CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1101:

  A company that purchased an HVAC system for the datacenter is MOST concerned with which of the following?

  A. Availability
  B. Integrity
  C. Confidentiality
  D. Fire suppression
  A. Availability

  ---

  Availability means simply to make sure that the data and systems are available for authorized users. Data backups, redundant systems, and disaster recovery plans all support availability; as does environmental support by means of HVAC.

• Question 1102:

  Human Resources suspect an employee is accessing the employee salary database. The administrator is asked to find out who it is. In order to complete this task, which of the following is a security control that should be in place?

  A. Shared accounts should be prohibited.
  B. Account lockout should be enabled
  C. Privileges should be assigned to groups rather than individuals
  D. Time of day restrictions should be in use
  A. Shared accounts should be prohibited.

  ---

  Since distinguishing between the actions of one person and another isn't possible if they both use a shared account, shared accounts should not be allowed. If shared accounts are being used, the administrator will find the account, but have more than one suspect. To nullify this occurrence, Shared accounts should be prohibited.

• Question 1103:

  Jane, the security administrator, sets up a new AP but realizes too many outsiders are able to connect to that AP and gain unauthorized access. Which of the following would be the BEST way to mitigate this issue and still provide coverage where needed? (Select TWO).

  A. Disable the wired ports
  B. Use channels 1, 4 and 7 only
  C. Enable MAC filtering
  D. Disable SSID broadcast
  E. Switch from 802.11a to 802.11b
  C. Enable MAC filtering
  D. Disable SSID broadcast

  ---

  Explanation: Network administrators may choose to disable SSID broadcast to hide their network from unauthorized personnel. However, the SSID is still needed to direct packets to and from the base station, so it's a discoverable value using a wireless packet sniffer. Thus, the SSID should be disabled if the network isn't for public use. A MAC filter is a list of authorized wireless client interface MAC addresses that is used by a WAP to block access to all unauthorized devices.

• Question 1104:

  Which of the following secure file transfer methods uses port 22 by default?

  A. FTPS
  B. SFTP
  C. SSL
  D. S/MIME
  B. SFTP

  ---

  SSH uses TCP port 22. All protocols encrypted by SSH, including SFTP, SHTTP, SCP, SExec, and slogin, also use TCP port 22.

• Question 1105:

  Matt, a forensic analyst, wants to obtain the digital fingerprint for a given message. The message is 160-bits long. Which of the following hashing methods would Matt have to use to obtain this digital fingerprint?

  A. SHA1
  B. MD2
  C. MD4
  D. MD5
  A. SHA1

  ---

  The Secure Hash Algorithm (SHA) was designed to ensure the integrity of a message. SHA is a one-way hash that provides a hash value that can be used with an encryption protocol. This algorithm produces a 160-bit hash value. SHA (1 or 2) is preferred over Message Digest Algorithm.

• Question 1106:

  A security administrator is creating a subnet on one of the corporate firewall interfaces to use as a DMZ which is expected to accommodate at most 14 physical hosts. Which of the following subnets would BEST meet the requirements?

  A. 192.168.0.16 255.25.255.248
  B. 192.168.0.16/28
  C. 192.168.1.50 255.255.25.240
  D. 192.168.2.32/27
  B. 192.168.0.16/28

• Question 1107:

  A company discovers an unauthorized device accessing network resources through one of many network drops in a common area used by visitors. The company decides that is wants to quickly prevent unauthorized devices from accessing the network but policy prevents the company from making changes on every connecting client. Which of the following should the company implement?

  A. Port security
  B. WPA2
  C. Mandatory Access Control
  D. Network Intrusion Prevention
  A. Port security

• Question 1108:

  After a number of highly publicized and embarrassing customer data leaks as a result of social engineering attacks by phone, the Chief Information Officer (CIO) has decided user training will reduce the risk of another data leak. Which of the following would be MOST effective in reducing data leaks in this situation?

  A. Information Security Awareness
  B. Social Media and BYOD
  C. Data Handling and Disposal
  D. Acceptable Use of IT Systems
  A. Information Security Awareness

  ---

  Education and training with regard to Information Security Awareness will reduce the risk of data leaks and as such forms an integral part of Security Awareness. By employing social engineering data can be leaked by employees and only when company users are made aware of the methods of social engineering via Information Security Awareness Training, you can reduce the risk of data leaks.

• Question 1109:

  An organization is implementing a password management application which requires that all local administrator passwords be stored and automatically managed. Auditors will be responsible for monitoring activities in the application by reviewing the logs. Which of the following security controls is the BEST option to prevent auditors from accessing or modifying passwords in the application?

  A. Time of day restrictions
  B. Create user accounts for the auditors and assign read-only access
  C. Mandatory access control
  D. Role-based access with read-only
  D. Role-based access with read-only

  ---

  Auditors (employees performing the auditor role) will have access application by reviewing the logs. We can therefore assign access based on employee role. This is an example of Role-based access control (RBAC).

  To prevent the auditors from modifying passwords in the application, we need to ensure that they do not have write access. Therefore, you should assign only read access.

  Role-Based Access Control (RBAC) models approach the problem of access control based on established roles in an organization. RBAC models implement access by job function or by responsibility. Each employee has one or more roles

  that allow access to specific information. If a person moves from one role to another, the access for the previous role will no longer be available.

  Instead of thinking "Denise needs to be able to edit files," RBAC uses the logic "Editors need to be able to edit files" and "Denise is a member of the Editors group." This model is always good for use in an environment in which there is high

  employee turnover.

• Question 1110:

  LDAP and Kerberos are commonly used for which of the following?

  A. To perform queries on a directory service
  B. To store usernames and passwords for Federated Identity
  C. To sign SSL wildcard certificates for subdomains
  D. To utilize single sign-on capabilities
  D. To utilize single sign-on capabilities

  ---

  Single sign-on is usually achieved via the Lightweight Directory Access Protocol (LDAP), although Kerberos can also be used.