CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1391:

  An information bank has been established to store contacts, phone numbers and other records. A UNIX application needs to connect to the index server using port 389. Which of the following authentication services should be used on this port by default?

  A. RADIUS
  B. Kerberos
  C. TACACS+
  D. LDAP
  D. LDAP

  ---

  LDAP makes use of port 389.

• Question 1392:

  A security administrator must implement a network that is immune to ARP spoofing attacks. Which of the following should be implemented to ensure that a malicious insider will not be able to successfully use ARP spoofing techniques?

  A. UDP
  B. IPv6
  C. IPSec
  D. VPN
  B. IPv6

  ---

  Explanation: ARP is not used in IPv6 networks.

  The Address Resolution Protocol (ARP) is a telecommunication protocol used for resolution of network layer addresses into link layer addresses, a critical function in multiple-access networks. ARP is used for converting a network address

  (e.g. an IPv4 address) to a physical address like an Ethernet address (also named a MAC address). In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP is provided by the Neighbor Discovery Protocol (NDP).

• Question 1393:

  Joe a web developer wants to make sure his application is not susceptible to cross-site request forgery attacks. Which of the following is one way to prevent this type of attack?

  A. The application should always check the HTTP referrer header
  B. The application should always check the HTTP Request header
  C. The application should always check the HTTP Host header
  D. The application should always use SSL encryption
  D. The application should always use SSL encryption

• Question 1394:

  A large bank has moved back office operations offshore to another country with lower wage costs in an attempt to improve profit and productivity. Which of the following would be a customer concern if the offshore staff had direct access to their data?

  A. Service level agreements
  B. Interoperability agreements
  C. Privacy considerations
  D. Data ownership
  C. Privacy considerations

  ---

  Businesses such as banks have legally mandated privacy requirements and with moving operations offshore there is decentralized control with has implications for privacy of data.

• Question 1395:

  Joe has been in the same IT position for the last 27 years and has developed a lot of the homegrown applications that the company utilizes. The company is concerned that Joe is the only who can administer these applications. The company should enforce which of the following best security practices to avoid Joe being a single point of failure?

  A. Separation of Duties
  B. Least privilege
  C. Job rotation
  D. Mandatory vacations
  C. Job rotation

• Question 1396:

  An administrator is testing the collision resistance of different hashing algorithms. Which of the following is the strongest collision resistance test?

  A. Find two identical messages with different hashes
  B. Find two identical messages with the same hash
  C. Find a common has between two specific messages
  D. Find a common hash between a specific message and a random message
  A. Find two identical messages with different hashes

• Question 1397:

  Ann a security analyst is monitoring the IDS console and noticed multiple connections from an internal host to a suspicious call back domain \. Which of the following tools would aid her to decipher the network traffic?

  A. Vulnerability Scanner
  B. NMAP
  C. NETSTAT
  D. Packet Analyzer
  C. NETSTAT

• Question 1398:

  Layer 7 devices used to prevent specific types of html tags are called:

  A. Firewalls
  B. Content filters
  C. Routers
  D. NIDS
  B. Content filters

  ---

  A content filter is a is a type of software designed to restrict or control the content a reader is authorised to access, particularly when used to limit material delivered over the Internet via the Web, e-mail, or other means. Because the user and the OSI layer interact directly with the content filter, it operates at Layer 7 of the OSI model.

• Question 1399:

  Which of the following techniques can be used to prevent the disclosure of system information resulting from arbitrary inputs when implemented properly?

  A. Fuzzing
  B. Patch management
  C. Error handling
  D. Strong passwords
  C. Error handling

  ---

  Exception handling is an aspect of secure coding. When errors occur, the system should revert back to a secure state. This must be coded into the system by the programmer, and should capture errors and exceptions so that they could be handled by the application.

• Question 1400:

  When creating a public / private key pair, for which of the following ciphers would a user need to specify the key strength?

  A. SHA
  B. AES
  C. DES
  D. RSA
  D. RSA

  ---

  RSA (an asymmetric algorithm) uses keys of a minimum length of 2048 bits.