Security+ SY0-201考试题库由我们专业IT认证讲师及产品专家精心打造，包括了当前最新的全真SY0-201考试试题，全部附有正确答案.
1. Which of the following is a reason that NAT would be implemented?
A. Subnetting
B. Address hiding
C. VLAN management
D. Network access control
Answer: B
2. While reviewing the firewall logs an administrator notices a number of unauthorized attempted
connections from 10.x.x.x on an unused port. Which of the following is the correct procedure to follow
when mitigating this risk?
A. Block the domain range *.cn
B. Block the IP range 10.x.x.x/32
C. Block all traffic on that specific port
D. Block IP 10.x.x.x
Answer: C
3. Which of the following demonstrates the process of ensuring that both ends of the connection are in
fact who they say they are?
A. Integrity
B. Identification
C. Authentication
D. Non-repudiation
Answer: D
4. Which of the following is commonly used in a distributed denial of service (DDoS) attack?
A. Phishing
B. Adware
C. Botnet
D. Trojan
Answer: C
5. Which of the following is a best practice for coding applications in a secure manner?
A. Input validation
B. Object oriented coding
C. Rapid Application Development (RAD)
D. Cross-site scripting
Answer: A
6. Which of the following logical access controls would be MOST appropriate to use when creating an
account for a temporary worker?
A. ACL
B. Account expiration
C. Time of day restrictions
D. Logical tokens
Answer: B
7. Which of the following may be an indication of a possible system compromise?
A. A port monitor utility shows that there are many connections to port 80 on the Internet facing web
server.
B. A performance monitor indicates a recent and ongoing drop in speed, disk space or memory utilizationfrom the baseline.
C. A protocol analyzer records a high number of UDP packets to a streaming media server on the Internet.
D. The certificate for one of the web servers has expired and transactions on that server begins to drop
rapidly.
Answer: B
你可以登录killtest题库网下载更多的题库！
