CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1271:

  A security administrator is responsible for performing periodic reviews of user permission settings due to high turnover and internal transfers at a corporation. Which of the following BEST describes the procedure and security rationale for performing such reviews?

  A. Review all user permissions and group memberships to ensure only the minimum set of permissions required to perform a job is assigned.
  B. Review the permissions of all transferred users to ensure new permissions are granted so the employee can work effectively.
  C. Ensure all users have adequate permissions and appropriate group memberships, so the volume of help desk calls is reduced.
  D. Ensure former employee accounts have no permissions so that they cannot access any network file stores and resources.
  A. Review all user permissions and group memberships to ensure only the minimum set of permissions required to perform a job is assigned.

  ---

  Reviewing user permissions and group memberships form part of a privilege audit is used to determine that all groups, users, and other accounts have the appropriate privileges assigned according to the policies of the corporation.

• Question 1272:

  Which of the following attacks would cause all mobile devices to lose their association with corporate access points while the attack is underway?

  A. Wireless jamming
  B. Evil twin
  C. Rogue AP
  D. Packet sniffing
  A. Wireless jamming

  ---

  When most people think of frequency jamming, what comes to mind are radio, radar and cell phone jamming. However, any communication that uses radio frequencies can be jammed by a strong radio signal in the same frequency. In this manner, Wi-Fi may be attacked with a network jamming attack, reducing signal quality until it becomes unusable or disconnects occur. With very similar methods, a focused and aimed signal can actually break access point hardware, as with equipment destruction attacks.

• Question 1273:

  A Security administrator wants to implement strong security on the company smart phones and terminal servers located in the data center. Drag and Drop the applicable controls to each asset type. Instructions: Controls can be used multiple times and not all placeholders needs to be filled. When you have completed the simulation, Please select Done to submit.

  Select and Place:

  

  

  ---

  Cable locks are used as a hardware lock mechanism

• Question 1274:

  Which of the following wireless standards is backwards compatible with 802.11g?

  A. 802.11a
  B. 802.11b
  C. 802.11n
  D. 802.1q
  B. 802.11b

• Question 1275:

  Which of the following software allows a network administrator to inspect the protocol header in order to troubleshoot network issues?

  A. URL filter
  B. Spam filter
  C. Packet sniffer
  D. Switch
  C. Packet sniffer

  ---

  Every data packet transmitted across a network has a protocol header. To view a protocol header, you need to capture and view the contents of the packet with a packet sniffer.

  A sniffer (packet sniffer) is a tool that intercepts data flowing in a network. If computers are connected to a local area network that is not filtered or switched, the traffic can be broadcast to all computers contained in the same segment. This doesn't generally occur, since computers are generally told to ignore all the comings and goings of traffic from other computers. However, in the case of a sniffer, all traffic is shared when the sniffer software commands the Network Interface Card (NIC) to stop ignoring the traffic. The NIC is put into promiscuous mode, and it reads communications between computers within a particular segment. This allows the sniffer to seize everything that is flowing in the network, which can lead to the unauthorized access of sensitive data. A packet sniffer can take the form of either a hardware or software solution. A sniffer is also known as a packet analyzer.

• Question 1276:

  Which of the following devices would be the MOST efficient way to filter external websites for staff on an internal network?

  A. Protocol analyzer
  B. Switch
  C. Proxy
  D. Router
  C. Proxy

  ---

  A proxy is a device that acts on behalf of other devices. All internal user communications with the Internet could be controlled through a proxy server, which can be configured to automatically filter out or block certain sites and content. It can also cache often-accessed sites to improve performance.

• Question 1277:

  An administrator is having difficulty configuring WPA2 Enterprise using EAP-PEAP- MSCHAPv2. The administrator has configured the wireless access points properly, and has configured policies on the RADIUS server and configured

  settings on the client computers.

  Which of the following is missing?

  A. Client certificates are needed
  B. A third party LEAP client must be installed
  C. A RADIUS server certificate is needed
  D. The use of CCMP rather than TKIP
  A. Client certificates are needed

• Question 1278:

  An organization is recovering data following a datacenter outage and determines that backup copies of files containing personal information were stored in an unsecure location, because the sensitivity was unknown. Which of the following activities should occur to prevent this in the future?

  A. Business continuity planning
  B. Quantitative assessment
  C. Data classification
  D. Qualitative assessment
  C. Data classification

  ---

  Information classification is done by confidentiality and comprises of three categories, namely: public use, internal use and restricted use. Knowing how to apply these categories and matching it up with the appropriate data handling will address the situation of the data `unknown sensitivity'

• Question 1279:

  An administrator is looking to implement a security device which will be able to not only detect network intrusions at the organization level, but help defend against them as well. Which of the following is being described here?

  A. NIDS
  B. NIPS
  C. HIPS
  D. HIDS
  B. NIPS

  ---

  Network-based intrusion prevention system (NIPS) monitors the entire network for suspicious traffic by analyzing protocol activity. The main functions of intrusion prevention systems are to identify malicious activity, log information about this activity, attempt to block/stop it, and report it

• Question 1280:

  In PKI, a key pair consists of: (Select TWO).

  A. A key ring
  B. A public key
  C. A private key
  D. Key escrow
  E. A passphrase
  B. A public key
  C. A private key

  ---

  In a PKI the sender encrypts the data using the receiver's public key. The receiver decrypts the data using his own private key. The key pair consists of these two keys.