Latest CompTIA SY0-301 of exam practice questions and answers

IT-Tests.com is a website specifically provide the certification exam information sources for IT professionals. Through many reflects from people who have purchase IT-Tests's products, IT-Tests.com is proved to be the best website to provide the source of information about certification exam. The product of IT-Tests.com is a very reliable training tool for you. The answers of the exam exercises provided by IT-Tests.com is very accurate. Our IT-Tests's senior experts are continuing to enhance the quality of our training materials.

Passing SY0-301 exam is not very simple. SY0-301 exam requires a high degree of professional knowledge of IT, and if you lack this knowledge, IT-Tests.com can provide you with a source of IT knowledge. IT-Tests's expert team will use their wealth of expertise and experience to help you increase your knowledge, and can provide you practice questions and answers SY0-301 certification exam. IT-Tests.com will not only do our best to help you pass the SY0-301 certification exam for only one time, but also help you consolidate your IT expertise. If you select IT-Tests, we can not only guarantee you 100% pass SY0-301 certification exam, but also provide you with a free year of exam practice questions and answers update service. And if you fail to pass the examination carelessly, we can guarantee that we will immediately 100% refund your cost to you.

IT-Tests.com CompTIA SY0-301 exam questions are compiled according to the latest syllabus and the actual SY0-301 certification exam. We are also constantly upgrade our training materials so that you could get the best and the latest information for the first time. When you buy our SY0-301 exam training materials, you will get a year of free updates. At any time, you can extend the the update subscription time, so that you can have a longer time to prepare for the exam.

There is no site can compare with IT-Tests.com site's training materials. This is unprecedented true and accurate test materials. To help each candidate to pass the exam, our IT elite team explore the real exam constantly. I can say without hesitation that this is definitely a targeted training material. The IT-Tests.com's website is not only true, but the price of materials are very reasonable. When you choose our products, we also provide one year of free updates. This allow you to have more ample time to prepare for the exam. So that you can eliminate your psychological tension of exam, and reach a satisfactory way.

Exam Code: SY0-301

Exam Name: CompTIA (Security+ Certification Exam 2011 version)

If you are still troubled for the CompTIA SY0-301 certification exam, then select the IT-Tests.com's training materials please. IT-Tests.com's CompTIA SY0-301 exam training materials is the best training materials, this is not doubt. Select it will be your best choice. It can guarantee you 100% pass the exam. Come on, you will be the next best IT experts.

SY0-301 (Security+ Certification Exam 2011 version) Free Demo Download: http://www.it-tests.com/SY0-301.html

NO.1 Which of the following accurately describes the STRONGEST multifactor authentication?
A. Something you are, something you have
B. Something you have, something you know
C. Something you are near to, something you have
D. Something you have, someone you know
Answer: A

CompTIA   SY0-301   SY0-301   SY0-301

NO.2 Which of the following risks could IT management be mitigating by removing an all-in-one device?
A. Continuity of operations
B. Input validation
C. Single point of failure
D. Single sign on
Answer: C

CompTIA questions   SY0-301 demo   SY0-301 exam   SY0-301

NO.3 Pete, a security administrator, wants to secure remote telnet services and decides to use the services
over SSH. Which of the following ports should Pete allow on the firewall by default?
A. 21
B. 22
C. 23
D. 25
Answer: B

CompTIA exam prep   SY0-301   SY0-301   SY0-301 exam

NO.4 Which of the following BEST allows Pete, a security administrator, to determine the type, source, and
flags of the packet traversing a network for troubleshooting purposes?
A. Switches
B. Protocol analyzers
C. Routers
D. Web security gateways
Answer: B

CompTIA   SY0-301 exam simulations   SY0-301 study guide

NO.5 Sara, a security analyst, discovers which operating systems the client devices on the network are
running by only monitoring a mirror port on the router. Which of the following techniques did Sara use?
A. Active fingerprinting
B. Passive finger printing
C. Protocol analyzing
D. Network enumerating
Answer: B

CompTIA   SY0-301   SY0-301 dumps

NO.6 Which of the following BEST describes a software vulnerability that is actively being used by Sara and
Jane, attackers, before the vendor releases a protective patch or update?
A. Buffer overflow
B. IV attack
C. Zero day attack
D. LDAP injection
Answer: C

CompTIA certification training   SY0-301   SY0-301

NO.7 The fundamental information security principals include confidentiality, availability and which of the
following?
A. The ability to secure data against unauthorized disclosure to external sources
B. The capacity of a system to resist unauthorized changes to stored information
C. The confidence with which a system can attest to the identity of a user
D. The characteristic of a system to provide uninterrupted service to authorized users
Answer: B

CompTIA certification training   SY0-301   SY0-301   SY0-301 certification training

