CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1131:

  Which of the following is an example of multifactor authentication?

  A. Credit card and PIN
  B. Username and password
  C. Password and PIN
  D. Fingerprint and retina scan
  A. Credit card and PIN

  ---

  A credit card is a memory card that functions a type of two-factor authentication. The card is something you have, and its PIN is something you know. Multifactor authentication requires a user to provide two or more different types of authentication factors to prove their identity.

• Question 1132:

  A security manager received reports of several laptops containing confidential data stolen out of a lab environment. The lab is not a high security area and is secured with physical key locks. The security manager has no information to provide investigators related to who may have stolen the laptops. Which of the following should the security manager implement to improve legal and criminal investigations in the future?

  A. Motion sensors
  B. Mobile device management
  C. CCTV
  D. Cable locks
  E. Full-disk encryption
  C. CCTV

• Question 1133:

  The Quality Assurance team is testing a third party application. They are primarily testing for defects and have some understanding of how the application works. Which of the following is the team performing?

  A. Grey box testing
  B. White box testing
  C. Penetration testing
  D. Black box testing
  A. Grey box testing

• Question 1134:

  Which of the following protocols operates at the HIGHEST level of the OSI model?

  A. ICMP
  B. IPSec
  C. SCP
  D. TCP
  C. SCP

  ---

  SCP (Secure Copy) uses SSH (Secure Shell). SSH runs in the application layer (layer 7) of the OSI model.

• Question 1135:

  Which of the following would a security administrator implement in order to identify a problem between two systems that are not communicating properly?

  A. Protocol analyzer
  B. Baseline report
  C. Risk assessment
  D. Vulnerability scan
  A. Protocol analyzer

  ---

  A Protocol Analyzer is a hardware device or more commonly a software program used to capture network data communications sent between devices on a network. Capturing and analyzing the packets sent from two systems that are not

  communicating properly could help determine the cause of the issue.

  Well known software protocol analyzers include Message Analyzer (formerly Network Monitor) from Microsoft and Wireshark (formerly Ethereal).

• Question 1136:

  An administrator thinks the UNIX systems may be compromised, but a review of system log files provides no useful information. After discussing the situation with the security team, the administrator suspects that the attacker may be altering the log files and removing evidence of intrusion activity. Which of the following actions will help detect attacker attempts to further alter log files?

  A. Enable verbose system logging
  B. Change the permissions on the user's home directory
  C. Implement remote syslog
  D. Set the bash_history log file to "read only"
  C. Implement remote syslog

• Question 1137:

  A network administrator is asked to send a large file containing PII to a business associate. Which of the following protocols is the BEST choice to use?

  A. SSH
  B. SFTP
  C. SMTP
  D. FTP
  B. SFTP

  ---

  SFTP encrypts authentication and data traffic between the client and server by making use of SSH to provide secure FTP communications. As a result, SFTP offers protection for both the authentication traffic and the data transfer taking place between a client and server.

• Question 1138:

  A company has a security policy that specifies all endpoint computing devices should be assigned a unique identifier that can be tracked via an inventory management system. Recent changes to airline security regulations have cause many executives in the company to travel with mini tablet devices instead of laptops. These tablet devices are difficult to tag and track. An RDP application is used from the tablet to connect into the company network. Which of the following should be implemented in order to meet the security policy requirements?

  A. Virtual desktop infrastructure (IDI)
  B. WS-security and geo-fencing
  C. A hardware security module (HSM)
  D. RFID tagging system
  E. MDM software
  F. Security Requirements Traceability Matrix (SRTM)
  E. MDM software

• Question 1139:

  Digital certificates can be used to ensure which of the following? (Select TWO).

  A. Availability
  B. Confidentiality
  C. Verification
  D. Authorization
  E. Non-repudiation
  B. Confidentiality
  E. Non-repudiation

  ---

  Digital Signatures is used to validate the integrity of the message and the sender. Digital certificates refer to cryptography which is mainly concerned with Confidentiality, Integrity, Authentication, Nonrepudiation and Access Control. Nonrepudiation prevents one party from denying actions they carried out.

• Question 1140:

  An employee in the accounting department recently received a phishing email that instructed them to click a link in the email to view an important message from the IRS which threatened penalties if a response was not received by the end of the business day. The employee clicked on the link and the machine was infected with malware. Which of the following principles BEST describes why this social engineering ploy was successful?

  A. Scarcity
  B. Familiarity
  C. Social proof
  D. Urgency
  A. Scarcity