CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1531:

  Which of the following is a security advantage of using NoSQL vs. SQL databases in a three-tier environment?

  A. NoSQL databases are not vulnerable to XSRF attacks from the application server.
  B. NoSQL databases are not vulnerable to SQL injection attacks.
  C. NoSQL databases encrypt sensitive information by default.
  D. NoSQL databases perform faster than SQL databases on the same hardware.
  B. NoSQL databases are not vulnerable to SQL injection attacks.

  ---

  NoSQL is a nonrelational database and does not use SQL. It is therefore not vulnerable to SQL injection attacks but is vulnerable to similar injection-type attacks.

• Question 1532:

  Sara, a hacker, is completing a website form to request a free coupon. The site has a field that limits the request to 3 or fewer coupons. While submitting the form, Sara runs an application on her machine to intercept the HTTP POST command and change the field from 3 coupons to 30.

  Which of the following was used to perform this attack?

  A. SQL injection
  B. XML injection
  C. Packet sniffer
  D. Proxy
  B. XML injection

  ---

  When a web user takes advantage of a weakness with SQL by entering values that they should not, it is known as a SQL injection attack. Similarly, when the user enters values that query XML (known as XPath) with values that take advantage of exploits, it is known as an XML injection attack. XPath works in a similar manner to SQL, except that it does not have the same levels of access control, and taking advantage of weaknesses within can return entire documents. The best way to prevent XML injection attacks is to filter the user's input and sanitize it to make certain that it does not cause XPath to return more data than it should.

• Question 1533:

  After reviewing the firewall logs of her organization's wireless APs, Ann discovers an unusually high amount of failed authentication attempts in a particular segment of the building. She remembers that a new business moved into the office space across the street. Which of the following would be the BEST option to begin addressing the issue?

  A. Reduce the power level of the AP on the network segment
  B. Implement MAC filtering on the AP of the affected segment
  C. Perform a site survey to see what has changed on the segment
  D. Change the WPA2 encryption key of the AP in the affected segment
  A. Reduce the power level of the AP on the network segment

  ---

  Some access points include power level controls that allow you to reduce the amount of output provided if the signal is traveling too far.

• Question 1534:

  A security administrator suspects that an employee in the IT department is utilizing a reverse proxy to bypass the company's content filter and browse unapproved and non-work related sites while at work. Which of the following tools could BEST be used to determine how the employee is connecting to the reverse proxy?

  A. Port scanner
  B. Vulnerability scanner
  C. Honeypot
  D. Protocol analyzer
  C. Honeypot

• Question 1535:

  An attacker wearing a building maintenance uniform approached a company's receptionist asking for access to a secure area. The receptionist asks for identification, a building access badge and checks the company's list approved maintenance personnel prior to granting physical access to the secure are. The controls used by the receptionist are in place to prevent which of the following types of attacks?

  A. Tailgating
  B. Shoulder surfing
  C. Impersonation
  D. Hoax
  C. Impersonation

• Question 1536:

  A switch is set up to allow only 2 simultaneous MAC addresses per switch port. An administrator is reviewing a log and determines that a switch ort has been deactivated in a conference room after it detected 3 or more MAC addresses on the same port. Which of the following reasons could have caused this port to be disabled?

  A. A pc had a NIC replaced and reconnected to the switch
  B. An ip telephone has been plugged in
  C. A rouge access point was plugged in
  D. An arp attack was launched from a pc on this port
  D. An arp attack was launched from a pc on this port

• Question 1537:

  After a merger between two companies a security analyst has been asked to ensure that the organization's systems are secured against infiltration by any former employees that were terminated during the transition. Which of the following actions are MOST appropriate to harden applications against infiltration by former employees? (Select TWO)

  A. Monitor VPN client access
  B. Reduce failed login out settings
  C. Develop and implement updated access control policies
  D. Review and address invalid login attempts
  E. Increase password complexity requirements
  F. Assess and eliminate inactive accounts
  E. Increase password complexity requirements
  F. Assess and eliminate inactive accounts

• Question 1538:

  Which of the following would enhance the security of accessing data stored in the cloud? (Select TWO)

  A. Block level encryption
  B. SAML authentication
  C. Transport encryption
  D. Multifactor authentication
  E. Predefined challenge questions
  F. Hashing
  B. SAML authentication
  D. Multifactor authentication

• Question 1539:

  An organization is required to log all user internet activity. Which of the following would accomplish this requirement?

  A. Configure an access list on the default gateway router. Configure the default gateway router to log all web traffic to a syslog server
  B. Configure a firewall on the internal network. On the client IP address configuration, use the IP address of the firewall as the default gateway, configure the firewall to log all traffic to a syslog server
  C. Configure a proxy server on the internal network and configure the proxy server to log all web traffic to a syslog server
  D. Configure an access list on the core switch, configure the core switch to log all web traffic to a syslog server
  C. Configure a proxy server on the internal network and configure the proxy server to log all web traffic to a syslog server

• Question 1540:

  Which of the following risk concepts requires an organization to determine the number of failures per year?

  A. SLE
  B. ALE
  C. MTBF
  D. Quantitative analysis
  B. ALE

  ---

  ALE is the annual loss expectancy value. This is a monetary measure of how much loss you could expect in a year.