CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 151:

  Which of the following is a concern when encrypting wireless data with WEP?

  A. WEP displays the plain text entire key when wireless packet captures are reassembled
  B. WEP implements weak initialization vectors for key transmission
  C. WEP uses a very weak encryption algorithm
  D. WEP allows for only four pre-shared keys to be configured
  B. WEP implements weak initialization vectors for key transmission

  ---

  The initialization vector (IV) that WEP uses for encryption is 24-bit, which is quite weak and means that IVs are reused with the same key. By examining the repeating result, it was easy for attackers to crack the WEP secret key. This is known as an IV attack.

• Question 152:

  A project manager is working with an architectural firm that focuses on physical security. The project manager would like to provide requirements that support the primary goal of safely. Based on the project manager's desires, which of the following controls would the BEST to incorporate into the facility design?

  A. Biometrics
  B. Escape routers
  C. Reinforcements
  D. Access controls
  B. Escape routers

• Question 153:

  Which of the following may significantly reduce data loss if multiple drives fail at the same time?

  A. Virtualization
  B. RAID
  C. Load balancing
  D. Server clustering
  B. RAID

  ---

  RAID, or redundant array of independent disks (RAID). RAID allows your existing servers to have more than one hard drive so that if the main hard drive fails, the system keeps functioning.

• Question 154:

  A security administrator needs to image a large hard drive for forensic analysis. Which of the following will allow for faster imaging to a second hard drive?

  A. cp /dev/sda /dev/sdb bs=8k
  B. tail -f /dev/sda > /dev/sdb bs=8k
  C. dd in=/dev/sda out=/dev/sdb bs=4k
  D. locate /dev/sda /dev/sdb bs=4k
  C. dd in=/dev/sda out=/dev/sdb bs=4k

  ---

  dd is a command-line utility for Unix and Unix-like operating systems whose primary purpose is to convert and copy files. dd can duplicate data across files, devices, partitions and volumes On Unix, device drivers for hardware (such as hard disks) and special device files (such as /dev/zero and /dev/random) appear in the file system just like normal files; dd can also read and/or write from/to these files, provided that function is implemented in their respective driver. As a result, dd can be used for tasks such as backing up the boot sector of a hard drive, and obtaining a fixed amount of random data. The dd program can also perform conversions on the data as it is copied, including byte order swapping and conversion to and from the ASCII and EBCDIC text encodings. An attempt to copy the entire disk using cp may omit the final block if it is of an unexpected length; whereas dd may succeed. The source and destination disks should have the same size.

• Question 155:

  An incident occurred when an outside attacker was able to gain access to network resources. During the incident response, investigation security logs indicated multiple failed login attempts for a network administrator. Which of the following controls, if in place could have BEST prevented this successful attack?

  A. Password history
  B. Password complexity
  C. Account lockout
  D. Account expiration
  C. Account lockout

• Question 156:

  A classroom utilizes workstations running virtualization software for a maximum of one virtual machine per working station. The network settings on the virtual machines are set to bridged. Which of the following describes how the switch in the classroom should be configured to allow for the virtual machines and host workstation to connect to network resources?

  A. The maximum-mac settings of the ports should be set to zero
  B. The maximum-mac settings of the ports should be set to one
  C. The maximum-mac settings of the ports should be set to two
  D. The maximum mac settings of the ports should be set to three
  A. The maximum-mac settings of the ports should be set to zero

• Question 157:

  A system administrator has noticed network performance issues and wants to gather performance data from the gateway router. Which of the following can be used to perform this action?

  A. SMTP
  B. iSCSI
  C. SNMP
  D. IPSec
  C. SNMP

• Question 158:

  A company has recently begun to provide internal security awareness for employees. Which of the following would be used to demonstrate the effectiveness of the training?

  A. Metrics
  B. Business impact analysis
  C. Certificate of completion
  D. Policies
  C. Certificate of completion

• Question 159:

  Which of the following should be used to implement voice encryption?

  A. SSLv3
  B. VDSL
  C. SRTP
  D. VoIP
  C. SRTP

• Question 160:

  Corporate IM presents multiple concerns to enterprise IT. Which of the following concerns should Jane, the IT security manager, ensure are under control? (Select THREE).

  A. Authentication
  B. Data leakage
  C. Compliance
  D. Malware
  E. Non-repudiation
  F. Network loading
  B. Data leakage
  C. Compliance
  D. Malware

  ---

  In a joint enterprise, data may be combined from both organizations. It must be determined, in advance, who is responsible for that data and how the data backups will be managed. Data leakage, compliance and Malware issues are all issues concerning data ownership and backup which are both impacted on by corporate IM.