multiple keys for non-repudiation of bulk data
  • different keys on both ends of the transport medium
  • bulk encryption for data transmission over fiber
  • the same key on each end of the transmission medium

Question 40

Question
Which of the following allows a user to have a one-time password?
Answer
  • Biometrics
  • SSO
  • PIV
  • Tokens

Question 41

Question
Which of the following allows a security administrator to set device traps?
Answer
  • SNMP
  • TLS
  • ICMP
  • SSH

Question 42

Question
Which of the following is the BEST way to secure data for the purpose of retention?
Answer
  • Off-site backup
  • RAID 5 on-site backup
  • On-site clustering
  • Virtualization

Question 43

Question
In which of the following locations would a forensic analyst look to find a hooked process?
Answer
  • BIOS
  • Slack space
  • RAM
  • Rootkit

Question 44

Question
Several classified mobile devices have been stolen. Which of the following would BEST reduce the data leakage threat?
Answer
  • Use GPS tracking to find the devices
  • Use stronger encryption algorithms
  • Immediately inform local law enforcement
  • Remotely sanitize the devices

Question 45

Question
Which of the following is an example of requiring users to have a password of 16 characters or more?
Answer
  • Password recovery requirements
  • Password complexity requirements
  • Password expiration requirements
  • Password length requirements

Question 46

Question
Which of the following devices provides storage for RSA or asymmetric keys and may assist in user authentication? (Select TWO)
Answer
  • Trusted platform module
  • Hardware security module
  • Facial recognition scanner
  • Full disk encryption
  • Encrypted USB

Question 47

Question
A small company needs to invest in a new expensive database. The company's budget does not include the purchase of additional servers or personnel. Which of the following solutions would allow the small company to save money on hiring additional personnel and minimize the footprint in their current datacenter?
Answer
  • Allow users to telecommute
  • Setup a load balancer
  • Infrastructure as a Service
  • Software as a Service

Question 48

Question
A security administrator needs to implement a site-to-site VPN tunnel between the main office and a remote branch. Which of the following protocols should be used for the tunnel?
Answer
  • RTP
  • SNMP
  • IPSec
  • 802.1X

Question 49

Question
When examining HTTP server logs the security administrator notices that the company's online store crashes after a particular search string is executed by a single external user. Which of the following BEST describes this type of attack?
Answer
  • Spim
  • DDoS
  • Spoofing
  • DoS

Question 50

Question
Which of the following MUST a programmer implement to prevent cross-site scripting?
Answer
  • Validate input to remove shell scripts
  • Validate input to remove hypertext
  • Validate input to remove batch files
  • Validate input to remove Java bit code
Show full summary Hide full summary

Want to create your own Quizzes for free with GoConqr? Learn more.

Similar

C1 - Formulae to learn
Tech Wilkinson
AQA Core Biology (B1) - 1.1 - Keeping Healthy
NiallRamphal
Sociology GCSE AQA - Studying Society keywords
tasniask
Family & Households
caryscallan
A2 Geography-Biodiversity under threat
sophielee0909
AS-Level Chemistry: Unit 1:The Atom
Daena Targaryen
GCSE CHEMISTRY UNIT 2 STRUCTURE AND BONDING
mustafizk
Science Flash Cards
Em Roberts
Skeleton and Joints
Colleen Curley
5 Big Ideas
cassie_dodd
exothermic and endothermic reactions
janey.efen
Browse Library