CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1421:

  The Chief Information Security Officer (CISO) is concerned that users could bring their personal laptops to work and plug them directly into the network port under their desk. Which of the following should be configured on the network switch to prevent this from happening?

  A. Access control lists
  B. Loop protection
  C. Firewall rule
  D. Port security
  D. Port security

• Question 1422:

  Which of the following controls would prevent an employee from emailing unencrypted information to their personal email account over the corporate network?

  A. DLP
  B. CRL
  C. TPM
  D. HSM
  A. DLP

  ---

  Data loss prevention (DLP) systems monitor the contents of systems (workstations, servers, and networks) to make sure that key content is not deleted or removed. They also monitor who is using the data (looking for unauthorized access) and transmitting the data.

• Question 1423:

  Ann a security administrator wants a limit access to the wireless network. Which of the following can be used to do this without using certificates?

  A. Employ EPA-TLS
  B. Employ PEAP on all laptops
  C. Enable MAC filtering
  D. Disable SSID broadcasting
  C. Enable MAC filtering

• Question 1424:

  Which of the following provides the LEAST availability?

  A. RAID 0
  B. RAID 1
  C. RAID 3
  D. RAID 5
  A. RAID 0

  ---

  RAID, or redundant array of independent disks (RAID). RAID allows your existing servers to have more than one hard drive so that if the main hard drive fails, the system keeps functioning. RAID 0 is disk striping. It uses multiple drives and maps them together as a single physical drive. This is done primarily for performance, not for fault tolerance. If any drive in a RAID 0 array fails, the entire logical drive becomes unusable.

• Question 1425:

  Establishing a method to erase or clear cluster tips is an example of securing which of the following?

  A. Data in transit
  B. Data at rest
  C. Data in use
  D. Data in motion
  B. Data at rest

  ---

  A computer hard disk is divided into small segments called clusters. A file stored on a hard disk usually spans several clusters but rarely fills the last cluster, which is called cluster tip. This cluster tip area may contain file data because the size of the file you are working with may grow or shrink and needs to be securely deleted. Data stored on the hard drive is called data at rest.

• Question 1426:

  For high availability which of the following would be MOST appropriate for fault tolerance?

  A. RAID 0
  B. Clustering
  C. JBOD
  D. Load Balancing
  D. Load Balancing

• Question 1427:

  A global gaming console manufacturer is launching a new gaming platform to its customers. Which of the following controls reduces the risk created by malicious gaming customers attempting to circumvent control by way of modifying consoles?

  A. Firmware version control
  B. Manual software upgrades
  C. Vulnerability scanning
  D. Automatic updates
  E. Network segmentation
  F. Application firewalls
  A. Firmware version control
  D. Automatic updates

• Question 1428:

  Joe, the system administrator, is performing an overnight system refresh of hundreds of user computers. The refresh has a strict timeframe and must have zero downtime during business hours. Which of the following should Joe take into consideration?

  A. A disk-based image of every computer as they are being replaced.
  B. A plan that skips every other replaced computer to limit the area of affected users.
  C. An offsite contingency server farm that can act as a warm site should any issues appear.
  D. A back-out strategy planned out anticipating any unforeseen problems that may arise.
  D. A back-out strategy planned out anticipating any unforeseen problems that may arise.

  ---

  A backout is a reversion from a change that had negative consequences. It could be, for example, that everything was working fine until you installed a service pack on a production machine, and then services that were normally available

  were no longer accessible. The backout, in this instance, would revert the system to the state that it was in before the service pack was applied.

  Backout plans can include uninstalling service packs, hotfixes, and patches, but they can also include reversing a migration and using previous firmware. A key component to creating such a plan is identifying what events will trigger your

  implementing the backout.

• Question 1429:

  Which of the following ports would be blocked if Pete, a security administrator, wants to deny access to websites?

  A. 21
  B. 25
  C. 80
  D. 3389
  C. 80

  ---

  Port 80 is used by HTTP, which is the foundation of data communication for the World Wide Web.

• Question 1430:

  An administrator wants to establish a WiFi network using a high gain directional antenna with a narrow radiation pattern to connect two buildings separated by a very long distance. Which of the following antennas would be BEST for this situation?

  A. Dipole
  B. Yagi
  C. Sector
  D. Omni
  B. Yagi

  ---

  A Yagi-Uda antenna, commonly known simply as a Yagi antenna, is a directional antenna consisting of multiple parallel dipole elements in a line, usually made of metal rods. It consists of a single driven element connected to the transmitter or receiver with a transmission line, and additional parasitic elements: a so-called reflector and one or more directors. The reflector element is slightly longer than the driven dipole, whereas the directors are a little shorter. This design achieves a very substantial increase in the antenna's directionality and gain compared to a simple dipole.