CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1381:

  Allowing unauthorized removable devices to connect to computers increases the risk of which of the following?

  A. Data leakage prevention
  B. Data exfiltration
  C. Data classification
  D. Data deduplication
  B. Data exfiltration

  ---

  Explanation: Data exfiltration is the unauthorized copying, transfer or retrieval of data from a system.

• Question 1382:

  When reviewing security logs, an administrator sees requests for the AAAA record of www.comptia.com. Which of the following BEST describes this type of record?

  A. DNSSEC record
  B. IPv4 DNS record
  C. IPSEC DNS record
  D. IPv6 DNS record
  D. IPv6 DNS record

  ---

  Explanation: The AAAA Address record links a FQDN to an IPv6 address.

• Question 1383:

  The Chief Information Officer (CIO) has mandated web based Customer Relationship Management (CRM) business functions be moved offshore to reduce cost, reduce IT overheads, and improve availability. The Chief Risk Officer (CRO) has agreed with the CIO's direction but has mandated that key authentication systems be run within the organization's network. Which of the following would BEST meet the CIO and CRO's requirements?

  A. Software as a Service
  B. Infrastructure as a Service
  C. Platform as a Service
  D. Hosted virtualization service
  A. Software as a Service

  ---

  Software as a Service (SaaS) is a software distribution model in which applications are hosted by a vendor or service provider and made available to customers over a network, typically the Internet.

• Question 1384:

  A server administrator needs to administer a server remotely using RDP, but the specified port is closed on the outbound firewall on the network. The access the server using RDP on a port other than the typical registered port for the RDP protocol?

  A. TLS
  B. MPLS
  C. SCP
  D. SSH
  A. TLS

• Question 1385:

  Sara, a user, downloads a keygen to install pirated software. After running the keygen, system performance is extremely slow and numerous antivirus alerts are displayed. Which of the following BEST describes this type of malware?

  A. Logic bomb
  B. Worm
  C. Trojan
  D. Adware
  C. Trojan

  ---

  In computers, a Trojan is a program in which malicious or harmful code is contained inside apparently harmless programming or data in such a way that it can get control and do its chosen form of damage, such as ruining the file allocation table on your hard disk. In one celebrated case, a Trojan was a program that was supposed to find and destroy computer viruses. A Trojan horse may be widely redistributed as part of a computer virus.

• Question 1386:

  A user has reported inadvertently sending an encrypted email containing PII to an incorrect distribution group. Which of the following potential incident types is this?

  A. Data sharing
  B. Unauthorized viewing
  C. Data breach
  D. Unauthorized access
  B. Unauthorized viewing

• Question 1387:

  Several departments within a company have a business need to send high volumes of confidential information to customers via email. Which of the following is the BEST solution to mitigate unintentional exposure of confidential information?

  A. Employ encryption on all outbound emails containing confidential information.
  B. Employ exact data matching and prevent inbound emails with Data Loss Prevention.
  C. Employ hashing on all outbound emails containing confidential information.
  D. Employ exact data matching and encrypt inbound e-mails with Data Loss Prevention.
  A. Employ encryption on all outbound emails containing confidential information.

  ---

  Encryption is used to ensure the confidentiality of information and in this case the outbound email that contains the confidential information should be encrypted.

• Question 1388:

  Which of the following allows an application to securely authenticate a user by receiving credentials from a web domain?

  A. TACACS+
  B. RADIUS
  C. Kerberos
  D. SAML
  D. SAML

• Question 1389:

  A security administrator is trying to encrypt communication. For which of the following reasons should administrator take advantage of the Subject Alternative Name (SAM) attribute of a certificate?

  A. It can protect multiple domains
  B. It provides extended site validation
  C. It does not require a trusted certificate authority
  D. It protects unlimited subdomains
  B. It provides extended site validation

• Question 1390:

  The Chief Information Officer (CIO) wants to implement a redundant server location to which the production server images can be moved within 48 hours and services can be quickly restored, in case of a catastrophic failure of the primary datacenter's HVAC. Which of the following can be implemented?

  A. Cold site
  B. Load balancing
  C. Warm site
  D. Hot site
  C. Warm site

  ---

  Warm sites provide computer systems and compatible media capabilities. If a warm site is used, administrators and other staff will need to install and configure systems to resume operations. For most organizations, a warm site could be a remote office, a leased facility, or another organization with which yours has a reciprocal agreement.