CompTIA SY0-301 exam material

In order to meet all the candidates' needs, Exampdf has
released the actual and new ST0-116, COG-700, SY0-301
exams. All the three exams are related to the actual
exams, cover all the exam points and test syllbus. If still
worry about them, just come to Exampdf here at once for
checking.

---

The safer , easier way to help you pass any IT exams.
Exam : SY0-301
Title
:
S
e
c urity+ Certification Exam
2011 version
Version : Demo
1 / 5

---

The safer , easier way to help you pass any IT exams.
1.Which of the following elements of PKI are found in a browser's trusted root CA?
A. Private key
B. Symmetric key
C. Recovery key
D. Public key
Answer: D
2.Which of the following protocols only encrypts password packets from client to server.?
A. XTACACS
B. TACACS
C. RADIUS
D. TACACS+
Answer: C
3.Where are revoked certificates stored?
A. Recovery agent
B. Registration
C. Key escrow
D. CRL
Answer: D
4.DRPs should contain which of the following?
A. Hierarchical list of non-critical personnel
B. Hierarchical list of critical systems
C. Hierarchical access control lists
D. Identification of single points of failure
Answer: B
5.A system administrator could have a user level account and an administrator account to prevent:
A. password sharing.
B. escalation of privileges.
C. implicit deny.
D. administrative account lockout.
Answer: B
6.Which of the following is the BEST way to mitigate data loss if a portable device is compromised?
A. Full disk encryption
B. Common access card
C. Strong password complexity
D. Biometric authentication Answer: A
7.Which of the following protocols should be blocked at the network perimeter to prevent host
enumeration by sweep devices?
A. HTTPS
2 / 5

---

The safer , easier way to help you pass any IT exams.
B. SSH
C. IPv4
D. ICMP
Answer: D
8.Which of the following is specific to a buffer overflow attack?
A. Memory addressing
B. Directory traversal
C. Initial vector
D. Session cookies
Answer: C
9.Which of the following asymmetric encryption keys is used to encrypt data to ensure only the intended
recipient can decrypt the ciphertext?
A. Private
B. Escrow
C. Public
D. Preshared
Answer: C
10.Which of the following should a security administrator implement to prevent users from disrupting
network connectivity, if a user connects both ends of a network cable to different switch ports?
A. VLAN separation
B. Access control
C. Loop protection
D. DMZ
Answer: C
11.A new enterprise solution is currently being evaluated due to its potential to increase the company's
profit margins. The security administrator has been asked to review its security implications. While
evaluating the product, various vulnerability scans were performed. It was determined that the product is
not a threat but has the potential to introduce additional vulnerabilities. Which of the following assessment
types should the security administrator also take into consideration while evaluating this product?
A. Threat assessment
B. Vulnerability assessment
C. Code assessment
D. Risk assessment
Answer: D
12.Which of the following requires special handling and explicit policies for data retention and data
distribution?
A. Personally identifiable information
B. Phishing attacks
C. Zero day exploits
3 / 5

---

The safer , easier way to help you pass any IT exams.
D. Personal electronic devices
Answer: A
13.Centrally authenticating multiple systems and applications against a federated user database is an
example of:
A. smart card.
B. common access card.
C. single sign-on.
D. access control list.
Answer: C
14.WEP is seen as an unsecure protocol based on its improper use of which of the following?
A. RC6
B. RC4
C. 3DES
D. AES
Answer: B
15.Which of the following should be performed if a smartphone is lost to ensure no data can be retrieved
from it?
A. Device encryption
B. Remote wipe
C. Screen lock
D. GPS tracking
Answer: B
16.In an 802.11n network, which of the following provides the MOST secure method of both encryption
and authorization?
A. WEP with 802.1x
B. WPA Enterprise
C. WPA2-PSK
D. WPA with TKIP
Answer: B
17.Which of the following methods of access, authentication, and authorization is the MOST secure by
default?
A. Kerberos
B. TACACS
C. RADIUS
D. LDAP
Answer: A
18.Which of the following facilitates computing for heavily utilized systems and networks?
A. Remote access
4 / 5

---

The safer , easier way to help you pass any IT exams.
B. Provider cloud
C. VPN concentrator
D. Telephony
Answer: B
19.With which of the following is RAID MOST concerned?
A. Integrity
B. Confidentiality
C. Availability
D. Baselining
Answer: C
20.Which of the following reduces the likelihood of a single point of failure when a server fails?
A. Clustering
B. Virtualization
C. RAID
D. Cold site
Answer: A
5 / 5

---