CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1181:

  The Human Resources department has a parent shared folder setup on the server. There are two groups that have access, one called managers and one called staff. There are many sub folders under the parent shared folder, one is called payroll. The parent folder access control list propagates all subfolders and all subfolders inherit the parent permission. Which of the following is the quickest way to prevent the staff group from gaining access to the payroll folder?

  A. Remove the staff group from the payroll folder
  B. Implicit deny on the payroll folder for the staff group
  C. Implicit deny on the payroll folder for the managers group
  D. Remove inheritance from the payroll folder
  B. Implicit deny on the payroll folder for the staff group

  ---

  Explanation: Implicit deny is the default security stance that says if you aren't specifically granted access or privileges for a resource, you're denied access by default.

• Question 1182:

  Which of the following is BEST carried out immediately after a security breach is discovered?

  A. Risk transference
  B. Access control revalidation
  C. Change management
  D. Incident management
  D. Incident management

  ---

  Incident management is the steps followed when security incident occurs.

• Question 1183:

  The firewall administrator is adding a new certificate for the company's remote access solution. The solution requires that the uploaded file contain the entire certificate chain for the certificate to load properly. The administrator loads the company certificate and the root CA certificate into the file. The file upload is rejected. Which of the following is required to complete the certificate chain?

  A. Certificate revocation list
  B. Intermediate authority
  C. Recovery agent
  D. Root of trust
  B. Intermediate authority

• Question 1184:

  The user of a news service accidently accesses another user's browsing history. From this the user can tell what competitors are reading, querying, and researching. The news service has failed to properly implement which of the following?

  A. Application white listing
  B. In-transit protection
  C. Access controls
  D. Full disk encryption
  C. Access controls

• Question 1185:

  A new employee has joined the accounting department and is unable to access the accounting server. The employee can access other network resources and the Internet. Other accounting employees are able to access the accounting server without any issues. Which of the following is the MOST likely issue?

  A. The server's IDS is blocking the new employee's connection
  B. The workstation is unable to join the domain
  C. The server's drive is not mapped on the new employee's workstation
  D. The new account is not in the proper role-based profile
  D. The new account is not in the proper role-based profile

• Question 1186:

  A security engineer is reviewing log data and sees the output below:

  POST: /payload.php HTTP/1.1 HOST: localhost Accept: */* Referrer: http://localhost/ ******* HTTP/1.1 403 Forbidden Connection: close Log: Access denied with 403. Pattern matches form bypass Which of the following technologies was MOST likely being used to generate this log?

  A. Host-based Intrusion Detection System
  B. Web application firewall
  C. Network-based Intrusion Detection System
  D. Stateful Inspection Firewall
  E. URL Content Filter
  B. Web application firewall

  ---

  A web application firewall is a device, server add-on, virtual service, or system filter that defines a strict set of communication rules for a website and all visitors. It's intended to be an application-specific firewall to prevent cross-site scripting, SQL injection, and other web application attacks.

• Question 1187:

  Joe, a security technician, is configuring two new firewalls through the web on each. Each time Joe connects, there is a warning message in the browser window about the certificate being untrusted. Which of the following will allow Joe to configure a certificate for the firewall so that firewall administrators are able to connect both firewalls without experiencing the warning message?

  A. Apply a permanent override to the certificate warning in the browser
  B. Apply a wildcard certificate obtained from the company's certificate authority
  C. Apply a self-signed certificate generated by each of the firewalls
  D. Apply a single certificate obtained from a public certificate authority
  C. Apply a self-signed certificate generated by each of the firewalls

• Question 1188:

  An administrator needs to secure RADIUS traffic between two servers. Which of the following is the BEST solution?

  A. Require IPSec with AH between the servers
  B. Require the message-authenticator attribute for each message
  C. Use MSCHAPv2 with MPPE instead of PAP
  D. Require a long and complex shared secret for the servers
  A. Require IPSec with AH between the servers

  ---

  IPsec is used for a secure point-to-point connection traversing an insecure network such as the Internet. Authentication Header (AH) is a primary IPsec protocol that provides authentication of the sender's data.

• Question 1189:

  A security manager must remain aware of the security posture of each system. Which of the following supports this requirement?

  A. Training staff on security policies
  B. Establishing baseline reporting
  C. Installing anti-malware software
  D. Disabling unnecessary accounts/services
  B. Establishing baseline reporting

  ---

  The IT baseline protection approach is a methodology to identify and implement computer security measures in an organization. The aim is the achievement of an adequate and appropriate level of security for IT systems. This is known as a baseline. A baseline report compares the current status of network systems in terms of security updates, performance or other metrics to a predefined set of standards (the baseline).

• Question 1190:

  The network manager has obtained a public IP address for use with a new system to be available via the internet. This system will be placed in the DMZ and will communicate with a database server on the LAN. Which of the following should be used to allow fir proper communication between internet users and the internal systems?

  A. VLAN
  B. DNS
  C. NAT
  D. HTTP
  E. SSL
  E. SSL