CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1591:

  A systems administrator is configuring a new file server and has been instructed to configure writeable to by the department manager, and read only for the individual employee. Which of the following is the name for the access control methodology used?

  A. Duty separation
  B. Mandatory
  C. Least privilege
  D. Role-based
  D. Role-based

• Question 1592:

  A security administrator is reviewing the below output from a password auditing tool: P@ss.

  @pW1.

  S3cU4

  Which of the following additional policies should be implemented based on the tool's output?

  A. Password age
  B. Password history
  C. Password length
  D. Password complexity
  C. Password length

  ---

  The output shows that all the passwords are either 4 or 5 characters long. This is way too short, 8 characters are shown to be the minimum for password length.

• Question 1593:

  Input validation is an important security defense because it:

  A. rejects bad or malformed data.
  B. enables verbose error reporting.
  C. protects mis-configured web servers.
  D. prevents denial of service attacks.
  A. rejects bad or malformed data.

  ---

  Input validation is a defensive technique intended to mitigate against possible user input attacks, such as buffer overflows and fuzzing. Input validation checks every user input submitted to the application before processing that input. The check could be a length, a character type, a language type, or a domain.

• Question 1594:

  An organization has three divisions: Accounting, Sales, and Human Resources. Users in the Accounting division require access to a server in the Sales division, but no users in the Human Resources division should have access to resources in any other division, nor should any users in the Sales division have access to resources in the Accounting division. Which of the following network segmentation schemas would BEST meet this objective?

  A. Create two VLANS, one for Accounting and Sales, and one for Human Resources.
  B. Create one VLAN for the entire organization.
  C. Create two VLANs, one for Sales and Human Resources, and one for Accounting.
  D. Create three separate VLANS, one for each division.
  D. Create three separate VLANS, one for each division.

  ---

  A virtual local area network (VLAN) is a hardware-imposed network segmentation created by switches. Communications between ports within the same VLAN occur without hindrance, but communications between VLANs require a routing function.

• Question 1595:

  Which of the following BEST describes using a smart card and typing in a PIN to gain access to a system?

  A. Biometrics
  B. PKI
  C. Single factor authentication
  D. Multifactor authentication
  D. Multifactor authentication

  ---

  Multifactor authentication requires a user to provide two or more authentication factors for authentication purposes. In this case, a smart card (something they have) is one and a PIN (something they know) is the second.

• Question 1596:

  An outside security consultant produces a report of several vulnerabilities for a particular server. Upon further investigation, it is determine that the vulnerability reported does not apply to the platform the server is running on. Which of the following should the consultant do in order to produce more accurate results?

  A. A black box test should be used to increase the validity of the scan
  B. Perform a penetration test in addition to a vulnerability scan
  C. Use banner grabbing to identify the target platform
  D. Use baseline reporting to determine the actual configuration
  B. Perform a penetration test in addition to a vulnerability scan

• Question 1597:

  Company employees are required to have workstation client certificates to access a bank website. These certificates were backed up as a precautionary step before the new computer upgrade. After the upgrade and restoration, users state they can access the bank's website, but not login. Which is the following is MOST likely the issue?

  A. The IP addresses of the clients have change
  B. The client certificate passwords have expired on the server
  C. The certificates have not been installed on the workstations
  D. The certificates have been installed on the CA
  C. The certificates have not been installed on the workstations

  ---

  The computer certificates must be installed on the upgraded client computers.

• Question 1598:

  Mike, a security professional, is tasked with actively verifying the strength of the security controls on a company's live modem pool. Which of the following activities is MOST appropriate?

  A. War dialing
  B. War chalking
  C. War driving
  D. Bluesnarfing
  A. War dialing

  ---

  War dialing is a technique of using a modem to automatically scan a list of telephone numbers, usually dialing every number in a local area code to search for computers, Bulletin board systems and fax machines. Hackers use the resulting lists for various purposes: hobbyists for exploration, and crackers - malicious hackers who specialize in computer security - for guessing user accounts (by capturing voicemail greetings), or locating modems that might provide an entry-point into computer or other electronic systems. It may also be used by security personnel, for example, to detect unauthorized devices, such as modems or faxes, on a company's telephone network.

• Question 1599:

  A company uses port security based on an approved MAC list to secure its wired network and WPA2 to secure its wireless network. Which of the following prevents an attacker from learning authorized MAC addresses?

  A. Port security prevents access to any traffic that might provide an attacker with authorized MAC addresses
  B. Port security uses certificates to authenticate devices and is not part of a wireless protocol
  C. Port security relies in a MAC address length that is too short to be cryptographically secure over wireless networks
  D. Port security encrypts data on the network preventing an attacker form reading authorized MAC addresses
  A. Port security prevents access to any traffic that might provide an attacker with authorized MAC addresses

• Question 1600:

  Which of the following can be utilized in order to provide temporary IT support during a disaster, where the organization sets aside funds for contingencies, but does not necessarily have a dedicated site to restore those services?

  A. Hot site
  B. Warm site
  C. Cold site
  D. Mobile site
  D. Mobile site

  ---

  Not having a dedicated site means that the mobile site can fill the role of either being a hot, warm or cold site as a disaster recovery measure.