CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1541:

  In Kerberos, the Ticket Granting Ticket (TGT) is used for which of the following?

  A. Identification
  B. Authorization
  C. Authentication
  D. Multifactor authentication
  C. Authentication

  ---

  An authentication ticket, also known as a ticket-granting ticket (TGT), is a small amount of encrypted data that is issued by a server in the Kerberos authentication model to begin the authentication process. When the client receives an authentication ticket, the client sends the ticket back to the server along with additional information verifying the client's identity. The server then issues a service ticket and a session key (which includes a form of password), completing the authorization process for that session. In the Kerberos model, all tickets are time-stamped and have limited lifetimes. This minimizes the danger that hackers will be able to steal or crack the encrypted data and use it to compromise the system. Ideally, no authentication ticket remains valid for longer than the time an expert hacker would need to crack the encryption. Authentication tickets are session-specific, further improving the security of the system by ensuring that no authentication ticket remains valid after a given session is complete.

• Question 1542:

  Which of the following controls can be implemented together to prevent data loss in the event of theft of a mobile device storing sensitive information? (Select TWO).

  A. Full device encryption
  B. Screen locks
  C. GPS
  D. Asset tracking
  E. Inventory control
  A. Full device encryption
  B. Screen locks

  ---

  A: Device encryption encrypts the data on the device. This feature ensures that the data on the device cannot be accessed in a useable form should the device be stolen.

  B: Screen locks are a security feature that requires the user to enter a PIN or a password after a short period of inactivity before they can access the system again. This feature ensures that if your device is left unattended or is lost or stolen, it will be difficult for anyone else to access your data or applications.

• Question 1543:

  Multi-tenancy is a concept found in which of the following?

  A. Full disk encryption
  B. Removable media
  C. Cloud computing
  D. Data loss prevention
  C. Cloud computing

  ---

  One of the ways cloud computing is able to obtain cost efficiencies is by putting data from various clients on the same machines. This "multitenant" nature means that workloads from different clients can be on the same system, and a flaw in implementation could compromise security.

• Question 1544:

  The below report indicates that the system is MOST likely infected by which of the following?

  Protocol LOCAL IP FOREIGN IP STATE

  TCP 0.0.0:445 0.0.0.0:0 Listening

  TCP 0.0.0.0:3390 0.0.0.0:0 Listening

  A. Trojan
  B. Worm
  C. Logic bomb
  D. Spyware
  A. Trojan

• Question 1545:

  A company has decided to move large data sets to a cloud provider in order to limit the costs of new infrastructure. Some of the data is sensitive and the Chief Information Officer wants to make sure both parties have a clear understanding of the controls needed to protect the data.

  Which of the following types of interoperability agreement is this?

  A. ISA
  B. MOU
  C. SLA
  D. BPA
  A. ISA

  ---

  ISA/ Interconnection Security Agreement is an agreement between two organizations that have connected systems. The agreement documents the technical requirements of the connected systems.

• Question 1546:

  A network security analyst has confirmed that the public facing web server has been compromised. Which of the following stages if the Incident Handling Response does this describe?

  A. Analyzing
  B. Recovering
  C. Identification
  D. Mitigation
  C. Identification

• Question 1547:

  When an order was submitted via the corporate website, an administrator noted special characters (e.g., ";--" and "or 1=1 --") were input instead of the expected letters and numbers.

  Which of the following is the MOST likely reason for the unusual results?

  A. The user is attempting to highjack the web server session using an open-source browser.
  B. The user has been compromised by a cross-site scripting attack (XSS) and is part of a botnet performing DDoS attacks.
  C. The user is attempting to fuzz the web server by entering foreign language characters which are incompatible with the website.
  D. The user is sending malicious SQL injection strings in order to extract sensitive company or customer data via the website.
  D. The user is sending malicious SQL injection strings in order to extract sensitive company or customer data via the website.

  ---

  The code in the question is an example of a SQL Injection attack. The code `1=1' will always provide a value of true. This can be included in statement designed to return all rows in a SQL table.

  SQL injection is a code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). SQL injection must exploit a security vulnerability in an application's software, for example, when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly executed. SQL injection is mostly known as an attack vector for websites but can be used to attack any type of SQL database.

• Question 1548:

  An organization processes credit card transactions and is concerned that an employee may intentionally email credit card numbers to external email addresses. This company should consider which of the following technologies?

  A. IDS
  B. Firewalls
  C. DLP
  D. IPS
  C. DLP

  ---

  A Data Loss Prevention technology is aimed at detecting and preventing unauthorized access to, use of, or transmission of sensitive information such as credit card details.

• Question 1549:

  A security administrator would like to ensure that system administrators are not using the same password for both their privileged and non-privileged accounts. Which of the following security controls BEST accomplishes this goal?

  A. Require different account passwords through a policy
  B. Require shorter password expiration for non-privileged accounts
  C. Require shorter password expiration for privileged accounts
  D. Require a greater password length for privileged accounts
  A. Require different account passwords through a policy

  ---

  A password policy aka account policy enforcement can be configured in such a way so as to make sure that system administrators make use of different passwords for different accounts.

• Question 1550:

  A Chief Security Officer (CSO) has been unsuccessful in attempts to access the website for a potential partner (www.example.net). Which of the following rules is preventing the CSO from accessing the site?

  Blocked sites: *.nonews.com, *.rumorhasit.net, *.mars?

  A. Rule 1: deny from inside to outside source any destination any service smtp
  B. Rule 2: deny from inside to outside source any destination any service ping
  C. Rule 3: deny from inside to outside source any destination {blocked sites} service http- https
  D. Rule 4: deny from any to any source any destination any service any
  C. Rule 3: deny from inside to outside source any destination {blocked sites} service http- https