CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1491:

  A new MPLS network link has been established between a company and its business partner.

  The link provides logical isolation in order to prevent access from other business partners. Which of the following should be applied in order to achieve confidentiality and integrity of all data across the link?

  A. MPLS should be run in IPVPN mode.
  B. SSL/TLS for all application flows.
  C. IPSec VPN tunnels on top of the MPLS link.
  D. HTTPS and SSH for all application flows.
  C. IPSec VPN tunnels on top of the MPLS link.

  ---

  IPSec can very well be used with MPLS. IPSec could provide VPN tunnels on top if the MPLS link.

  Internet Protocol Security (IPSec) isn't a tunneling protocol, but it's used in conjunction with tunneling protocols. IPSec is oriented primarily toward LAN-to-LAN connections, but it can also be used with dial-up connections. IPSec provides

  secure authentication and encryption of data and headers; this makes it a good choice for security.

• Question 1492:

  A security engineer would like to analyze the effect of deploying a system without patching it to discover potential vulnerabilities. Which of the following practices would best allow for this testing while keeping the corporate network safe?

  A. Perform grey box testing of the system to verify the vulnerabilities on the system
  B. Utilize virtual machine snapshots to restore from compromises
  C. Deploy the system in a sandbox environment on the virtual machine
  D. Create network ACLs that restrict all incoming connections to the system
  C. Deploy the system in a sandbox environment on the virtual machine

• Question 1493:

  Ann, an employee, is cleaning out her desk and disposes of paperwork containing confidential customer information in a recycle bin without shredding it first. This is MOST likely to increase the risk of loss from which of the following attacks?

  A. Shoulder surfing
  B. Dumpster diving
  C. Tailgating
  D. Spoofing
  B. Dumpster diving

  ---

  Dumpster diving is looking for treasure in someone else's trash. (A dumpster is a large trash container.) In the world of information technology, dumpster diving is a technique used to retrieve information that could be used to carry out an attack on a computer network. Dumpster diving isn't limited to searching through the trash for obvious treasures like access codes or passwords written down on sticky notes. Seemingly innocent information like a phone list, calendar, or organizational chart can be used to assist an attacker using social engineering techniques to gain access to the network. To prevent dumpster divers from learning anything valuable from your trash, experts recommend that your company establish a disposal policy where all paper, including print-outs, is shredded in a cross-cut shredder before being recycled, all storage media is erased, and all staff is educated about the danger of untracked trash.

• Question 1494:

  A company requires that all users enroll in the corporate PKI structure and digitally sign all emails. Which of the following are primary reasons to sign emails with digital certificates? (Select TWO)

  A. To establish non-repudiation
  B. To ensure integrity
  C. To prevent SPAM
  D. To establish data loss prevention
  E. To protect confidentiality
  F. To establish transport encryption
  B. To ensure integrity
  E. To protect confidentiality

• Question 1495:

  RC4 is a strong encryption protocol that is generally used with which of the following?

  A. WPA2 CCMP
  B. PEAP
  C. WEP
  D. EAP-TLS
  C. WEP

  ---

  Rivest Cipher 4 (RC4) is a 128-bit stream cipher used WEP and WPA encryption.

• Question 1496:

  A security analyst has been investigating an incident involving the corporate website. Upon investigation, it has been determined that users visiting the corporate website would be automatically redirected to a, malicious site. Further investigation on the corporate website has revealed that the home page on the corporate website has been altered to include an unauthorized item. Which of the following would explain why users are being redirected to the malicious site?

  A. DNS poisoning
  B. XSS
  C. Iframe
  D. Session hijacking
  B. XSS

• Question 1497:

  The main corporate website has a service level agreement that requires availability 100% of the time, even in the case of a disaster. Which of the following would be required to meet this demand?

  A. Warm site implementation for the datacenter
  B. Geographically disparate site redundant datacenter
  C. Localized clustering of the datacenter
  D. Cold site implementation for the datacenter
  B. Geographically disparate site redundant datacenter

  ---

  Data backups, redundant systems, and disaster recovery plans all support availability. AN in this case a geographically disparate site redundant datacenter represents 100% availability regardless of whether a disaster event occurs.

• Question 1498:

  The security administrator is currently unaware of an incident that occurred a week ago. Which of the following will ensure the administrator is notified in a timely manner in the future?

  A. User permissions reviews
  B. Incident response team
  C. Change management
  D. Routine auditing
  D. Routine auditing

  ---

  Routine audits are carried out after you have implemented security controls based on risk. These audits include aspects such as user rights and permissions and specific events.

• Question 1499:

  Joe notices there are several user accounts on the local network generating spam with embedded malicious code. Which of the following technical control should Joe put in place to BEST reduce these incidents?

  A. Account lockout
  B. Group Based Privileges
  C. Least privilege
  D. Password complexity
  A. Account lockout

• Question 1500:

  Which of the following would Pete, a security administrator, MOST likely implement in order to allow employees to have secure remote access to certain internal network services such as file servers?

  A. Packet filtering firewall
  B. VPN gateway
  C. Switch
  D. Router
  B. VPN gateway

  ---

  VPNs are usually employed to allow remote access users to connect to and access the network, and offer connectivity between two or more private networks or LANs. A VPN gateway (VPN router) is a connection point that connects two LANs via a nonsecure network such as the Internet.