CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1251:

  Which of the following attacks allows access to contact lists on cellular phones?

  A. War chalking
  B. Blue jacking
  C. Packet sniffing
  D. Bluesnarfing
  D. Bluesnarfing

  ---

  Bluesnarfing is the theft of information from a wireless device through a Bluetooth connection. Bluetooth is a high-speed but very short-range wireless technology for exchanging data between desktop and mobile computers, personal digital assistants (PDAs), and other devices. By exploiting a vulnerability in the way Bluetooth is implemented on a mobile phone, an attacker can access information -- such as the user's calendar, contact list and e-mail and text messages -- without leaving any evidence of the attack. Other devices that use Bluetooth, such as laptop computers, may also be vulnerable, although to a lesser extent, by virtue of their more complex systems. Operating in invisible mode protects some devices, but others are vulnerable as long as Bluetooth is enabled.

• Question 1252:

  CORRECT TEXT

  You have just received some room and WiFi access control recommendations from a security consulting company. Click on each building to bring up available security controls. Please implement the following requirements:

  *

  The Chief Executive Officer's (CEO) office had multiple redundant security measures installed on the door to the office. Remove unnecessary redundancies to deploy three- factor authentication, while retaining the expensive iris render.

  *

  The Public Cafe has wireless available to customers. You need to secure the WAP with WPA and place a passphrase on the customer receipts.

  *

  In the Data Center you need to include authentication from the "something you know" category and take advantage of the existing smartcard reader on the door.

  *

  In the Help Desk Office you need to require single factor authentication through the use of physical tokens given to guests by the receptionist.

  *

  The PII Office has redundant security measures in place. You need to eliminate the redundancy while maintaining three-factor authentication and retaining the more expensive controls.

  A. Please refer to the part to solve this sim.
  A. Please refer to the part to solve this sim.

  ---

  Instructions: The original security controls for each office can be reset at anytime by selecting the Reset button. Once you have met the above requirements for each office, select the Save button.

  When you have completed the entire simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.

  

  

  Use the following to get this sim work as :

  

  

• Question 1253:

  The chief security officer (CSO) has issued a new policy to restrict generic or shared accounts on company systems. Which of the following sections of the policy requirements will have the most impact on generic and shared accounts?

  A. Account lockout
  B. Password length
  C. Concurrent logins
  D. Password expiration
  C. Concurrent logins

• Question 1254:

  Company XYZ has decided to make use of a cloud-based service that requires mutual, certificate-based authentication with its users. The company uses SSL-inspecting IDS at its network boundary and is concerned about the confidentiality of the mutual authentication. Which of the following model prevents the IDS from capturing credentials used to authenticate users to the new service or keys to decrypt that communication?

  A. Use of OATH between the user and the service and attestation from the company domain
  B. Use of active directory federation between the company and the cloud-based service
  C. Use of smartcards that store x.509 keys, signed by a global CA
  D. Use of a third-party, SAML-based authentication service for attestation
  B. Use of active directory federation between the company and the cloud-based service

• Question 1255:

  A worker dressed in a fire suppression company's uniform asks to be let into the server room to perform the annual check in the fire extinguishers. The system administrator allows the worker into the room, only to discover hours later that the worker was actually a penetration tester. Which of the following reasons allowed the penetration tester to access the server room?

  A. Testing the fire suppression system represented a critical urgency
  B. The pen tester assumed the authority of a reputable company
  C. The pen tester used an intimidation technique on the administrator
  D. The administrator trusted that the server room would remain safe
  B. The pen tester assumed the authority of a reputable company

• Question 1256:

  An administrator has concerns regarding the company's server rooms Proximity badge readers were installed, but it is discovered this is not preventing unapproved personnel from tailgating into these area. Which of the following would BEST address this concern?

  A. Replace proximity readers with turn0based key locks
  B. Install man-traps at each restricted area entrance
  C. Configure alarms to alert security when the areas are accessed
  D. Install monitoring cameras at each entrance
  B. Install man-traps at each restricted area entrance

• Question 1257:

  Failure to validate the size of a variable before writing it to memory could result in which of the following application attacks?

