CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1221:

  Which of the following authentication methods can use the SCTP and TLS protocols for reliable packet transmissions?

  A. TACACS+
  B. SAML
  C. Diameter
  D. Kerberos
  C. Diameter

• Question 1222:

  Maintenance workers find an active network switch hidden above a dropped-ceiling tile in the CEO's office with various connected cables from the office. Which of the following describes the type of attack that was occurring?

  A. Spear phishing
  B. Packet sniffing
  C. Impersonation
  D. MAC flooding
  B. Packet sniffing

  ---

  A Protocol Analyzer is a hardware device or more commonly a software program used to capture network data communications sent between devices on a network. Capturing packets sent from a computer system is known as packet sniffing.

  However, packet sniffing requires a physical connection to the network. The switch hidden in the ceiling is used to provide the physical connection to the network.

  Well known software protocol analyzers include Message Analyzer (formerly Network Monitor) from Microsoft and Wireshark (formerly Ethereal).

  A sniffer (packet sniffer) is a tool that intercepts data flowing in a network. If computers are connected to a local area network that is not filtered or switched, the traffic can be broadcast to all computers contained in the same segment. This

  doesn't generally occur, since computers are generally told to ignore all the comings and goings of traffic from other computers. However, in the case of a sniffer, all traffic is shared when the sniffer software commands the Network Interface

  Card (NIC) to stop ignoring the traffic. The NIC is put into promiscuous mode, and it reads communications between computers within a particular segment. This allows the sniffer to seize everything that is flowing in the network, which can

  lead to the unauthorized access of sensitive data. A packet sniffer can take the form of either a hardware or software solution. A sniffer is also known as a packet analyzer.

• Question 1223:

  Which of the following network design elements allows for many internal devices to share one public IP address?

  A. DNAT
  B. PAT
  C. DNS
  D. DMZ
  B. PAT

  ---

  Port Address Translation (PAT), is an extension to network address translation (NAT) that permits multiple devices on a local area network (LAN) to be mapped to a single public IP address. The goal of PAT is to conserve IP addresses.

  Most home networks use PAT. In such a scenario, the Internet Service Provider (ISP) assigns a single IP address to the home network's router. When Computer X logs on the Internet, the router assigns the client a port number, which is appended to the internal IP address. This, in effect, gives Computer X a unique address. If Computer Z logs on the Internet at the same time, the router assigns it the same local IP address with a different port number. Although both computers are sharing the same public IP address and accessing the Internet at the same time, the router knows exactly which computer to send specific packets to because each computer has a unique internal address.

• Question 1224:

  Which of the following types of malware, attempts to circumvent malware detection by trying to hide its true location on the infected system?

  A. Armored virus
  B. Ransomware
  C. Trojan
  D. Keylogger
  C. Trojan

• Question 1225:

  Which of the following is a difference between TFTP and FTP?

  A. TFTP is slower than FTP.
  B. TFTP is more secure than FTP.
  C. TFTP utilizes TCP and FTP uses UDP.
  D. TFTP utilizes UDP and FTP uses TCP.
  D. TFTP utilizes UDP and FTP uses TCP.

  ---

  FTP employs TCP ports 20 and 21 to establish and maintain client-to-server communications, whereas TFTP makes use of UDP port 69.

• Question 1226:

  Which of the following protocols is the security administrator observing in this packet capture?

  12:33:43, SRC 192.168.4.3:3389, DST 10.67.33.20:8080, SYN/ACK

  A. HTTPS
  B. RDP
  C. HTTP
  D. SFTP
  B. RDP

  ---

  Remote Desktop Protocol (RDP) is a proprietary protocol developed by Microsoft, which provides a user with a graphical interface to connect to another computer over a network connection.

  Example of RDP tracing output:

  No. Time Delta Source Destination Protocol Length Info 5782, 2013-01-06 09:52:15.407, 0.000, SRC 10.7.3.187, DST 10.0.107.58, TCP, 62, 3389 > 59193 [SYN, ACK]

• Question 1227:

  At an organization, unauthorized users have been accessing network resources via unused network wall jacks. Which of the following would be used to stop unauthorized access?

  A. Configure an access list.
  B. Configure spanning tree protocol.
  C. Configure port security.
  D. Configure loop protection.
  C. Configure port security.

  ---

  Port security in IT can mean several things. It can mean the physical control of all connection points, such as RJ-45 wall jacks or device ports, so that no unauthorized users or unauthorized devices can attempt to connect into an open port. This can be accomplished by locking down the wiring closet and server vaults and then disconnecting the workstation run from the patch panel (or punch-down block) that leads to a room's wall jack. Any unneeded or unused wall jacks can (and should) be physically disabled in this manner. Another option is to use a smart patch panel that can monitor the MAC address of any device connected to each and every wall port across a building and detect not just when a new device is connected to an empty port, but also when a valid device is disconnected or replaced by an invalid device.

• Question 1228:

  The Chief Technology Officer (CTO) of a company, Ann, is putting together a hardware budget for the next 10 years. She is asking for the average lifespan of each hardware device so that she is able to calculate when she will have to replace each device. Which of the following categories BEST describes what she is looking?

  A. ALE
  B. MTTR
  C. MTBF
  D. MTTF
  D. MTTF

• Question 1229:

  A security administrator must implement a secure key exchange protocol that will allow company clients to autonomously exchange symmetric encryption keys over an unencrypted channel. Which of the following MUST be implemented?

  A. SHA-256
  B. AES
  C. Diffie-Hellman
  D. 3DES
  C. Diffie-Hellman

  ---

  Diffie-Hellman key exchange (D-H) is a means of securely generating symmetric encryption keys across an insecure medium.

• Question 1230:

  An organization wants to conduct secure transactions of large data files. Before encrypting and exchanging the data files, the organization wants to ensure a secure exchange of keys. Which of the following algorithms is appropriate for securing the key exchange?

  A. DES
  B. Blowfish
  C. DSA
  D. Diffie-Hellman
  E. 3DES
  D. Diffie-Hellman