CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 91:

  Identifying residual risk is MOST important to which of the following concepts?

  A. Risk deterrence
  B. Risk acceptance
  C. Risk mitigation
  D. Risk avoidance
  B. Risk acceptance

  ---

  Risk acceptance is often the choice you must make when the cost of implementing any of the other four choices exceeds the value of the harm that would occur if the risk came to fruition. To truly qualify as acceptance, it cannot be a risk where the administrator or manager is unaware of its existence; it has to be an identified risk for which those involved understand the potential cost or damage and agree to accept it. Residual risk is always present and will remain a risk thus it should be accepted (risk acceptance)

• Question 92:

  Which of the following provides the strongest authentication security on a wireless network?

  A. MAC filter
  B. WPA2
  C. WEP
  D. Disable SSID broadcast
  B. WPA2

  ---

  The Wi-Fi Protected Access (WPA) and Wi-Fi Protected Access 2 (WPA2) authentication protocols were designed to address the core, easy-to-crack problems of WEP.

• Question 93:

  A security administrator is given the security and availability profiles for servers that are being deployed.

  Match each RAID type with the correct configuration and MINIMUM number of drives.

  Review the server profiles and match them with the appropriate RAID type based on integrity, availability, I/O, storage requirements. Instructions:

  All drive definitions can be dragged as many times as necessary

  Not all placeholders may be filled in the RAID configuration boxes

  If parity is required, please select the appropriate number of parity checkboxes

  Server profiles may be dragged only once

  Instructions: If at any time you would like to bring back the initial state of the simulation, please select the Reset button. When you have completed the simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.

  Select and Place:

  

  

  ---

  RAID-0 is known as striping. It is not a fault tolerant solution but does improve disk performance for read/write operations. Striping requires a minimum of two disks and does not use parity. RAID-0 can be used where performance is required

  over fault tolerance, such as a media streaming server.

  RAID-1 is known as mirroring because the same data is written to two disks so that the two disks have identical data. This is a fault tolerant solution that halves the storage space. A minimum of two disks are used in mirroring and does not

  use parity. RAID-1 can be used where fault tolerance is required over performance, such as on an authentication server.

  RAID-5 is a fault tolerant solution that uses parity and striping. A minimum of three disks are required for RAID-5 with one disk's worth of space being used for parity information.

  However, the parity information is distributed across all the disks. RAID-5 can recover from a sing disk failure.

  RAID-6 is a fault tolerant solution that uses dual parity and striping. A minimum of four disks are required for RAID-6. Dual parity allows RAID-6 to recover from the simultaneous failure of up to two disks. Critical data should be stored on a

  RAID-6 system.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis, 2014, pp. 34-36, 234-235

• Question 94:

  Which of the following is replayed during wireless authentication to exploit a weal key infrastructure?

  A. Preshared keys
  B. Ticket exchange
  C. Initialization vectors
  D. Certificate exchange
  B. Ticket exchange

• Question 95:

  A company wants to prevent unauthorized access to its secure data center. Which of the following security controls would be MOST appropriate?

  A. Alarm to local police
  B. Camera
  C. Security guard
  D. Motion detector
  C. Security guard

• Question 96:

  After correctly configuring a new wireless enabled thermostat to control the temperature of the company's meeting room, Joe, a network administrator determines that the thermostat is not connecting to the internet-based control system. Joe verifies that the thermostat received the expected network parameters and it is associated with the AP. Additionally, the other wireless mobile devices connected to the same wireless network are functioning properly. The network administrator verified that the thermostat works when tested at his residence. Which of the following is the MOST likely reason the thermostat is not connecting to the internet?

  A. The company implements a captive portal
  B. The thermostat is using the incorrect encryption algorithm
  C. the WPA2 shared likely is incorrect
  D. The company's DHCP server scope is full
  C. the WPA2 shared likely is incorrect

• Question 97:

  Phishing emails frequently take advantage of high-profile catastrophes reported in the news. Which of the following principles BEST describes the weakness being exploited?

  A. Intimidation
  B. Scarcity
  C. Authority
  D. Social proof
  D. Social proof

• Question 98:

  Which of the following statements is MOST likely to be included in the security awareness training about P2P?

  A. P2P is always used to download copyrighted material.
  B. P2P can be used to improve computer system response.
  C. P2P may prevent viruses from entering the network.
  D. P2P may cause excessive network bandwidth.
  D. P2P may cause excessive network bandwidth.

  ---

  P2P networking by definition involves networking which will reduce available bandwidth for the rest of the users on the network.

• Question 99:

  The database server used by the payroll system crashed at 3 PM and payroll is due at 5 PM. Which of the following metrics is MOST important is this instance?

  A. ARO
  B. SLE
  C. MTTR
  D. MTBF
  C. MTTR

• Question 100:

  Which of the following security concepts would Sara, the security administrator, use to mitigate the risk of data loss?

  A. Record time offset
  B. Clean desk policy
  C. Cloud computing
  D. Routine log review
  B. Clean desk policy

  ---

  Clean Desk Policy Information on a desk--in terms of printouts, pads of note paper, sticky notes, and the like--can be easily seen by prying eyes and taken by thieving hands. To protect data and your business, encourage employees to maintain clean desks and to leave out only those papers that are relevant to the project they are working on at that moment. All sensitive information should be put away when the employee is away from their desk. This will mitigate the risk of data loss when applied.