CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1141:

  A new mobile application is being developed in-house. Security reviews did not pick up any major flaws, however vulnerability scanning results show fundamental issues at the very end of the project cycle. Which of the following security activities should also have been performed to discover vulnerabilities earlier in the lifecycle?

  A. Architecture review
  B. Risk assessment
  C. Protocol analysis
  D. Code review
  D. Code review

• Question 1142:

  Which of the following describes the process of removing unnecessary accounts and services from an application to reduce risk exposure?

  A. Error and exception handling
  B. Application hardening
  C. Application patch management
  D. Cross-site script prevention
  B. Application hardening

  ---

  Hardening is the process of securing a system by reducing its surface of vulnerability. Reducing the surface of vulnerability typically includes removing unnecessary functions and features, removing unnecessary usernames or logins and disabling unnecessary services.

• Question 1143:

  Pete, the security engineer, would like to prevent wireless attacks on his network. Pete has implemented a security control to limit the connecting MAC addresses to a single port. Which of the following wireless attacks would this address?

  A. Interference
  B. Man-in-the-middle
  C. ARP poisoning
  D. Rogue access point
  D. Rogue access point

  ---

  MAC filtering is typically used in wireless networks. In computer networking, MAC Filtering (or GUI filtering, or layer 2 address filtering) refers to a security access control method whereby the 48-bit address assigned to each network card is

  used to determine access to the network.

  MAC addresses are uniquely assigned to each card, so using MAC filtering on a network permits and denies network access to specific devices through the use of blacklists and whitelists.

  In this question, a rogue access point would need to be able to connect to the network to provide access to network resources. If the MAC address of the rogue access point isn't allowed to connect to the network port, then the rogue access

  point will not be able to connect to the network.

• Question 1144:

  A mobile device user is concerned about geographic positioning information being included in messages sent between users on a popular social network platform. The user turns off the functionality in the application, but wants to ensure the application cannot re-enable the setting without the knowledge of the user. Which of the following mobile device capabilities should the user disable to achieve the stated goal?

  A. Device access control
  B. Location based services
  C. Application control
  D. GEO-Tagging
  D. GEO-Tagging

• Question 1145:

  The security administrator installed a newly generated SSL certificate onto the company web server. Due to a misconfiguration of the website, a downloadable file containing one of the pieces of the key was available to the public. It was verified that the disclosure did not require a reissue of the certificate. Which of the following was MOST likely compromised?

  A. The file containing the recovery agent's keys.
  B. The file containing the public key.
  C. The file containing the private key.
  D. The file containing the server's encrypted passwords.
  B. The file containing the public key.

  ---

  The public key can be made available to everyone. There is no need to reissue the certificate.

• Question 1146:

  A router was shut down as a result of a DoS attack. Upon review of the router logs, it was determined that the attacker was able to connect to the router using a console cable to complete the attack. Which of the following should have been implemented on the router to prevent this attack? (Select two)

  A. IP ACLs should have been enabled on the console port on the router
  B. Console access to the router should have been disabled
  C. Passwords should have been enabled on the virtual terminal interfaces on the router
  D. Virtual terminal access to the router should have been disabled
  E. Physical access to the router should have been restricted
  B. Console access to the router should have been disabled
  E. Physical access to the router should have been restricted

• Question 1147:

  A network technician is on the phone with the system administration team. Power to the server room was lost and servers need to be restarted. The DNS services must be the first to be restarted. Several machines are powered off. Assuming each server only provides one service, which of the following should be powered on FIRST to establish DNS services?

  A. Bind server
  B. Apache server
  C. Exchange server
  D. RADIUS server
  A. Bind server

  ---

  BIND (Berkeley Internet Name Domain) is the most widely used Domain Name System (DNS) software on the Internet. It includes the DNS server component contracted for name daemon. This is the only option that directly involves DNS.

• Question 1148:

  Which of the following security awareness training is BEST suited for data owners who are concerned with protecting the confidentiality of their data?

  A. Social networking use training
  B. Personally owned device policy training
  C. Tailgating awareness policy training
  D. Information classification training
  D. Information classification training

  ---

  Information classification is done by confidentiality and comprises of three categories, namely: public use, internal use and restricted use. Knowing these categories and how to handle data according to its category is essential in protecting the confidentiality of the data.

• Question 1149:

  Which of the following is BEST utilized to actively test security controls on a particular system?

  A. Port scanning
  B. Penetration test
  C. Vulnerability scanning
  D. Grey/Gray box
  B. Penetration test

  ---

  Penetration testing is the most intrusive type of testing because you are actively trying to circumvent the system's security controls to gain access to the system. Penetration testing (also called pen testing) is the practice of testing a computer

  system, network or Web application to find vulnerabilities that an attacker could exploit. Pen tests can be automated with software applications or they can be performed manually. Either way, the process includes gathering information about

  the target before the test (reconnaissance), identifying possible entry points, attempting to break in (either virtually or for real) and reporting back the findings.

  The main objective of penetration testing is to determine security weaknesses. A pen test can also be used to test an organization's security policy compliance, its employees' security awareness and the organization's ability to identify and

  respond to security incidents.

  Penetration tests are sometimes called white hat attacks because in a pen test, the good guys are attempting to break in.

  Pen test strategies include:

  Targeted testing

  Targeted testing is performed by the organization's IT team and the penetration testing team working together. It's sometimes referred to as a "lights-turned-on" approach because everyone can see the test being carried out.

  External testing

  This type of pen test targets a company's externally visible servers or devices including domain name servers (DNS), e-mail servers, Web servers or firewalls. The objective is to find out if an outside attacker can get in and how far they can

  get in once they've gained access.

  Internal testing

  This test mimics an inside attack behind the firewall by an authorized user with standard access privileges. This kind of test is useful for estimating how much damage a disgruntled employee could cause.

  Blind testing

  A blind test strategy simulates the actions and procedures of a real attacker by severely limiting the information given to the person or team that's performing the test beforehand. Typically, they may only be given the name of the company.

  Because this type of test can require a considerable amount of time for reconnaissance, it can be expensive.

  Double blind testing

  Double blind testing takes the blind test and carries it a step further. In this type of pen test, only one or two people within the organization might be aware a test is being conducted. Double-blind tests can be useful for testing an organization's

  security monitoring and incident identification as well as its response procedures.

• Question 1150:

  Which of the following is MOST critical in protecting control systems that cannot be regularly patched?

  A. Asset inventory
  B. Full disk encryption
  C. Vulnerability scanning
  D. Network segmentation
  B. Full disk encryption