CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1331:

  Which of the following authentication provides users XML for authorization and authentication?

  A. Kerberos
  B. LDAP
  C. RADIUS
  D. SAML
  D. SAML

• Question 1332:

  Which of the following has a storage root key?

  A. HSM
  B. EFS
  C. TPM
  D. TKIP
  C. TPM

  ---

  Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the system's motherboard and is enabled or disable in BIOS. It helps with hash key generation and stores cryptographic keys, passwords, or certificates on non-volatile (NV) memory. Data stored on NV memory is retained unaltered when the device has no power. The storage root key is embedded in the TPM to protect TPM keys created by applications, so that these keys cannot be used without the TPM.

• Question 1333:

  A one time security audit revealed that employees do not have the appropriate access to system resources. The auditor is concerned with the fact that most of the accounts audited have unneeded elevated permission to sensitive resources. Which of the following was implemented to detect this issue?

  A. Continuous monitoring
  B. Account review
  C. Group based privileges
  D. Credential management
  B. Account review

• Question 1334:

  Separation of duties is often implemented between developers and administrators in order to separate which of the following?

  A. More experienced employees from less experienced employees
  B. Changes to program code and the ability to deploy to production
  C. Upper level management users from standard development employees
  D. The network access layer from the application access layer
  B. Changes to program code and the ability to deploy to production

  ---

  Separation of duties means that there is differentiation between users, employees and duties per se which form part of best practices.

• Question 1335:

  A security administrator returning from a short vacation receives an account lock-out message when attempting to log into the computer. After getting the account unlocked the security administrator immediately notices a large amount of emails alerts pertaining to several different user accounts being locked out during the past three days. The security administrator uses system logs to determine that the lock-outs were due to a brute force attack on all accounts that has been previously logged into that machine. Which of the following can be implemented to reduce the likelihood of this attack going undetected?

  A. Password complexity rules
  B. Continuous monitoring
  C. User access reviews
  D. Account lockout policies
  B. Continuous monitoring

• Question 1336:

  Jane, a VPN administrator, was asked to implement an encryption cipher with a MINIMUM effective security of 128-bits. Which of the following should Jane select for the tunnel encryption?

  A. Blowfish
  B. DES
  C. SHA256
  D. HMAC
  A. Blowfish

  ---

  Blowfish is an encryption system that performs a 64-bit block cipher at very fast speeds. It is a symmetric block cipher that can use variable-length keys (from 32 bits to 448 bits). Among the alternatives listed above, it is the only cipher that can use a 128-bit key and which does provide additional security through a symmetric key.

• Question 1337:

  Which of the following authentication services should be replaced with a more secure alternative?

  A. RADIUS
  B. TACACS
  C. TACACS+
  D. XTACACS
  B. TACACS

  ---

  Terminal Access Controller Access-Control System (TACACS) is less secure than XTACACS, which is a proprietary extension of TACACS, and less secure than TACACS+, which replaced TACACS and XTACACS.

• Question 1338:

  Sara, a company's security officer, often receives reports of unauthorized personnel having access codes to the cipher locks of secure areas in the building. Sara should immediately implement which of the following?

  A. Acceptable Use Policy B. Physical security controls
  C. Technical controls
  D. Security awareness training
  D. Security awareness training

  ---

  Security awareness and training include explaining policies, procedures, and current threats to both users and management. A security awareness and training program can do much to assist in your efforts to improve and maintain security. A good security awareness training program for the entire organization should cover the following areas: Importance of security; Responsibilities of people in the organization; Policies and procedures; Usage policies; Account and password-selection criteria as well as Social engineering prevention.

• Question 1339:

  A security administrator needs an external vendor to correct an urgent issue with an organization's physical access control system (PACS). The PACS does not currently have internet access because it is running a legacy operation system. Which of the following methods should the security administrator select the best balances security and efficiency?

  A. Temporarily permit outbound internet access for the pacs so desktop sharing can be set up
  B. Have the external vendor come onsite and provide access to the PACS directly
  C. Set up VPN concentrator for the vendor and restrict access to the PACS using desktop sharing
  D. Set up a web conference on the administrator's pc; then remotely connect to the pacs
  C. Set up VPN concentrator for the vendor and restrict access to the PACS using desktop sharing

• Question 1340:

  At the outside break area, an employee, Ann, asked another employee to let her into the building because her badge is missing. Which of the following does this describe?

  A. Shoulder surfing
  B. Tailgating
  C. Whaling
  D. Impersonation
  B. Tailgating

  ---

  Although Ann is an employee and therefore authorized to enter the building, she does not have her badge and therefore strictly she should not be allowed to enter the building. Just as a driver can tailgate another driver's car by following too closely, in the security sense, tailgating means to compromise physical security by following somebody through a door meant to keep out intruders. Tailgating is actually a form of social engineering, whereby someone who is not authorized to enter a particular area does so by following closely behind someone who is authorized.