NO.8 Which of the following is similar to a smurf attack, but uses UDP instead to ICMP?
A. X-Mas attack
B. Fraggle attack
C. Vishing
D. Man-in-the-middle attack
Answer: B

CompTIA   SY0-301   SY0-301 questions   SY0-301 test   SY0-301

NO.9 Which of the following is the BEST solution to securely administer remote servers?
A. SCP
B. SSH
C. Telnet
D. SFTP
Answer: B

CompTIA   SY0-301   SY0-301   SY0-301 certification

NO.10 A company has sent all of its private keys to a third party. The third party company has created a
secure list of these keys. Which of the following has just been implemented?
A. Key escrow
B. CRL
C. CA
D. Recovery agent
Answer: A

CompTIA   SY0-301   SY0-301

NO.11 Sara, an IT administrator, wants to protect a cluster of servers in a DMZ from zero day attacks. Which
of the following would provide the BEST level of protection?
A. NIPS
B. NIDS
C. ACL
D. Antivirus
Answer: A

CompTIA test   SY0-301 exam simulations   SY0-301 braindump   SY0-301

NO.12 Which of the following is a valid server-role in a Kerberos authentication system?
A. Token issuing system
B. Security assertion server
C. Authentication agent
D. Ticket granting server
Answer: D

CompTIA certification   SY0-301   SY0-301 certification   SY0-301 certification   SY0-301   SY0-301

NO.13 Social networking sites are used daily by the marketing team for promotional purposes. However,
confidential company information, including product pictures and potential partnerships, have been
inadvertently exposed to the public by dozens of employees using social networking sites. Which of
following is the BEST response to mitigate this threat with minimal company disruption?
A. Mandate additional security awareness training for all employees.
B. Report each employee to Human Resources for termination for violation of security policies
C. Implement a data loss prevention program to filter email.
D. Block access to social networking sites from the corporate network
Answer: A

CompTIA braindump   SY0-301 exam   SY0-301   SY0-301 demo   SY0-301

NO.14 Which of the following inspects traffic entering or leaving a network to look for anomalies against
expected baselines?
A. IPS
B. Sniffers
C. Stateful firewall
D. Stateless firewall
Answer: A

CompTIA   SY0-301 certification   SY0-301   SY0-301   SY0-301

NO.15 Which of the following is an example of a false negative?
A. The IDS does not identify a buffer overflow
B. Anti-virus identifies a benign application as malware.
C. Anti-virus protection interferes with the normal operation of an application.
D. A user account is locked out after the user mistypes the password too many times.
Answer: A

CompTIA test   SY0-301   SY0-301

NO.16 A company is performing internal security audits after a recent exploitation on one of their proprietary
applications. Sara, the security auditor, is given the workstation with limited documentation regarding the
application installed for the audit. Which of the following types of testing methods is this?
A. Sandbox
B. White box
C. Black box
D. Gray box
Answer: D

CompTIA   SY0-301 exam prep   SY0-301 study guide   SY0-301 test

NO.17 Sara and Jane, users, are reporting an increase in the amount of unwanted email that they are receiving
each day.
Which of the following would be the BEST way to respond to this issue without creating a lot of
administrative overhead.?
A. Deploy an anti-spam device to protect the network.
B. Update the anti-virus definitions and make sure that it is set to scan all received email
C. Set up spam filtering rules in each user's mail client.
D. Change the firewall settings to block SMTP relays so that the spam cannot get in.
Answer: A

CompTIA   SY0-301 certification training   SY0-301 exam dumps   SY0-301 exam prep   SY0-301

NO.18 Which of the following authentication protocols forces centralized wireless authentication?
A. WPA2-Personal
B. WPA2-Enterprise
C. WPA2-CCMP
D. WPA2-TKIP
Answer: B

CompTIA answers real questions   SY0-301   SY0-301 original questions   SY0-301 braindump   SY0-301   SY0-301

NO.19 Which of the following encrypts the body of a packet, rather than just the password, while sending
information?
A. LDAP
B. TACACS+
C. ACLs
D. RADIUS
Answer: B

CompTIA   SY0-301   SY0-301

NO.20 A computer is put into a restricted VLAN until the computer's virus definitions are up-to-date. Which of
the following BEST describes this system type?
A. NAT
B. NIPS
C. NAC
D. DMZ
Answer: C

CompTIA   SY0-301 certification training   SY0-301 exam dumps

If you are interested in IT-Tests's training program about CompTIA certification SY0-301 exam, you can first on WWW.IT-Tests.COM to free download part of the exercises and answers about CompTIA certification SY0-301 exam as a free try. We will provide one year free update service for those customers who choose IT-Tests's products.