CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1041:

  Which of the following BEST explains Platform as a Service?

  A. An external entity that provides a physical or virtual instance of an installed operating system
  B. A third party vendor supplying support services to maintain physical platforms and servers
  C. An external group providing operating systems installed on virtual servers with web applications
  D. An internal group providing physical server instances without installed operating systems or support
  C. An external group providing operating systems installed on virtual servers with web applications

• Question 1042:

  A business has recently deployed laptops to all sales employees. The laptops will be used primarily from home offices and while traveling, and a high amount of wireless mobile use is expected. To protect the laptops while connected to untrusted wireless networks, which of the following would be the BEST method for reducing the risk of having the laptops compromised?

  A. MAC filtering
  B. Virtualization
  C. OS hardening
  D. Application white-listing
  C. OS hardening

• Question 1043:

  A user commuting to work via public transport received an offensive image on their smart phone from another commuter. Which of the following attacks MOST likely took place?

  A. War chalking
  B. Bluejacking
  C. War driving
  D. Bluesnarfing
  B. Bluejacking

  ---

  The question states that the `attack' took place on public transport and was received on a smartphone. Therefore, it is most likely that the image was sent using Bluetooth. Bluejacking is the sending of unsolicited messages over Bluetooth to Bluetooth-enabled devices such as mobile phones, PDAs or laptop computers, sending a vCard which typically contains a message in the name field (i.e., for bluedating or bluechat) to another Bluetooth-enabled device via the OBEX protocol. Bluetooth has a very limited range, usually around 10 metres (32.8 ft) on mobile phones, but laptops can reach up to 100 metres (328 ft) with powerful (Class 1) transmitters. Bluejacking is usually harmless, but because bluejacked people generally don't know what has happened, they may think that their phone is malfunctioning. Usually, a bluejacker will only send a text message, but with modern phones it's possible to send images or sounds as well. Bluejacking has been used in guerrilla marketing campaigns to promote advergames.

• Question 1044:

  Which of the following allows lower level domains to access resources in a separate Public Key Infrastructure?

  A. Trust Model
  B. Recovery Agent
  C. Public Key
  D. Private Key
  A. Trust Model

  ---

  In a bridge trust model allows lower level domains to access resources in a separate PKI through the root CA.

  A trust Model is collection of rules that informs application on how to decide the legitimacy of a Digital Certificate.

  In a bridge trust model, a peer-to-peer relationship exists among the root CAs. The root CAs can communicate with one another, allowing cross certification. This arrangement allows a certification process to be established between

  organizations or departments. Each intermediate CA trusts only the CAs above and below it, but the CA structure can be expanded without creating additional layers of CAs.

• Question 1045:

  After receiving the hard drive from detectives, the forensic analyst for a court case used a log to capture corresponding events prior to sending the evidence to lawyers. Which of the following do these actions demonstrate?

  A. Chain of custody
  B. Order if volatility
  C. Data analysis
  D. Tracking man hours and expenses
  A. Chain of custody

• Question 1046:

  The recovery agent is used to recover the:

  A. Root certificate
  B. Key in escrow
  C. Public key
  D. Private key
  D. Private key

  ---

  A key recovery agent is an entity that has the ability to recover a private key, key components, or plaintext messages as needed. Using the recovered key the recovery agent can decrypt encrypted data.

• Question 1047:

  A product manager is concerned about continuing operations at a facility located in a region undergoing significant political unrest. After consulting with senior management, a decision is made to suspend operations at the facility until the situation stabilizes. Which of the following risk management strategies BEST describes management's response?

  A. Deterrence
  B. Mitigation
  C. Avoidance
  D. Acceptance
  C. Avoidance

• Question 1048:

  A security technician is attempting to improve the overall security posture of an internal mail server. Which of the following actions would BEST accomplish this goal?

  A. Monitoring event logs daily
  B. Disabling unnecessary services
  C. Deploying a content filter on the network
  D. Deploy an IDS on the network
  B. Disabling unnecessary services

  ---

  One of the most basic practices for reducing the attack surface of a specific host is to disable unnecessary services. Services running on a host, especially network services provide an avenue through which the system can be attacked. If a service is not being used, disable it.

• Question 1049:

  Ann the IT director wants to ensure that as hoc changes are not making their way to the production applications. Which of the following risk mitigation strategies should she implement in her department?

  A. Change management
  B. Permission reviews
  C. Incident management
  D. Perform routine audits
  A. Change management

• Question 1050:

  A systems administrator has made several unauthorized changes to the server cluster that resulted in a major outage. This event has been brought to the attention of the Chief Information Office (CIO) and he has requested immediately implement a risk mitigation strategy to prevent this type of event from reoccurring. Which of the following would be the BEST risk mitigation strategy to implement in order to meet this request?

  A. Asset Management
  B. Change Management
  C. Configuration Management
  D. Incident Management
  B. Change Management