CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1291:

  Which of the following protocols encapsulates an IP packet with an additional IP header?

  A. SFTP
  B. IPSec
  C. HTTPS
  D. SSL
  B. IPSec

  ---

  Authentication Header (AH) is a member of the IPsec protocol suite. AH operates directly on top of IP, using IP protocol number 51.

• Question 1292:

  Which of the following technologies was developed to allow companies to use less- expensive storage while still maintaining the speed and redundancy required in a business environment?

  A. RAID
  B. Tape Backup
  C. Load Balancing
  D. Clustering
  D. Clustering

• Question 1293:

  Which of the following concepts are included on the three sides of the "security triangle"? (Select THREE).

  A. Confidentiality
  B. Availability
  C. Integrity
  D. Authorization
  E. Authentication
  F. Continuity
  A. Confidentiality
  B. Availability
  C. Integrity

  ---

  Confidentiality, integrity, and availability are the three most important concepts in security. Thus they form the security triangle.

• Question 1294:

  Ann, the network administrator, has learned from the helpdesk that employees are accessing the wireless network without entering their domain credentials upon connection. Once the connection is made, they cannot reach any internal resources, while wired network connections operate smoothly. Which of the following is MOST likely occurring?

  A. A user has plugged in a personal access point at their desk to connect to the network wirelessly.
  B. The company is currently experiencing an attack on their internal DNS servers.
  C. The company's WEP encryption has been compromised and WPA2 needs to be implemented instead.
  D. An attacker has installed an access point nearby in an attempt to capture company information.
  D. An attacker has installed an access point nearby in an attempt to capture company information.

  ---

  The question implies that users should be required to enter their domain credentials upon connection to the wireless network. The fact that they are connecting to a wireless network without being prompted for their domain credentials and they are unable to access network resources suggests they are connecting to a rogue wireless network. A rogue access point is a wireless access point that has either been installed on a secure company network without explicit authorization from a local network administrator, or has been created to allow a hacker to conduct a man-in-the-middle attack. Rogue access points of the first kind can pose a security threat to large organizations with many employees, because anyone with access to the premises can install (maliciously or non- maliciously) an inexpensive wireless router that can potentially allow access to a secure network to unauthorized parties. Rogue access points of the second kind target networks that do not employ mutual authentication (client-server server-client) and may be used in conjunction with a rogue RADIUS server, depending on security configuration of the target network. To prevent the installation of rogue access points, organizations can install wireless intrusion prevention systems to monitor the radio spectrum for unauthorized access points.

• Question 1295:

  A small business needs to incorporate fault tolerance into their infrastructure to increase data availability. Which of the following options would be the BEST solution at a minimal cost?

  A. Clustering
  B. Mirrored server
  C. RAID
  D. Tape backup
  C. RAID

  ---

  RAID, or redundant array of independent disks (RAID). RAID allows your existing servers to have more than one hard drive so that if the main hard drive fails, the system keeps functioning. RAID can achieve fault tolerance using software which can be done using the existing hardware and software.

• Question 1296:

  Jane, an administrator, needs to make sure the wireless network is not accessible from the parking area of their office. Which of the following would BEST help Jane when deploying a new access point?

  A. Placement of antenna
  B. Disabling the SSID
  C. Implementing WPA2
  D. Enabling the MAC filtering
  A. Placement of antenna

  ---

  You should try to avoid placing access points near metal (which includes appliances) or near the ground. Placing them in the center of the area to be served and high enough to get around most obstacles is recommended. On the chance that the signal is actually traveling too far, some access points include power level controls, which allow you to reduce the amount of output provided.

• Question 1297:

  Which of the following is an important step in the initial stages of deploying a host-based firewall?

  A. Selecting identification versus authentication
  B. Determining the list of exceptions
  C. Choosing an encryption algorithm
  D. Setting time of day restrictions
  B. Determining the list of exceptions

  ---

  A host-based firewall is installed on a client system and is used to protect the client system from the activities of the user as well as from communication from the network or Internet. These firewalls manage network traffic using filters to block certain ports and protocols while allowing others to pass through the system.

• Question 1298:

  Six months into development, the core team assigned to implement a new internal piece of software must convene to discuss a new requirement with the stake holders. A stakeholder identified a missing feature critical to the organization, which must be implemented. The team needs to validate the feasibility of the newly introduced requirement and ensure it does not introduce new vulnerabilities to the software and other applications that will integrate with it. Which of the following BEST describes what the company?

  A. The system integration phase of the SDLC
  B. The system analysis phase of SSDSLC
  C. The system design phase of the SDLC
  D. The system development phase of the SDLC
  B. The system analysis phase of SSDSLC

• Question 1299:

  Which of the following can be used by a security administrator to successfully recover a user's forgotten password on a password protected file?

  A. Cognitive password
  B. Password sniffing
  C. Brute force
  D. Social engineering
  C. Brute force

  ---

  One way to recover a user's forgotten password on a password protected file is to guess it. A brute force attack is an automated attempt to open the file by using many different passwords.

  A brute force attack is a trial-and-error method used to obtain information such as a user password or personal identification number (PIN). In a brute force attack, automated software is used to generate a large number of consecutive guesses as to the value of the desired data. Brute force attacks may be used by criminals to crack encrypted data, or by security analysts to test an organization's network security. A brute force attack may also be referred to as brute force cracking. For example, a form of brute force attack known as a dictionary attack might try all the words in a dictionary. Other forms of brute force attack might try commonly-used passwords or combinations of letters and numbers. An attack of this nature can be time- and resource-consuming. Hence the name "brute force attack;" success is usually based on computing power and the number of combinations tried rather than an ingenious algorithm.

• Question 1300:

  A network administrator is responsible for securing applications against external attacks. Every month, the underlying operating system is updated. There is no process in place for other software updates. Which of the following processes could MOST effectively mitigate these risks?

  A. Application hardening
  B. Application change management
  C. Application patch management
  D. Application firewall review
  C. Application patch management

  ---

  The question states that operating system updates are applied but not other software updates. The `other software' in this case would be applications. Software updates includes functionality updates and more importantly security updates. The process of applying software updates or `patches' to applications is known as `application patch management'. Application patch management is an effective way of mitigating security risks associated with software applications.