CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1521:

  Sara, a security engineer, is testing encryption ciphers for performance. Which of the following ciphers offers strong encryption with the FASTEST speed?

  A. 3DES
  B. Blowfish
  C. Serpent
  D. AES256
  B. Blowfish

  ---

  Blowfish is an encryption system invented by a team led by Bruce Schneier that performs a 64-bit block cipher at very fast speeds. Blowfish is a fast, except when changing keys. It is a symmetric block cipher that can use variable-length keys (from 32 bits to 448 bits).

• Question 1522:

  A company wants to ensure that all aspects if data are protected when sending to other sites within the enterprise. Which of the following would ensure some type of encryption is performed while data is in transit?

  A. SSH
  B. SHA1
  C. TPM
  D. MD5
  C. TPM

  ---

  Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the system's motherboard and is enabled or disable in BIOS. It helps with hash key generation and stores cryptographic keys, passwords, or certificates.

• Question 1523:

  Mike, a user, states that he is receiving several unwanted emails about home loans. Which of the following is this an example of?

  A. Spear phishing
  B. Hoaxes
  C. Spoofing
  D. Spam
  D. Spam

  ---

  Spam is most often considered to be electronic junk mail or junk newsgroup postings. Some people define spam even more generally as any unsolicited email. However, if a long-lost brother finds your email address and sends you a message, this could hardly be called spam, even though it is unsolicited. Real spam is generally email advertising for some product sent to a mailing list or newsgroup. In addition to wasting people's time with unwanted e-mail, spam also eats up a lot of network bandwidth. Consequently, there are many organizations, as well as individuals, who have taken it upon themselves to fight spam with a variety of techniques. But because the Internet is public, there is really little that can be done to prevent spam, just as it is impossible to prevent junk mail. However, some online services have instituted policies to prevent spammers from spamming their subscribers. There is some debate about why it is called spam, but the generally accepted version is that it comes from the Monty Python song, "Spam spam spam spam, spam spam spam spam, lovely spam, wonderful spam". Like the song, spam is an endless repetition of worthless text. Another school of thought maintains that it comes from the computer group lab at the University of Southern California who gave it the name because it has many of the same characteristics as the lunch meat Spam: Nobody wants it or ever asks for it. No one ever eats it; it is the first item to be pushed to the side when eating the entree. Sometimes it is actually tasty, like 1% of junk mail that is really useful to some people. The term spam can also be used to describe any "unwanted" email from a company or website -- typically at some point a user would have agreed to receive the email via subscription list opt-in -- a newer term called graymail is used to describe this particular type of spam.

• Question 1524:

  An administrator deploys a WPA2 Enterprise wireless network with EAP-PEAP- MSCHAPv2. The deployment is successful and company laptops are able to connect automatically with no user intervention. A year later, the company begins to deploy phones with wireless capabilities. Users report that they are receiving a warning when they attempt to connect to the wireless network from their phones. Which of the following is the MOST likely cause of the warning message?

  A. Mutual authentication on the phone is not compatible with the wireless network
  B. The phones do not support WPA2 Enterprise wireless networks
  C. User certificates were not deployed to the phones
  D. The phones' built in web browser is not compatible with the wireless network
  E. Self-signed certificates were used on the RADIUS servers
  B. The phones do not support WPA2 Enterprise wireless networks

• Question 1525:

  Without validating user input, an application becomes vulnerable to all of the following EXCEPT:

  A. Buffer overflow.
  B. Command injection.
  C. Spear phishing.
  D. SQL injection.
  C. Spear phishing.

  ---

  Input validation is a defensive technique intended to mitigate against possible user input attacks, such as buffer overflows and fuzzing. Input validation checks every user input submitted to the application before processing that input. The check could be a length, a character type, a language type, or a domain.

• Question 1526:

  Users are trying to communicate with a network but are unable to do so. A network administrator sees connection attempts on port 20 from outside IP addresses that are being blocked. How can the administrator resolve this?

  A. Enable stateful FTP on the firewall
  B. Enable inbound SSH connections
  C. Enable NETBIOS connections in the firewall
  D. Enable HTTPS on port 20
  A. Enable stateful FTP on the firewall

• Question 1527:

  The Chief Technical Officer (CTO) has been informed of a potential fraud committed by a database administrator performing several other job functions within the company. Which of the following is the BEST method to prevent such activities in the future?

  A. Job rotation
  B. Separation of duties
  C. Mandatory Vacations
  D. Least Privilege
  B. Separation of duties

  ---

  Separation of duties means that users are granted only the permissions they need to do their work and no more. More so it means that you are employing best practices. The segregation of duties and separation of environments is a way to reduce the likelihood of misuse of systems or information. A separation of duties policy is designed to reduce the risk of fraud and to prevent other losses in an organization.

• Question 1528:

  A security administrator wishes to protect session leys should a private key become discovered. Which of the following should be enabled in IPSec to allow this?

  A. Perfect forward secrecy
  B. Key escrow
  C. Digital signatures
  D. CRL
  B. Key escrow

• Question 1529:

  Which of the following would be MOST appropriate to secure an existing SCADA system by preventing connections from unauthorized networks?

  A. Implement a HIDS to protect the SCADA system
  B. Implement a Layer 2 switch to access the SCADA system
  C. Implement a firewall to protect the SCADA system
  D. Implement a NIDS to protect the SCADA system
  C. Implement a firewall to protect the SCADA system

  ---

  Firewalls manage traffic using filters, which is just a rule or set of rules. A recommended guideline for firewall rules is, "deny by default; allow by exception". This means that if a network connection is not specifically allowed, it will be denied.

• Question 1530:

  An administrator wants to ensure that the reclaimed space of a hard drive has been sanitized while the computer is in use. Which of the following can be implemented?

  A. Cluster tip wiping
  B. Individual file encryption
  C. Full disk encryption
  D. Storage retention
  A. Cluster tip wiping

  ---

  A computer hard disk is divided into small segments called clusters. A file usually spans several clusters but rarely fills the last cluster, which is called cluster tip. This cluster tip area may contain file data because the size of the file you are working with may grow or shrink and needs to be securely deleted.