CompTIA Security+ Certification Exam (SY0-301) - SY0-301 Exam Practice Test
The server administrator has noted that most servers have a lot of free disk space and low memory utilization. Which of the following statements will be correct if the server administrator migrates to a virtual server environment?
Correct Answer: A
Vote an answer
A system administrator needs to ensure that certain departments have more restrictive controls to their shared folders than other departments. Which of the following security controls would be implemented to restrict those departments?
Correct Answer: D
Vote an answer
Jane, a security administrator, wants to harden the web server. Which of the following could she perform to accomplish this task?
Correct Answer: B
Vote an answer
A security administrator is concerned about the strength of user's passwords. The company does not want to implement a password complexity policy. Which of the following can the security administrator implement to mitigate the risk of an online password attack against users with weak passwords?
Correct Answer: A
Vote an answer
Which of the following are Data Loss Prevention (DLP) strategies that address data in transit issues? (Select TWO).
Correct Answer: C,D
Vote an answer
After Ann, a user, logs into her banking websites she has access to her financial institution mortgage, credit card, and brokerage websites as well. Which of the following is being described?
Correct Answer: A
Vote an answer
Which of the following must a security administrator implement to isolate public facing servers from both the corporate network and the Internet?
Correct Answer: C
Vote an answer
A database administrator contacts a security administrator to request firewall changes for a connection to a new internal application. The security administrator notices that the new application uses a port typically monopolized by a virus. The security administrator denies the request and suggests a new port or service be used to complete the application's task. Which of the following is the security administrator practicing in this example?
Correct Answer: C
Vote an answer
Which of the following can use RC4 for encryption? (Select TWO).
Correct Answer: B,C
Vote an answer
Which of the following is the MOST specific plan for various problems that can arise within a system?
Correct Answer: A
Vote an answer
Which of the following application attacks is used against a corporate directory service where there are unknown servers on the network?
Correct Answer: A
Vote an answer
An internal auditing team would like to strengthen the password policy to support special characters. Which of the following types of password controls would achieve this goal?
Correct Answer: B
Vote an answer
The method to provide end users of IT systems and applications with requirements related to acceptable use, privacy, new threats and trends, and use of social networking is:
Correct Answer: C
Vote an answer
Pete, the security administrator, has been notified by the IDS that the company website is under attack. Analysis of the web logs show the following string, indicating a user is trying to post a comment on the public bulletin board.
INSERT INTO message '<script>source=http://evilsite</script>
This is an example of which of the following?
INSERT INTO message '<script>source=http://evilsite</script>
This is an example of which of the following?
Correct Answer: B
Vote an answer