CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1401:

  After connecting to the corporate network a user types the URL if a popular social media website in the browser but reports being redirected to a login page with the corporate logo. Which of the following is this an example of?

  A. LEAP
  B. MAC filtering
  C. WPA2-Enterprise
  D. Captive portal
  D. Captive portal

• Question 1402:

  Ann, a security administrator at a call center, has been experiencing problems with users intentionally installing unapproved and occasionally malicious software on their computers. Due to the nature of their jobs, Ann cannot change their permissions. Which of the following would BEST alleviate her concerns?

  A. Deploy a HIDS suite on the users' computers to prevent application installation.
  B. Maintain the baseline posture at the highest OS patch level.
  C. Enable the pop-up blockers on the users' browsers to prevent malware.
  D. Create an approved application list and block anything not on it.
  D. Create an approved application list and block anything not on it.

  ---

  You can use Software Restriction Policy or its successor AppLocker to prevent unauthorized applications from running or being installed on computers. Software Restriction Policies (SRP) is Group Policy-based feature that identifies software

  programs running on computers in a domain, and controls the ability of those programs to run. Software restriction policies are part of the Microsoft security and management strategy to assist enterprises in increasing the reliability, integrity,

  and manageability of their computers.

  You can use AppLocker as part of your overall security strategy for the following scenarios:

  Help prevent malicious software (malware) and unsupported applications from affecting computers in your environment.

  Prevent users from installing and using unauthorized applications. Implement application control policy to satisfy portions of your security policy or compliance requirements in your organization.

• Question 1403:

  A security analyst implemented group-based privileges within the company active directory. Which of the following account management techniques should be undertaken regularly to ensure least privilege principles?

  A. Leverage role-based access controls.
  B. Perform user group clean-up.
  C. Verify smart card access controls.
  D. Verify SHA-256 for password hashes.
  B. Perform user group clean-up.

  ---

  Explanation: Active Directory (AD) has no built-in clean-up feature. This can result in obsolete user, group and computer objects accumulating over time and placing security and compliance objectives in jeopardy. You would therefore need to regularly clean-up these settings.

• Question 1404:

  Joe uses his badge to enter the server room, Ann follows Joe entering without using her badge. It is later discovered that Ann used a USB drive to remove confidential data from a server. Which of the following principles is potentially being violated? (Select TWO)

  A. Clean desk policy
  B. Least privilege
  C. Tailgating
  D. Zero-day exploits
  E. Data handling
  C. Tailgating
  E. Data handling

• Question 1405:

  A security technician received notification of a remotely exploitable vulnerability affecting all multifunction printers firmware installed throughout the organization. The vulnerability allows a malicious user to review all the documents processed by the affected printers. Which of the following compensating controls can the security technician to mitigate the security risk of a sensitive document leak?

  A. Create a separate printer network
  B. Perform penetration testing to rule out false positives
  C. Install patches on the print server
  D. Run a full vulnerability scan of all the printers
  C. Install patches on the print server

• Question 1406:

  Digital signatures are used for ensuring which of the following items? (Select TWO).

  A. Confidentiality
  B. Integrity
  C. Non-Repudiation
  D. Availability
  E. Algorithm strength
  B. Integrity
  C. Non-Repudiation

  ---

  A digital signature is similar in function to a standard signature on a document. It validates the integrity of the message and the sender. The message is encrypted using the encryption system, and a second piece of information, the digital

  signature, is added to the message.

  Nonrepudiation prevents one party from denying actions that they carried out and in the electronic world nonrepudiation measures can be a two-key cryptographic system and the involvement of a third party to verify the validity. This respected

  third party `vouches' for the individuals in the two-key system. Thus non-repudiation also impacts on integrity.

• Question 1407:

  The BEST methods for a web developer to prevent the website application code from being vulnerable to cross-site request forgery (XSRF) are to: (Select TWO).

  A. Permit redirection to Internet-facing web URLs.
  B. Ensure all HTML tags are enclosed in angle brackets, e.g., "".
  C. Validate and filter input on the server side and client side.
  D. Use a web proxy to pass website requests between the user and the application.
  E. Restrict and sanitize use of special characters in input and URLs.
  C. Validate and filter input on the server side and client side.
  E. Restrict and sanitize use of special characters in input and URLs.

  ---

  XSRF or cross-site request forgery applies to web applications and is an attack that exploits the web application's trust of a user who known or is supposed to have been authenticated. This is often accomplished without the user's knowledge. XSRF can be prevented by adding a randomization string (called a nonce) to each URL request and session establishment and checking the client HTTP request header referrer for spoofing.

• Question 1408:

  An organization is working with a cloud services provider to transition critical business applications to a hybrid cloud environment. The organization retains sensitive customer data and wants to ensure the provider has sufficient administrative and logical controls in place to protect its data. In which of the following documents would this concern MOST likely be addressed?

  A. Service level agreement
  B. Interconnection security agreement
  C. Non-disclosure agreement
  D. Business process analysis
  A. Service level agreement

• Question 1409:

  A security analyst, while doing a security scan using packet c capture security tools, noticed large volumes of data images of company products being exfiltrated to foreign IP addresses. Which of the following is the FIRST step in responding to scan results?

  A. Incident identification
  B. Implement mitigation
  C. Chain of custody
  D. Capture system image
  B. Implement mitigation

• Question 1410:

  A software company has completed a security assessment. The assessment states that the company should implement fencing and lighting around the property. Additionally, the assessment states that production releases of their software should be digitally signed. Given the recommendations, the company was deficient in which of the following core security areas? (Select TWO).

  A. Fault tolerance
  B. Encryption
  C. Availability
  D. Integrity
  E. Safety
  F. Confidentiality
  D. Integrity
  E. Safety

  ---

  Aspects such as fencing, proper lighting, locks, CCTV, Escape plans Drills, escape routes and testing controls form part of safety controls. Integrity refers to aspects such as hashing, digital signatures, certificates and non- repudiation ?all of which has to do with data integrity.