  A. Malicious logic
  B. Cross-site scripting
  C. SQL injection
  D. Buffer overflow
  D. Buffer overflow

  ---

  A buffer overflow occurs when a program or process tries to store more data in a buffer (temporary data storage area) than it was intended to hold. Since buffers are created to contain a finite amount of data, the extra information - which has to go somewhere - can overflow into adjacent buffers, corrupting or overwriting the valid data held in them. Although it may occur accidentally through programming error, buffer overflow is an increasingly common type of security attack on data integrity. In buffer overflow attacks, the extra data may contain codes designed to trigger specific actions, in effect sending new instructions to the attacked computer that could, for example, damage the user's files, change data, or disclose confidential information. Validating the size of a variable before writing it to memory will ensure that the variable can fit into the buffer. Failure to validate the size of a variable before writing it to memory can result in a buffer overflow.

• Question 1258:

  Sara, an attacker, is recording a person typing in their ID number into a keypad to gain access to the building. Sara then calls the helpdesk and informs them that their PIN no longer works and would like to change it. Which of the following attacks occurred LAST?

  A. Phishing
  B. Shoulder surfing
  C. Impersonation
  D. Tailgating
  C. Impersonation

  ---

  Two attacks took place in this question. The first attack was shoulder surfing. This was the act of Sara recording a person typing in their ID number into a keypad to gain access to the building. The second attack was impersonation. Sara called the helpdesk and used the PIN to impersonate the person she recorded.

• Question 1259:

  After a recent breach, the security administrator performs a wireless survey of the corporate network. The security administrator notices a problem with the following output:

  MACSSIDENCRYPTIONPOWERBEACONS 00:10:A1:36:12:CCMYCORPWPA2 CCMP601202

  00:10:A1:49:FC:37MYCORPWPA2 CCMP709102

  FB:90:11:42:FA:99MYCORPWPA2 CCMP403031

  00:10:A1:AA:BB:CCMYCORPWPA2 CCMP552021

  00:10:A1:FA:B1:07MYCORPWPA2 CCMP306044

  Given that the corporate wireless network has been standardized, which of the following attacks is underway?

  A. Evil twin
  B. IV attack
  C. Rogue AP
  D. DDoS
  A. Evil twin

  ---

  The question states that the corporate wireless network has been standardized. By `standardized' it means the wireless network access points are running on hardware from the same vendor. We can see this from the MAC addresses used.

  The first half of a MAC address is vendor specific. The second half is network adapter specific. We have four devices with MAC addresses that start with 00:10:A1. The "odd one out" is the device with a MAC address starting FB:90:11. This

  device is from a different vendor. The SSID of the wireless network on this access point is the same as the other legitimate access points. Therefore, the access point with a MAC address starting

  FB:90:11 is impersonating the corporate access points. This is known as an Evil Twin.

  An evil twin, in the context of network security, is a rogue or fake wireless access point (WAP) that appears as a genuine hotspot offered by a legitimate provider. In an evil twin attack, an eavesdropper or hacker fraudulently creates this rogue

  hotspot to collect the personal data of unsuspecting users. Sensitive data can be stolen by spying on a connection or using a phishing technique.

  For example, a hacker using an evil twin exploit may be positioned near an authentic Wi-Fi access point and discover the service set identifier (SSID) and frequency. The hacker may then send a radio signal using the exact same frequency

  and SSID. To end users, the rogue evil twin appears as their legitimate hotspot with the same name. In wireless transmissions, evil twins are not a new phenomenon. Historically, they were known as honeypots or base station clones. With the

  advancement of wireless technology and the use of wireless devices in public areas, it is very easy for novice users to set up evil twin exploits.

• Question 1260:

  In which of the following categories would creating a corporate privacy policy, drafting acceptable use policies, and group based access control be classified?

  A. Security control frameworks
  B. Best practice
  C. Access control methodologies
  D. Compliance activity
  B. Best practice

  ---

  Best practices are based on what is known in the industry and those methods that have consistently shown superior results over those achieved by other means. Furthermore best practices are applied to all aspects in the work environment.