CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1121:

  A security administrator is developing training for corporate users on basic security principles for personal email accounts. Which of the following should be mentioned as the MOST secure way for password recovery?

  A. Utilizing a single question for password recovery
  B. Sending a PIN to a smartphone through text message
  C. Utilizing CAPTCHA to avoid brute force attacks
  D. Use a different e-mail address to recover password
  B. Sending a PIN to a smartphone through text message

• Question 1122:

  A risk management team indicated an elevated level of risk due to the location of a corporate datacenter in a region with an unstable political climate. The chief information officer (CIO) accepts the recommendation to transition the workload to an alternate datacenter in a more stable region. Which of the following forms of risk mitigation has the CIO elected to pursue?

  A. Deterrence
  B. Transference
  C. Avoidance
  D. Acceptance
  E. sharing
  C. Avoidance

• Question 1123:

  Sara, a security architect, has developed a framework in which several authentication servers work together to increase processing power for an application. Which of the following does this represent?

  A. Warm site
  B. Load balancing
  C. Clustering
  D. RAID
  C. Clustering

  ---

  Anytime you connect multiple computers to work/act together as a single server, it is known as clustering. Clustered systems utilize parallel processing (improving performance and availability) and add redundancy. Server clustering is used to provide failover capabilities / redundancy in addition to scalability as demand increases.

• Question 1124:

  A company uses SSH to support internal users. They want to block external SSH connections from reaching internal machines. Which of the following should be blocked on the firewall?

  A. 22
  B. 23
  C. 443
  D. 8080
  A. 22

• Question 1125:

  A company's business model was changed to provide more web presence and now its ERM software is no longer able to support the security needs of the company. The current data center will continue to provide network and security services. Which of the following network elements would be used to support the new business model?

  A. Software as a Service
  B. DMZ
  C. Remote access support
  D. Infrastructure as a Service
  A. Software as a Service

  ---

  Software as a Service (SaaS) allows for on-demand online access to specific software applications or suites without having to install it locally. This will allow the data center to continue providing network and security services.

• Question 1126:

  A technician wants to verify the authenticity of the system files of a potentially compromised system. Which of the following can the technician use to verify if a system file was compromised? (Select TWO).

  A. AES
  B. PGP
  C. SHA
  D. MD5
  E. ECDHE
  C. SHA
  D. MD5

  ---

  Hashing is used to prove the integrity of data to prove that it hasn't been modified. Hashing algorithms are used to derive a key mathematically from a message. The most common hashing standards for cryptographic applications are the SHA and MD algorithms.

• Question 1127:

  A user has an Android smartphone that supports full device encryption. However when the user plus into a computer all of the files are immediately accessible. Which of the following should the user do to enforce full device confidentiality should the phone be lost or stolen?

  A. Establish a PIN passphrase
  B. Agree to remote wipe terms
  C. Generate new media encryption keys
  D. Download the encryption control app from the store
  A. Establish a PIN passphrase

• Question 1128:

  A webpage displays a potentially offensive advertisement on a computer. A customer walking by notices the displayed advertisement and files complaint. Which of the following can BEST reduce the likelihood of this incident occurring again?

  A. Clean-desk policies
  B. Screen-locks
  C. Pop-up blocker
  D. Antispyware software
  C. Pop-up blocker

• Question 1129:

  Which of the following offers the LEAST amount of protection against data theft by USB drives?

  A. DLP
  B. Database encryption
  C. TPM
  D. Cloud computing
  D. Cloud computing

  ---

  Cloud computing refers to performing data processing and storage elsewhere, over a network connection, rather than locally. Because users have access to the data, it can easily be copied to a USB device.

• Question 1130:

  One of the most basic ways to protect the confidentiality of data on a laptop in the event the device is physically stolen is to implement which of the following?

  A. File level encryption with alphanumeric passwords
  B. Biometric authentication and cloud storage
  C. Whole disk encryption with two-factor authentication
  D. BIOS passwords and two-factor authentication
  C. Whole disk encryption with two-factor authentication

  ---

  Explanation: Whole-disk encryption only provides reasonable protection when the system is fully powered off. to make the most of the defensive strength of whole-disk encryption, a long, complex passphrase should be used to unlock the system on bootup. Combining whole-disk encryption with two factor authentication would further increase protection.