CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1311:

  A company wants to ensure that the validity of publicly trusted certificates used by its web server can be determined even during an extended internet outage. Which of the following should be implemented?

  A. Recovery agent
  B. Ocsp
  C. Crl
  D. Key escrow
  B. Ocsp

• Question 1312:

  Which of the following would an attacker use to generate and capture additional traffic prior to performing an IV attack?

  A. DNS poisoning
  B. DDos
  C. Replay attack
  D. Dictionary attack
  D. Dictionary attack

• Question 1313:

  Which of the following, if implemented, would improve security of remote users by reducing vulnerabilities associated with data-in-transit?

  A. Full-disk encryption
  B. A virtual private network
  C. A thin-client approach
  D. Remote wipe capability
  B. A virtual private network

• Question 1314:

  Signed digital certificates used to secure communication with a web server are MOST commonly associated with which of the following ports?

  A. 25
  B. 53
  C. 143
  D. 443
  D. 443

  ---

  HTTPS authenticates the website and corresponding web server with which one is communicating. HTTPS makes use of port 443. Incorrect Options:

  A: Port 25 is used by Simple Mail Transfer Protocol (SMTP) for routing e-mail between mail servers.

  B: Port 53 is used by Domain Name System (DNS).

  C: Port 143 is used by Internet Message Access Protocol (IMAP) for the management of email messages.

  Reference:

  https://en.wikipedia.org/wiki/HTTPS

  https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers

• Question 1315:

  Ann, the Chief Information Officer (CIO) of a company, sees cloud computing as a way to save money while providing valuable services. She is looking for a cost-effective solution to assist in capacity planning as well as visibility into the performance of the network. Which of the following cloud technologies should she look into?

  A. IaaS
  B. MaaS
  C. SaaS
  D. PaaS
  B. MaaS

  ---

  Monitoring-as-a-service (MaaS) is a cloud delivery model that falls under anything as a service (XaaS). MaaS allows for the deployment of monitoring functionalities for several other services and applications within the cloud.

• Question 1316:

  Ann, a security administrator is hardening the user password policies. She currently has the following in place.

  Passwords expire every 60 days

  Password length is at least eight characters

  Passwords must contain at least one capital letter and one numeric character

  Passwords cannot be reused until the password has been changed eight times

  She learns that several employees are still using their original password after the 60-day forced change. Which of the following can she implement to BEST mitigate this?

  A. Lower the password expiry time to every 30days instead of every 60 days
  B. Require that the password contains at least one capital, one numeric, and one special character
  C. Change the re-usage time from eight to 16 changes before a password can be repeated
  D. Create a rule that users can only change their passwords once every two weeks
  D. Create a rule that users can only change their passwords once every two weeks

• Question 1317:

  Which of the following authentication services requires the use of a ticket-granting ticket (TGT) server in order to complete the authentication process?

  A. TACACS+
  B. Secure LDAP
  C. RADIUS
  D. Kerberos
  D. Kerberos

  ---

  The basic process of Kerberos authentication is as follows:

  The subject provides logon credentials.

  The Kerberos client system encrypts the password and transmits the protected credentials to the KDC.

  The KDC verifies the credentials and then creates a ticket-granting ticket (TGT--a hashed form of the subject's password with the addition of a time stamp that indicates a valid lifetime). The TGT is encrypted and sent to the client. The client

  receives the TGT. At this point, the subject is an authenticated principle in the Kerberos realm.

  The subject requests access to resources on a network server. This causes the client to request a service ticket (ST) from the KDC.

  The KDC verifies that the client has a valid TGT and then issues an ST to the client. The ST includes a time stamp that indicates its valid lifetime.

  The client receives the ST.

  The client sends the ST to the network server that hosts the desired resource. The network server verifies the ST. If it's verified, it initiates a communication session with the client. From this point forward, Kerberos is no longer involved.

• Question 1318:

  Which of the following provides dedicated hardware-based cryptographic functions to an operating system and its applications running on laptops and desktops?

  A. TPM
  B. HSM
  C. CPU
  D. FPU
  A. TPM

  ---

  Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the system's motherboard and is enabled or disable in BIOS. It helps with hash key generation and stores cryptographic keys, passwords, or certificates.

• Question 1319:

  A review of the company's network traffic shows that most of the malware infections are caused by users visiting gambling and gaming websites. The security manager wants to implement a solution that will block these websites, scan all web traffic for signs of malware, and block the malware before it enters the company network. Which of the following is suited for this purpose?

  A. ACL
  B. IDS
  C. UTM
  D. Firewall
  C. UTM

  ---

  An all-in-one appliance, also known as Unified Threat Management (UTM) and Next Generation Firewall (NGFW), is one that provides a good foundation for security. A variety is available; those that you should be familiar with for the exam fall under the categories of providing URL filtering, content inspection, or malware inspection.

  Malware inspection is the use of a malware scanner to detect unwanted software content in network traffic. If malware is detected, it can be blocked or logged and/or trigger an alert.

• Question 1320:

  The system administrator notices that their application is no longer able to keep up with the large amounts of traffic their server is receiving daily. Several packets are dropped and sometimes the server is taken offline. Which of the following would be a possible solution to look into to ensure their application remains secure and available?

  A. Cloud computing
  B. Full disk encryption
  C. Data Loss Prevention
  D. HSM
  A. Cloud computing

  ---

  Cloud computing means hosting services and data on the Internet instead of hosting it locally. There is thus no issue when the company's server is taken offline.