CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1451:

  Pete needs to open ports on the firewall to allow for secure transmission of files. Which of the following ports should be opened on the firewall?

  A. TCP 23
  B. UDP 69
  C. TCP 22
  D. TCP 21
  C. TCP 22

  ---

  SSH uses TCP port 22. All protocols encrypted by SSH, including SFTP, SHTTP, SCP, SExec, and slogin, also use TCP port 22. Secure Copy Protocol (SCP) is a secure file- transfer facility based on SSH and Remote Copy Protocol (RCP). Secure FTP (SFTP) is a secured alternative to standard File Transfer Protocol (FTP).

• Question 1452:

  A company must send sensitive data over a non-secure network via web services. The company suspects that competitors are actively trying to intercept all transmissions. Some of the information may be valuable to competitors, even years after it has been sent. Which of the following will help mitigate the risk in the scenario?

  A. Digitally sign the data before transmission
  B. Choose steam ciphers over block ciphers
  C. Use algorithms that allow for PFS
  D. Enable TLS instead of SSL
  E. Use a third party for key escrow
  A. Digitally sign the data before transmission

• Question 1453:

  Which of the following technologies when applied to android and iOS environments, can an organization use to add security restrictions and encryption to existing mobile applications? (Select Two)

  A. Mobile device management
  B. Containerization
  C. Application whitelisting
  D. Application wrapping
  E. Mobile application store
  A. Mobile device management
  C. Application whitelisting

• Question 1454:

  A system administrator has noticed that users change their password many times to cycle back to the original password when their passwords expire. Which of the following would BEST prevent this behavior?

  A. Assign users passwords based upon job role.
  B. Enforce a minimum password age policy.
  C. Prevent users from choosing their own passwords.
  D. Increase the password expiration time frame.
  B. Enforce a minimum password age policy.

  ---

  A minimum password age policy defines the period that a password must be used for before it can be changed.

• Question 1455:

  Which of the following BEST explains the use of an HSM within the company servers?

  A. Thumb drives present a significant threat which is mitigated by HSM.
  B. Software encryption can perform multiple functions required by HSM.
  C. Data loss by removable media can be prevented with DLP.
  D. Hardware encryption is faster than software encryption.
  D. Hardware encryption is faster than software encryption.

  ---

  Hardware Security Module (HSM) is a cryptoprocessor that can be used to enhance security. It provides a fast solution for the for large asymmetrical encryption calculations and is much faster than software-based cryptographic solutions.

• Question 1456:

  Public keys are used for which of the following?

  A. Decrypting wireless messages
  B. Decrypting the hash of an electronic signature
  C. Bulk encryption of IP based email traffic
  D. Encrypting web browser traffic
  B. Decrypting the hash of an electronic signature

  ---

  The sender uses the private key to create a digital signature. The message is, in effect, signed with the private key. The sender then sends the message to the receiver. The receiver uses the public key attached to the message to validate the digital signature. If the values match, the receiver knows the message is authentic.

• Question 1457:

  Which of the following techniques describes the use of application isolation during execution to prevent system compromise if the application is compromised?

  A. Least privilege
  B. Sandboxing
  C. Black box
  D. Application hardening
  B. Sandboxing

  ---

  Sandboxing is the process of isolating a system before installing new applications on it so as to restrict any potential malware that may be embedded in the new application from being able to cause harm to production systems.

• Question 1458:

  Pete, the system administrator, has blocked users from accessing social media web sites. In addition to protecting company information from being accidentally leaked, which additional security benefit does this provide?

  A. No competition with the company's official social presence
  B. Protection against malware introduced by banner ads
  C. Increased user productivity based upon fewer distractions
  D. Elimination of risks caused by unauthorized P2P file sharing
  B. Protection against malware introduced by banner ads

  ---

  Banner, or header information messages sent with data to find out about the system(s) does happen. Banners often identify the host, the operating system running on it, and other information that can be useful if you are going to attempt to later breach the security of it.

• Question 1459:

  The Quality Assurance team is testing a new third party developed application. The Quality team does not have any experience with the application. Which of the following is the team performing?

  A. Grey box testing
  B. Black box testing
  C. Penetration testing
  D. White box testing
  B. Black box testing

  ---

  Black-box testing is a method of software testing that examines the functionality of an application without peering into its internal structures or workings. This method of test can be applied to virtually every level of software testing: unit, integration, system and acceptance. It typically comprises most if not all higher level testing, but can also dominate unit testing as well.

  Specific knowledge of the application's code/internal structure and programming knowledge in general is not required. The tester is aware of what the software is supposed to do but is not aware of how it does it. For instance, the tester is aware that a particular input returns a certain, invariable output but is not aware of how the software produces the output in the first place.

• Question 1460:

  One month after a software developer was terminated the helpdesk started receiving calls that several employees' computers were being infected with malware. Upon further research, it was determined that these employees had downloaded a shopping toolbar. It was this toolbar that downloaded and installed the errant code. Which of the following attacks has taken place?

  A. Logic bomb
  B. Cross-site scripting
  C. SQL injection
  D. Malicious add-on
  A. Logic bomb