CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1481:

  Which of the following authentication services combines authentication and authorization in a use profile and use UDP?

  A. LDAP
  B. Kerberos
  C. TACACS+
  D. RADIUS
  D. RADIUS

• Question 1482:

  Which of the following would allow users from outside of an organization to have access to internal resources?

  A. NAC
  B. VLANS
  C. VPN
  D. NAT
  C. VPN

• Question 1483:

  Joe a website administrator believes he owns the intellectual property for a company invention and has been replacing image files on the company's public facing website in the DMZ. Joe is using steganography to hide stolen data. Which of the following controls can be implemented to mitigate this type of inside threat?

  A. Digital signatures
  B. File integrity monitoring
  C. Access controls
  D. Change management
  E. Stateful inspection firewall
  B. File integrity monitoring

• Question 1484:

  A CA is compromised and attacks start distributing maliciously signed software updates. Which of the following can be used to warn users about the malicious activity?

  A. Key escrow
  B. Private key verification
  C. Public key verification
  D. Certificate revocation list
  D. Certificate revocation list

  ---

  If we put the root certificate of the comprised CA in the CRL, users will know that this CA (and the certificates that it has issued) no longer can be trusted. The CRL (Certificate revocation list) is exactly what its name implies: a list of subscribers paired with digital certificate status. The list enumerates revoked certificates along with the reason(s) for revocation. The dates of certificate issue, and the entities that issued them, are also included. In addition, each list contains a proposed date for the next release.

• Question 1485:

  Which of the following best describes the reason for using hot and cold aisles?

  A. To ensure air exhaust from one aisle doesn't blow into the air intake of the next aisle
  B. To ensure the dewpoint stays low enough that water doesn't condensate on equipment
  C. To decrease amount of power wiring that is run to each aisle
  D. Too maintain proper humidity in the datacenter across all aisles
  A. To ensure air exhaust from one aisle doesn't blow into the air intake of the next aisle

• Question 1486:

  A Security team wants to establish an Incident Response plan. The team has never experienced an incident. Which of the following would BEST help them establish plans and procedures?

  A. Table top exercises
  B. Lessons learned
  C. Escalation procedures D. Recovery procedures
  D

• Question 1487:

  Data confidentiality must be enforces on a secure database. Which of the following controls meets this goal? (Select TWO)

  A. MAC
  B. Lock and key
  C. Encryption
  D. Non-repudiation
  E. Hashing
  C. Encryption
  E. Hashing

• Question 1488:

  Which of the following is the BEST approach to perform risk mitigation of user access control rights?

  A. Conduct surveys and rank the results.
  B. Perform routine user permission reviews.
  C. Implement periodic vulnerability scanning.
  D. Disable user accounts that have not been used within the last two weeks.
  B. Perform routine user permission reviews.

  ---

  Risk mitigation is accomplished any time you take steps to reduce risk. This category includes installing antivirus software, educating users about possible threats, monitoring network traffic, adding a firewall, and so on. User permissions may be the most basic aspect of security and is best coupled with a principle of least privilege. And related to permissions is the concept of the access control list (ACL). An ACL is literally a list of who can access what resource and at what level. Thus the best risk mitigation steps insofar as access control rights are concerned, is the regular/routine review of user permissions.

• Question 1489:

  Joe analyzed the following log and determined the security team should implement which of the following as a mitigation method against further attempts?

  Host 192.168.1.123

  [00:

  00: 01]Successful Login: 015 192.168.1.123 : local

  [00:

  00: 03]Unsuccessful Login: 022 214.34.56.006 : RDP 192.168.1.124

  [00:

  00: 04]UnSuccessful Login: 010 214.34.56.006 : RDP 192.168.1.124 [00: 00: 07]UnSuccessful Login: 007 214.34.56.006 : RDP 192.168.1.124

  [00:

  00: 08]UnSuccessful Login: 003 214.34.56.006 : RDP 192.168.1.124

  A. Reporting
  B. IDS
  C. Monitor system logs
  D. Hardening
  D. Hardening

  ---

  We can see a number of unsuccessful login attempts using a Remote Desktop Connection (using the RDP protocol) from a computer with the IP address 192.168.1.124. Someone successfully logged in locally. This is probably an authorized

  login (for example, Joe logging in).

  Hardening is the process of securing a system. We can harden (secure) the system by either disallowing remote desktop connections altogether or by restricting which IPs are allowed to initiate remote desktop connections.

• Question 1490:

  Joe, a security administrator, is concerned with users tailgating into the restricted areas. Given a limited budget, which of the following would BEST assist Joe with detecting this activity?

  A. Place a full-time guard at the entrance to confirm user identity.
  B. Install a camera and DVR at the entrance to monitor access.
  C. Revoke all proximity badge access to make users justify access.
  D. Install a motion detector near the entrance.
  B. Install a camera and DVR at the entrance to monitor access.

  ---

  Tailgating is a favorite method of gaining entry to electronically locked systems by following someone through the door they just unlocked. With a limited budget installing a camera and DVR at the entrance to monitor access to the restricted areas is the most feasible solution. The benefit of a camera (also known as closed-circuit television, or CCTV) is that it is always running and can record everything it sees, creating evidence that can be admissible in court if necessary.