CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1571:

  Which of the following describes how Sara, an attacker, can send unwanted advertisements to a mobile device?

  A. Man-in-the-middle
  B. Bluejacking
  C. Bluesnarfing
  D. Packet sniffing
  B. Bluejacking

  ---

  Bluejacking is the sending of unsolicited messages over Bluetooth to Bluetooth-enabled devices such as mobile phones, PDAs or laptop computers, sending a vCard which typically contains a message in the name field (i.e., for bluedating or bluechat) to another Bluetooth-enabled device via the OBEX protocol. Bluetooth has a very limited range, usually around 10 metres (32.8 ft) on mobile phones, but laptops can reach up to 100 metres (328 ft) with powerful (Class 1) transmitters. Bluejacking is usually harmless, but because bluejacked people generally don't know what has happened, they may think that their phone is malfunctioning. Usually, a bluejacker will only send a text message, but with modern phones it's possible to send images or sounds as well. Bluejacking has been used in guerrilla marketing campaigns to promote advergames.

• Question 1572:

  Which of the following ports is used for TELNET by default?

  A. 22
  B. 23
  C. 21
  D. 20
  B. 23

• Question 1573:

  Which of the following should be connected to the fire alarm system in order to help prevent the spread of a fire in a server room without data loss to assist in an FM-200 deployment?

  A. Water base sprinkler system
  B. Electrical
  C. HVAC
  D. Video surveillance
  C. HVAC

  ---

  HVAC refers to heating, ventilation and air-conditioning to allow for a zone-based environmental control measure. The fire-alarm system should ideally also be hooked up to the HVAC so that the HVAC can monitor the changes in heating and ventilation.

• Question 1574:

  A new client application developer wants to ensure that the encrypted passwords that are stored in their database are secure from cracking attempts. To implement this, the developer implements a function on the client application that hashes passwords thousands of times prior to being sent to the database. Which of the following did the developer MOST likely implement?

  A. RIPEMD
  B. PBKDF2
  C. HMAC
  D. ECDHE
  B. PBKDF2

  ---

  Password-Based Key Derivation Function 2 (PBKDF2) makes use of a hashing operation, an encryption cipher function, or an HMAC operation) on the input password, which is combined with a salt and is repeated thousands of times.

• Question 1575:

  Which of the following offers the LEAST secure encryption capabilities?

  A. TwoFish
  B. PAP
  C. NTLM
  D. CHAP
  B. PAP

  ---

  PAP transmits unencrypted ASCII passwords over the network and is therefore considered insecure. It is used as a last resort when the remote server does not support a stronger authentication protocol, like CHAP or EAP.

• Question 1576:

  One of the servers on the network stops responding due to lack of available memory. Server administrators did not have a clear definition of what action should have taken place based on the available memory. Which of the following would have BEST kept this incident from occurring?

  A. Set up a protocol analyzer
  B. Set up a performance baseline
  C. Review the systems monitor on a monthly basis
  D. Review the performance monitor on a monthly basis
  B. Set up a performance baseline

  ---

  A performance baseline provides the input needed to design, implement, and support a secure network. The performance baseline would define the actions that should be performed on a server that is running low on memory.

• Question 1577:

  Ann is a member of the Sales group. She needs to collaborate with Joe, a member of the IT group, to edit a file. Currently, the file has the following permissions: Ann:read/write Sales Group:read IT Group:no access If a discretionary access control list is in place for the files owned by Ann, which of the following would be the BEST way to share the file with Joe?

  A. Add Joe to the Sales group.
  B. Have the system administrator give Joe full access to the file.
  C. Give Joe the appropriate access to the file directly.
  D. Remove Joe from the IT group and add him to the Sales group.
  C. Give Joe the appropriate access to the file directly.

  ---

  Joe needs access to only one file. He also needs to `edit' that file. Editing a file requires Read and Write access to the file. The best way to provide Joe with the minimum required permissions to edit the file would be to give Joe the appropriate access to the file directly.

• Question 1578:

  Disabling unnecessary services, restricting administrative access, and enabling auditing controls on a server are forms of which of the following?

  A. Application patch management
  B. Cross-site scripting prevention
  C. Creating a security baseline
  D. System hardening
  D. System hardening

  ---

  Hardening is the process of securing a system by reducing its surface of vulnerability. Reducing the surface of vulnerability typically includes removing or disabling unnecessary functions and features, removing or disabling unnecessary user accounts, disabling unnecessary protocols and ports, and disabling unnecessary services.

• Question 1579:

  A security administrator needs a locally stored record to remove the certificates of a terminated employee. Which of the following describes a service that could meet these requirements?

  A. OCSP
  B. PKI
  C. CA
  D. CRL
  D. CRL

  ---

  A CRL is a locally stored record containing revoked certificates and revoked keys.

• Question 1580:

  During a routine audit a web server is flagged for allowing the use of weak ciphers. Which of the following should be disabled to mitigate this risk? (Select TWO).

  A. SSL 1.0
  B. RC4
  C. SSL 3.0
  D. AES
  E. DES
  F. TLS 1.0
  A. SSL 1.0
  E. DES

  ---

  TLS 1.0 and SSL 1.0 both have known vulnerabilities and have been replaced by later versions. Any systems running these ciphers should have them disabled. Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer

  (SSL), are cryptographic protocols designed to provide communications security over a computer network. They use X.509 certificates and hence asymmetric cryptography to authenticate the counterparty with whom they are communicating,

  and to exchange a symmetric key. This session key is then used to encrypt data flowing between the parties. This allows for data/message confidentiality, and message authentication codes for message integrity and as a by-product,

  message authentication

  Netscape developed the original SSL protocol. Version 1.0 was never publicly released because of serious security flaws in the protocol; version 2.0, released in February 1995, "contained a number of security flaws which ultimately led to the

  design of SSL version 3.0".

  TLS 1.0 was first defined in RFC 2246 in January 1999 as an upgrade of SSL Version 3.0. As stated in the RFC, "the differences between this protocol and SSL 3.0 are not dramatic, but they are significant enough to preclude interoperability

  between TLS 1.0 and SSL 3.0". TLS 1.0 does include a means by which a TLS implementation can downgrade the connection to SSL 3.0, thus weakening security.

  TLS 1.1 and then TLS 1.2 were created to replace TLS 1.0.