CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1011:

  Which of the following is the MOST specific plan for various problems that can arise within a system?

  A. Business Continuity Plan
  B. Continuity of Operation Plan
  C. Disaster Recovery Plan
  D. IT Contingency Plan
  D. IT Contingency Plan

  ---

  An IT contingency plan would focus on the IT aspect in particular to ensure business continuity.

• Question 1012:

  A Company has recently identified critical systems that support business operations. Which of the following will once defined, be the requirement for restoration of these systems within a certain period of time?

  A. Mean Time Between Failure
  B. Mean Time to Restore
  C. Recovery Point Objective
  D. Recovery Time Objective
  A. Mean Time Between Failure

• Question 1013:

  A user has unknowingly gone to a fraudulent site. The security analyst notices the following system change on the user's host:

  Old `hosts' file:

  127.0.0.1 localhost

  New `hosts' file:

  127.0.0.1 localhost

  5.5.5.5 www.comptia.com

  Which of the following attacks has taken place?

  A. Spear phishing
  B. Pharming
  C. Phishing
  D. Vishing
  B. Pharming

  ---

  We can see in this question that a fraudulent entry has been added to the user's hosts file. This will point the URL: www.comptia.com to 5.5.5.5 instead of the correct IP address. Similar in nature to e-mail phishing, pharming seeks to obtain personal or private (usually financial related) information through domain spoofing. Rather than being spammed with malicious and mischievous e-mail requests for you to visit spoof Web sites which appear legitimate, pharming 'poisons' a DNS server (or hosts file) by infusing false information into the DNS server, resulting in a user's request being redirected elsewhere. Your browser, however will show you are at the correct Web site, which makes pharming a bit more serious and more difficult to detect. Phishing attempts to scam people one at a time with an e-mail while pharming allows the scammers to target large groups of people at one time through domain spoofing.

• Question 1014:

  A network security administrator is trying to determine how an attacker gained access to the corporate wireless network. The network is configured with SSID broadcast disabled. The senior network administrator explains that this configuration setting would only have determined an unsophisticated attacker because of which of the following?

  A. The SSID can be obtained with a wireless packet analyzer
  B. The required information can be brute forced over time
  C. Disabling the SSID only hides the network from other WAPs
  D. The network name could be obtained through a social engineering campaign
  A. The SSID can be obtained with a wireless packet analyzer

• Question 1015:

  A custom PKI application downloads a certificate revocation list (CRL) once per day. Management requests the list be checked more frequently. Which of the following is the BEST solution?

  A. Refresh the CA public key each time a user logs in
  B. Download the CRK every 60 seconds
  C. Implement the OCSP protocol
  D. Prompt the user to trust a certificate each time it is used
  C. Implement the OCSP protocol

• Question 1016:

  One of the senior managers at a company called the help desk to report to report a problem. The manager could no longer access data on a laptop equipped with FDE. The manager requested that the FDE be removed and the laptop restored from a backup. The help desk informed the manager that the recommended solution was to decrypt the hard drive prior to reinstallation and recovery. The senior manager did not have a copy of the private key associated with the FDE on the laptop. Which of the following tools or techniques did the help desk use to avoid losing the data on the laptop?

  A. Public key
  B. Recovery agent
  C. Registration details
  D. Trust Model
  B. Recovery agent

• Question 1017:

  Which of the following uses port 22 by default? (Select THREE).

  A. SSH
  B. SSL
  C. TLS
  D. SFTP
  E. SCP
  F. FTPS
  G. SMTP
  H. SNMP
  A. SSH
  D. SFTP
  E. SCP

  ---

  SSH uses TCP port 22. All protocols encrypted by SSH, including SFTP, SHTTP, SCP, SExec, and slogin, also use TCP port 22.

• Question 1018:

  Ann, a newly hired human resource employee, sent out confidential emails with digital signatures, to an unintended group. Which of the following would prevent her from denying accountability?

  A. Email Encryption
  B. Steganography
  C. Non Repudiation
  D. Access Control
  C. Non Repudiation

  ---

  Nonrepudiation prevents one party from denying actions they carried out.

• Question 1019:

  Prior to leaving for an extended vacation, Joe uses his mobile phone to take a picture of his family in the house living room. Joe posts the picture on a popular social media site together with the message: "Heading to our two weeks vacation to Italy." Upon returning home, Joe discovers that the house was burglarized. Which of the following is the MOST likely reason the house was burglarized if nobody knew Joe's home address?

  A. Joe has enabled the device access control feature on his mobile phone.
  B. Joe's home address can be easily found using the TRACEROUTE command.
  C. The picture uploaded to the social media site was geo-tagged by the mobile phone.
  D. The message posted on the social media site informs everyone the house will be empty.
  C. The picture uploaded to the social media site was geo-tagged by the mobile phone.

  ---

  Geo-tagging is the process of embedding the GPS coordinates in image files and images taken using a smartphone or a digital camera. The geotagged information accompanying the image allows anyone to discover the precise location where the image was taken.

• Question 1020:

  What is the term for the process of luring someone in (usually done by an enforcement officer or a government agent)?

  A. Enticement
  B. Entrapment
  C. Deceit
  D. Sting
  A. Enticement

  ---

  Enticement is the process of luring someone into your plan or trap.