CompTIA SY0-201 Security + Certified Practice Exam

Sample Questions

Q) Which of the following is the best choice of cryptographic algorithms or systems to provide full disk encryption?

a) Once pad

b) PGP

c) MD5

d) TKIP

Q) Which of the following allows a malicious insider to remove the information in secret by an organization?

a) NAT traversal

b) steganography

c) Non-repudiation

d) protocol analyzer

Q) The 25 sessions SSH server access log shows the hour. However, it is a great company and the administrator does not know if this is normal behavior, or if the network is under attack. Where you should look for the administrator to determine if this is a normal behavior?

a) Change management

b) Code review

c) Baseline reporting

d) The security policy

Q) Which of the following is the best approach for performing risk mitigation of user access control rights?

a) surveys and rank the results.

b) Perform routine reviews permission.

c) Implement a periodic vulnerability scanning.

d) Disable user accounts that have not been used in the last two weeks.

Q) Which of the following software should implement a security administrator if multiple users are stating that they are receiving unsolicited email containing advertising? a) host-based

b) firewalls

c) Anti-spyware Spam

d) Anti-Virus