CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 141:

  Which of the following authentication services uses a default TCP of 389?

  A. SAML
  B. TACACS+
  C. Kerberos
  D. LDAP
  D. LDAP

• Question 142:

  While rarely enforced, mandatory vacation policies are effective at uncovering:

  A. Help desk technicians with oversight by multiple supervisors and detailed quality control systems.
  B. Collusion between two employees who perform the same business function.
  C. Acts of incompetence by a systems engineer designing complex architectures as a member of a team.
  D. Acts of gross negligence on the part of system administrators with unfettered access to system and no oversight.
  D. Acts of gross negligence on the part of system administrators with unfettered access to system and no oversight.

  ---

  Least privilege (privilege reviews) and job rotation is done when mandatory vacations are implemented. Then it will uncover areas where the system administrators neglected to check all users' privileges since the other users must fill in their positions when they are on their mandatory vacation.

• Question 143:

  It is important to staff who use email messaging to provide PII to others on a regular basis to have confidence that their messages are not intercepted or altered during transmission. They are concerned about which of the following types of security control?

  A. Integrity
  B. Safety
  C. Availability
  D. Confidentiality
  A. Integrity

  ---

  Integrity means that the messages/ data is not altered. PII is personally identifiable information that can be used to uniquely identify an individual. PII can be used to ensure the integrity of data/messages.

• Question 144:

  Which of the following technical controls is BEST used to define which applications a user can install and run on a company issued mobile device?

  A. Authentication
  B. Blacklisting
  C. Whitelisting
  D. Acceptable use policy
  C. Whitelisting

  ---

  White lists are closely related to ACLs and essentially, a white list is a list of items that are allowed.

• Question 145:

  An administrator requests a new VLAN be created to support the installation of a new SAN. Which of the following data transport?

  A. Fibre Channel
  B. SAS
  C. Sonet
  D. ISCSI
  A. Fibre Channel

• Question 146:

  After an audit, it was discovered that an account was not disabled in a timely manner after an employee has departed from the organization. Which of the following did the organization fail to properly implement?

  A. Routine account audits
  B. Account management processes
  C. Change management processes
  D. User rights and permission reviews
  A. Routine account audits

• Question 147:

  A cyber security administrator receives a list of IPs that have been reported as attempting to access the network. To identify any possible successful attempts across the enterprise, which of the following should be implemented?

  A. Monitor authentication logs
  B. Disable unnecessary accounts
  C. Time of day restrictions
  D. Separation of duties
  A. Monitor authentication logs

• Question 148:

  A wireless site survey has been performed at a company. One of the results of the report is that the wireless signal extends too far outside the building. Which of the following security issues could occur as a result of this finding?

  A. Excessive wireless access coverage
  B. Interference with nearby access points
  C. Exhaustion of DHCP address pool
  D. Unauthorized wireless access
  D. Unauthorized wireless access

• Question 149:

  Joe, a technician at the local power plant, notices that several turbines had ramp up in cycles during the week. Further investigation by the system engineering team determined that a timed .exe file had been uploaded to the system control console during a visit by international contractors. Which of the following actions should Joe recommend?

  A. Create a VLAN for the SCADA
  B. Enable PKI for the MainFrame
  C. Implement patch management
  D. Implement stronger WPA2 Wireless
  A. Create a VLAN for the SCADA

  ---

  VLANs are used for traffic management. VLANs can be used to isolate traffic between network segments. This can be accomplished by not defining a route between different VLANs or by specifying a deny filter between certain VLANs (or certain members of a VLAN). Any network segment that doesn't need to communicate with another in order to accomplish a work task/function shouldn't be able to do so.

• Question 150:

  The IT department needs to prevent users from installing untested applications. Which of the following would provide the BEST solution?

  A. Job rotation
  B. Least privilege
  C. Account lockout
  D. Antivirus
  B. Least privilege