CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1261:

  An employee recently lost a USB drive containing confidential customer data. Which of the following controls could be utilized to minimize the risk involved with the use of USB drives?

  A. DLP
  B. Asset tracking
  C. HSM
  D. Access control
  A. DLP

  ---

  Data loss prevention (DLP) systems monitor the contents of systems (workstations, servers, and networks) to make sure that key content is not deleted or removed. They also monitor who is using the data (looking for unauthorized access) and transmitting the data.

• Question 1262:

  Pete, an employee, attempts to visit a popular social networking site but is blocked. Instead, a page is displayed notifying him that this site cannot be visited. Which of the following is MOST likely blocking Pete's access to this site?

  A. Internet content filter
  B. Firewall
  C. Proxy server
  D. Protocol analyzer
  A. Internet content filter

  ---

  Web filtering software is designed to restrict or control the content a reader is authorised to access, especially when utilised to restrict material delivered over the Internet via the Web, e-mail, or other means.

• Question 1263:

  An administrator discovers that many users have used their same passwords for years even though the network requires that the passwords be changed every six weeks. Which of the following, when used together, would BEST prevent users from reusing their existing password? (Select TWO).

  A. Length of password
  B. Password history
  C. Minimum password age
  D. Password expiration
  E. Password complexity
  F. Non-dictionary words
  B. Password history
  C. Minimum password age

  ---

  In this question, users are forced to change their passwords every six weeks. However, they are able to change their password and enter the same password as the new password.

  Password history determines the number of previous passwords that cannot be used when a user changes his password. For example, a password history value of 5 would disallow a user from changing his password to any of his previous 5 passwords.

  When a user is forced to change his password due to a maximum password age period expiring, (the question states that the network requires that the passwords be changed every six weeks) he could change his password to a previously used password. Or if a password history value of 5 is configured, the user could change his password six times to cycle back round to his original password. This is where the minimum password age comes in. This is the period that a password must be used for. For example, a minimum password age of 30 would determine that when a user changes his password, he must continue to use the same password for at least 30 days.

• Question 1264:

  Which of the following is an attack designed to activate based on date?

  A. Logic bomb
  B. Backdoor
  C. Trojan
  D. Rootkit
  A. Logic bomb

• Question 1265:

  A security administrator wants to implement a solution which will allow some applications to run under the user's home directory and only have access to files stored within the same user's folder, while other applications have access to shared folders. Which of the following BEST addresses these requirements if the environment is concurrently shared by multiple users?

  A. OS Virtualization
  B. Trusted OS
  C. Process sandboxing
  D. File permission
  C. Process sandboxing

  ---

  Sandboxing involves running applications in restricted memory areas. It limits the possibility of an application crash, allowing a user to access another application or the data associated with it.

• Question 1266:

  An application developer has tested some of the known exploits within a new application. Which of the following should the administrator utilize to test for unidentified faults or memory leaks?

  A. XSRF Attacks
  B. Fuzzing
  C. Input Validations
  D. SQL Injections
  B. Fuzzing

  ---

  Fuzzing is a software testing technique that involves providing invalid, unexpected, or random data to as inputs to a computer program. The program is then monitored for exceptions such as crashes, or failed validation, or memory leaks.

• Question 1267:

  Which of the following will allow the live state of the virtual machine to be easily reverted after a failed upgrade?

  A. Replication
  B. Backups
  C. Fault tolerance
  D. Snapshots
  D. Snapshots

• Question 1268:

  A security manager requires fencing around the perimeter, and cipher locks on all entrances. The manager is concerned with which of the following security controls?

  A. Integrity
  B. Availability
  C. Confidentiality
  D. Safety
  D. Safety

  ---

  Fencing is used to increase physical security and safety. Locks are used to keep those who are unauthorized out.

• Question 1269:

  A security administrator plans on replacing a critical business application in five years. Recently, there was a security flaw discovered in the application that will cause the IT department to manually re-enable user accounts each month at a cost of $2,000. Patching the application today would cost $140,000 and take two months to implement. Which of the following should the security administrator do in regards to the application?

  A. Avoid the risk to the user base allowing them to re-enable their own accounts
  B. Mitigate the risk by patching the application to increase security and saving money
  C. Transfer the risk replacing the application now instead of in five years
  D. Accept the risk and continue to enable the accounts each month saving money
  D. Accept the risk and continue to enable the accounts each month saving money

  ---

  This is a risk acceptance measure that has to be implemented since the cost of patching would be too high compared to the cost to keep the system going as is. Risk acceptance is often the choice you must make when the cost of implementing any of the other four choices (i.e. risk deterrence, mitigation, transference or avoidance) exceeds the value of the harm that would occur if the risk came to fruition.

• Question 1270:

  Configuring key/value pairs on a RADIUS server is associated with deploying which of the following?

  A. WPA2-Enterprise wireless network
  B. DNS secondary zones
  C. Digital certificates D. Intrusion detection system
  A. WPA2-Enterprise wireless network

  ---

  WPA2-Enterprise is designed for enterprise networks and requires a RADIUS authentication server.