CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1001:

  Which of the following encompasses application patch management?

  A. Configuration management
  B. Policy management
  C. Cross-site request forgery
  D. Fuzzing
  A. Configuration management

  ---

  Patch management is the process of maintaining the latest source code for applications and operating systems by applying the latest vendor updates. This helps protect a systems from newly discovered attacks and vulnerabilities. A part of patch management is testing the effects of vendor updates on a test system first to ensure that the updates do not have detrimental effects on the system and its configuration, and, should the updates have no detrimental effects on the test systems, backing up the production systems before applying the updates on a production system.

• Question 1002:

  Which of the following technologies uses multiple devices to share work?

  A. Switching
  B. Load balancing
  C. RAID
  D. VPN concentrator
  B. Load balancing

  ---

  Load balancing is a way of providing high availability by splitting the workload across multiple computers.

• Question 1003:

  Certificates are used for: (Select TWO).

  A. Client authentication.
  B. WEP encryption.
  C. Access control lists.
  D. Code signing.
  E. Password hashing.
  A. Client authentication.
  D. Code signing.

  ---

  Certificates are used in PKI to digitally sign data, information, files, email, code, etc. Certificates are also used in PKI for client authentication.

• Question 1004:

  A university has a building that holds the power generators for the entire campus. A risk assessment was completed for the university and the generator building was labeled as a high risk. Fencing and lighting was installed to reduce risk. Which of the following security goals would this meet?

  A. Load balancing
  B. Non-repudiation
  C. Disaster recovery
  D. Physical security
  D. Physical security

• Question 1005:

  Which of the following devices is MOST likely being used when processing the following? 1 PERMIT IP ANY ANY EQ 80 2 DENY IP ANY ANY

  A. Firewall
  B. NIPS
  C. Load balancer
  D. URL filter
  A. Firewall

  ---

  Firewalls, routers, and even switches can use ACLs as a method of security management. An access control list has a deny ip any any implicitly at the end of any access control list. ACLs deny by default and allow by exception.

• Question 1006:

  A computer on a company network was infected with a zero-day exploit after an employee accidently opened an email that contained malicious content. The employee recognized the email as malicious and was attempting to delete it, but accidently opened it. Which of the following should be done to prevent this scenario from occurring again in the future?

  A. Install host-based firewalls on all computers that have an email client installed
  B. Set the email program default to open messages in plain text
  C. Install end-point protection on all computers that access web email
  D. Create new email spam filters to delete all messages from that sender
  C. Install end-point protection on all computers that access web email

• Question 1007:

  Which of the following symmetric key algorithms are examples of block ciphers? (Select THREE).

  A. RC4
  B. 3DES
  C. AES
  D. MD5
  E. PGP
  F. Blowfish
  B. 3DES
  C. AES
  F. Blowfish

  ---

  B: Triple DES (3DES) is the common name for the Triple Data Encryption Algorithm (TDEA or Triple DEA) symmetric-key block cipher, which applies the Data Encryption Standard (DES) cipher algorithm three times to each data block.

  C: Advanced Encryption Standard (AES) is a block cipher that has replaced DES as the current standard, and it uses the Rijndael algorithm. It was developed by Joan Daemen and Vincent Rijmen. AES is the current product used by U.S. governmental agencies.

  F: Blowfish is an encryption system invented by a team led by Bruce Schneier that performs a 64-bit block cipher at very fast speeds.

• Question 1008:

  A new employee has been hired to perform system administration duties across a large enterprise comprised of multiple separate security domains. Each remote location implements a separate security domain. The new employee has successfully responded to and fixed computer issues for the main office. When the new employee tries to perform work on remote computers, the following messages appears. You need permission to perform this action. Which of the following can be implemented to provide system administrators with the ability to perform administrative tasks on remote computers using their uniquely assigned account?

  A. Implement transitive trust across security domains
  B. Enable the trusted OS feature across all enterprise computers
  C. Install and configure the appropriate CA certificate on all domain controllers
  D. Verify that system administrators are in the domain administrator group in the main office
  A. Implement transitive trust across security domains

• Question 1009:

  A security technician would like an application to use random salts to generate short lived encryption leys during the secure communication handshake process to increase communication security. Which of the following concepts would BEST meet this goal?

  A. Ephemeral keys
  B. Symmetric Encryption Keys
  C. AES Encryption Keys
  D. Key Escrow
  B. Symmetric Encryption Keys

• Question 1010:

  Which of the following is required to allow multiple servers to exist on one physical server?

  A. Software as a Service (SaaS)
  B. Platform as a Service (PaaS)
  C. Virtualization
  D. Infrastructure as a Service (IaaS)
  C. Virtualization

  ---

  Virtualization allows a single set of hardware to host multiple virtual machines.