CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1411:

  A security administrator wants to block unauthorized access to a web server using a locally installed software program. Which of the following should the administrator deploy?

  A. NIDS
  B. HIPS
  C. NIPS
  D. HIDS
  B. HIPS

• Question 1412:

  Ann, a technician, is attempting to establish a remote terminal session to an end user's computer using Kerberos authentication, but she cannot connect to the destination machine. Which of the following default ports should Ann ensure is open?

  A. 22
  B. 139
  C. 443
  D. 3389
  D. 3389

  ---

  Remote Desktop Protocol (RDP) uses TCP port 3389.

• Question 1413:

  A software security concern when dealing with hardware and devices that have embedded software or operating systems is:

  A. Patching may not always be possible
  B. Configuration support may not be available
  C. These is no way to verify if a patch is authorized or not
  D. The vendor may not have a method for installation of patches
  D. The vendor may not have a method for installation of patches

• Question 1414:

  An organization recently switched from a cloud-based email solution to an in-house email server. The firewall needs to be modified to allow for sending and receiving email. Which of the following ports should be open on the firewall to allow for email traffic? (Select THREE).

  A. TCP 22
  B. TCP 23
  C. TCP 25
  D. TCP 53
  E. TCP 110
  F. TCP 143
  G. TCP 445
  C. TCP 25
  E. TCP 110
  F. TCP 143

  ---

  Port 25 is used by Simple Mail Transfer Protocol (SMTP) for routing e-mail between mail servers.

  Port 110 is used for Post Office Protocol v3 (POP3), which is an application-layer Internet standard protocol used by local e-mail clients to retrieve e-mail from a remote server over a TCP/IP connection.

  Port 143 is used by Internet Message Access Protocol (IMAP) for the management of email messages.

• Question 1415:

  A company administrator has a firewall with an outside interface connected to the Internet and an inside interface connected to the corporate network. Which of the following should the administrator configure to redirect traffic destined for the default HTTP port on the outside interface to an internal server listening on port 8080?

  A. Create a dynamic PAT from port 80 on the outside interface to the internal interface on port 8080
  B. Create a dynamic NAT from port 8080 on the outside interface to the server IP address on port 80
  C. Create a static PAT from port 80 on the outside interface to the internal interface on port
  D. Create a static PAT from port 8080 on the outside interface to the server IP address on port 80
  C. Create a static PAT from port 80 on the outside interface to the internal interface on port

  ---

  Static PAT translations allow a specific UDP or TCP port on a global address to be translated to a specific port on a local address. In this case, the default HTTP port (80) is the global address to be translated, and port 8080 is the specific port on a local address.

  Incorrect Options:

  A: Dynamic PAT is not a valid type of PAT.

  B: Dynamic NAT translates a group of real addresses to a pool of mapped addresses that are routable on the destination network. The question also states that the internal server is listening on port 8080.

  D: The question states that the internal server is listening on port 8080.

  Reference:

  http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/nat_sta ticpat.html

• Question 1416:

  Which of the following protocols uses TCP instead of UDP and is incompatible with all previous versions?

  A. TACACS
  B. XTACACS
  C. RADIUS
  D. TACACS+
  D. TACACS+

  ---

  TACACS+ is not compatible with TACACS and XTACACS, and makes use of TCP.

• Question 1417:

  An attacker is attempting to insert malicious code into an installer file that is available on the internet. The attacker is able to gain control of the web server that houses both the installer and the web page which features information about the downloadable file. To implement the attack and delay detection, the attacker should modify both the installer file and the:

  A. SSL certificate on the web server
  B. The HMAC of the downloadable file available on the website
  C. Digital signature on the downloadable file
  D. MD5 hash of the file listed on the website
  D. MD5 hash of the file listed on the website

• Question 1418:

  A technician reports a suspicious individual is seen walking around the corporate campus. The individual is holding a smartphone and pointing a small antenna, in order to collect SSIDs. Which of the following attacks is occurring?

  A. Rogue AP
  B. Evil Twin
  C. Man-in-the-middle
  D. War driving
  D. War driving

• Question 1419:

  Which of the following access methods uses radio frequency waves for authentication?

  A. Video surveillance
  B. Mantraps
  C. Proximity readers D. Biometrics
  C. Proximity readers D. Biometrics

• Question 1420:

  Pete's corporation has outsourced help desk services to a large provider. Management has published a procedure that requires all users, when receiving support, to call a special number.

  Users then need to enter the code provided to them by the help desk technician prior to allowing the technician to work on their PC. Which of the following does this procedure prevent?

  A. Collusion
  B. Impersonation
  C. Pharming
  D. Transitive Access
  B. Impersonation

  ---

  Impersonation is where a person, computer, software application or service pretends to be someone or something it's not. Impersonation is commonly non-maliciously used in client/server applications. However, it can also be used as a security threat.

  The procedure the users have to go through is to ensure that the technician who will have access to the computer is a genuine technician and not someone impersonating a technician.