CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1061:

  Which of the following security concepts identifies input variables which are then used to perform boundary testing?

  A. Application baseline
  B. Application hardening
  C. Secure coding
  D. Fuzzing
  D. Fuzzing

  ---

  Fuzzing is a software testing technique that involves providing invalid, unexpected, or random data to as inputs to a computer program. The program is then monitored for exceptions such as crashes, or failed validation, or memory leaks.

• Question 1062:

  Which the following is the GREATEST risk to a company by allowing employees to physically bring their personal smartphones to work?

  A. Talking pictures of proprietary information and equipment in restricted areas.
  B. Installing soft token software to connect to the company's wireless network.
  C. Company Cannot automate patch management on personally-owned devices.
  D. Increase the attack surface by having more target devices on the company's campus.
  A. Talking pictures of proprietary information and equipment in restricted areas.

• Question 1063:

  An attacker used an undocumented and unknown application exploit to gain access to a file server. Which of the following BEST describes this type of attack?

  A. Integer overflow
  B. Cross-site scripting
  C. Zero-day
  D. Session hijacking
  E. XML injection
  C. Zero-day

  ---

  The vulnerability is undocumented and unknown. This is zero day vulnerability. A zero day vulnerability refers to a hole in software that is unknown to the vendor. This security hole is then exploited by hackers before the vendor becomes aware and hurries to fix it--this exploit is called a zero day attack. Uses of zero day attacks can include infiltrating malware, spyware or allowing unwanted access to user information. The term "zero day" refers to the unknown nature of the hole to those outside of the hackers, specifically, the developers. Once the vulnerability becomes known, a race begins for the developer, who must protect users.

• Question 1064:

  While preparing for an audit a security analyst is reviewing the various controls in place to secure the operation of financial processes within the organization. Based on the pre assessment report, the department does not effectively maintain a strong financial transaction control environment due to conflicting responsibilities held by key personnel. If implemented, which of the following security concepts will most effectively address the finding?

  A. Least privilege
  B. Separation of duties
  C. Time-based access control
  D. Dual control
  B. Separation of duties

• Question 1065:

  A security administrator wants to get a real time look at what attackers are doing in the wild, hoping to lower the risk of zero-day attacks. Which of the following should be used to accomplish this goal?

  A. Penetration testing
  B. Honeynets
  C. Vulnerability scanning
  D. Baseline reporting
  B. Honeynets

  ---

  A honeynet is a network set up with intentional vulnerabilities; its purpose is to invite attack, so that an attacker's activities and methods can be studied and that information used to increase network security. A honeynet contains one or more honey pots, which are computer systems on the Internet expressly set up to attract and "trap" people who attempt to penetrate other people's computer systems. Although the primary purpose of a honeynet is to gather information about attackers' methods and motives, the decoy network can benefit its operator in other ways, for example by diverting attackers from a real network and its resources. The Honeynet Project, a non-profit research organization dedicated to computer security and information sharing, actively promotes the deployment of honeynets. In addition to the honey pots, a honeynet usually has real applications and services so that it seems like a normal network and a worthwhile target. However, because the honeynet doesn't actually serve any authorized users, any attempt to contact the network from without is likely an illicit attempt to breach its security, and any outbound activity is likely evidence that a system has been compromised. For this reason, the suspect information is much more apparent than it would be in an actual network, where it would have to be found amidst all the legitimate network data. Applications within a honeynet are often given names such as "Finances" or "Human Services" to make them sound appealing to the attacker.

  A virtual honeynet is one that, while appearing to be an entire network, resides on a single server.

• Question 1066:

  A security technician would like to use ciphers that generate ephemeral keys for secure communication. Which of the following algorithms support ephemeral modes? (Select TWO)

  A. Diffie-Hellman
  B. RC4
  C. RIPEMO
  D. NTLMv2
  E. PAP
  F. RSA
  A. Diffie-Hellman
  F. RSA

• Question 1067:

  Which of the following is used to verify data integrity?

  A. SHA
  B. 3DES
  C. AES
  D. RSA
  A. SHA

  ---

  SHA stands for "secure hash algorithm". SHA-1 is the most widely used of the existing SHA hash functions, and is employed in several widely used applications and protocols including TLS and SSL, PGP, SSH, S/MIME, and IPsec. It is used

  to ensure data integrity.

  Note:

  A hash value (or simply hash), also called a message digest, is a number generated from a string of text. The hash is substantially smaller than the text itself, and is generated by a formula in such a way that it is extremely unlikely that some

  other text will produce the same hash value.

  Hashes play a role in security systems where they're used to ensure that transmitted messages have not been tampered with. The sender generates a hash of the message, encrypts it, and sends it with the message itself. The recipient then

  decrypts both the message and the hash, produces another hash from the received message, and compares the two hashes. If they're the same, there is a very high probability that the message was transmitted intact. This is how hashing is

  used to ensure data integrity.

• Question 1068:

  A network administrator noticed various chain messages have been received by the company. Which of the following security controls would need to be implemented to mitigate this issue?

  A. Anti-spam
  B. Antivirus
  C. Host-based firewalls
  D. Anti-spyware
  A. Anti-spam

  ---

  Explanation: A spam filter is a software or hardware solution used to identify and block, filter, or remove unwanted messages sent via email or instant messaging (IM).

• Question 1069:

  A recent audit had revealed weaknesses in the process of deploying new servers and network devices. Which of the following practices could be used to increase the security posture during deployment? (Select TWO).

  A. Deploy a honeypot
  B. Disable unnecessary services
  C. Change default password
  D. Implement an application firewall
  E. Penetration testing
  B. Disable unnecessary services
  C. Change default password

• Question 1070:

  Searching for systems infected with malware is considered to be which of the following phases of incident response?

  A. Containment
  B. Preparation
  C. Mitigation
  D. Identification
  D. Identification