CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1501:

  For each of the given items, select the appropriate authentication category from the dropdown choices. Instructions: When you have completed the simulation, please select the Done button to submit.

  Hot Area:

  

  

  ---

  Something you are includes fingerprints, retina scans, or voice recognition.

  Something you have includes smart cards, token devices, or keys.

  Something you know includes a passwords, codes, PINs, combinations, or secret phrases.

  Somewhere you are includes a physical location s or logical addresses, such as domain name, an IP address, or a MAC address.

  Something you do includes your typing rhythm, a secret handshake, or a private knock.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, p. 285

• Question 1502:

  A network technician has received comments from several users that cannot reach a particular website. Which of the following commands would provide the BEST information about the path taken across the network to this website?

  A. Ping
  B. Netstat
  C. telnet
  D. tracert
  D. tracert

• Question 1503:

  A software development company has hired a programmer to develop a plug-in module to an existing proprietary application. After completing the module, the developer needs to test the entire application to ensure that the module did not introduce new vulnerabilities. Which of the following is the developer performing when testing the application?

  A. Black box testing
  B. White box testing
  C. Gray box testing
  D. Design review
  C. Gray box testing

  ---

  In this question, we know the tester has some knowledge of the application because the tester developed a plug-in module for it. However, the tester does not have detailed information about the entire application. Therefore, this is a grey-box test. Gray box testing, also called gray box analysis, is a strategy for software debugging in which the tester has limited knowledge of the internal details of the program. A gray box is a device, program or system whose workings are partially understood. Gray box testing can be contrasted with black box testing, a scenario in which the tester has no knowledge or access to the internal workings of a program, or white box testing, a scenario in which the internal particulars are fully known. Gray box testing is commonly used in penetration tests. Gray box testing is considered to be non-intrusive and unbiased because it does not require that the tester have access to the source code. With respect to internal processes, gray box testing treats a program as a black box that must be analyzed from the outside. During a gray box test, the person may know how the system components interact but not have detailed knowledge about internal program functions and operation. A clear distinction exists between the developer and the tester, thereby minimizing the risk of personnel conflicts.

• Question 1504:

  Which of the following services are used to support authentication services for several local devices from a central location without the use of tokens?

  A. TACACS+
  B. Smartcards
  C. Biometrics
  D. Kerberos
  A. TACACS+

  ---

  ACACS allows a client to accept a username and password and send a query to a TACACS authentication server. It would determine whether to accept or deny the authentication request and send a response back. The TIP would then allow access or not based upon the response, not tokens.

• Question 1505:

  An attacker has gained access to the company's web server by using the administrator's credentials. The attacker then begins to work on compromising the sensitive data on other servers. Which off the following BEST describes this type of attack?

  A. Privilege escalation
  B. Client-side attack
  C. Man-in-the-middle
  D. Transitive access
  B. Client-side attack

• Question 1506:

  In order to securely communicate using PGP, the sender of an email must do which of the following when sending an email to a recipient for the first time?

  A. Import the recipient's public key
  B. Import the recipient's private key
  C. Export the sender's private key
  D. Export the sender's public key
  A. Import the recipient's public key

  ---

  See step 4 below.

  1.

  When a user encrypts plaintext with PGP, PGP first compresses the plaintext.

  2.

  PGP then creates a session key, which is a one-time-only secret key.

  3.

  This session key works with a very secure, fast conventional encryption algorithm to encrypt the plaintext; the result is ciphertext.

  4.

  Once the data is encrypted, the session key is then encrypted to the recipient's public key. This public key-encrypted session key is transmitted along with the ciphertext to the recipient.

• Question 1507:

  A remote user (User1) is unable to reach a newly provisioned corporate windows workstation. The system administrator has been given the following log files from the VPN, corporate firewall and workstation host.

  

  Which of the following is preventing the remote user from being able to access the workstation?

  A. Network latency is causing remote desktop service request to time out
  B. User1 has been locked out due to too many failed passwords
  C. Lack of network time synchronization is causing authentication mismatches
  D. The workstation has been compromised and is accessing known malware sites
  E. The workstation host firewall is not allowing remote desktop connections
  B. User1 has been locked out due to too many failed passwords

• Question 1508:

  Which of the following can be used for both encryption and digital signatures?

  A. 3DES
  B. AES
  C. RSA
  D. MD5
  A. 3DES

• Question 1509:

  Given the following list of corporate access points, which of the following attacks is MOST likely underway if the company wireless network uses the same wireless hardware throughout?

  MACSID

  00:01:AB:FA:CD:34Corporate AP

  00:01:AB:FA:CD:35Corporate AP

  00:01:AB:FA:CD:36Corporate AP

  00:01:AB:FA:CD:37Corporate AP

  00:01:AB:FA:CD:34Corporate AP

  A. Packet sniffing
  B. Evil Twin
  C. WPS attack
  D. Rogue access point
  B. Evil Twin

• Question 1510:

  Which of the following techniques enables a highly secured organization to assess security weaknesses in real time?

  A. Access control lists
  B. Continuous monitoring
  C. Video surveillance
  D. Baseline reporting
  B. Continuous monitoring

  ---

  Continuous monitoring point toward the never-ending review of what resources a user actually accesses, which is critical for preventing insider threats. Because the process is never-ending, assessments happen in real time.