CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1621:

  A recent audit has revealed weaknesses in the process of deploying new servers and network devices. Which of the following practices could be used to increase the security posture during deployment? (Select TWO).

  A. Deploy a honeypot
  B. Disable unnecessary services
  C. Change default passwords
  D. Implement an application firewall
  E. Penetration testing
  B. Disable unnecessary services
  C. Change default passwords

  ---

  Increasing security posture is akin to getting the appropriate type of risk mitigation for your company. A plan and its implementation is a major part of security posture. When new servers and network devices are being deployed your most vulnerable points will be coming from all unnecessary services that may be running from servers and network default passwords. Thus your plan should be to disable those services that are not needed and change the default password during the deployment of the new servers and network devices.

• Question 1622:

  A certificate used on an ecommerce web server is about to expire. Which of the following will occur if the certificate is allowed to expire?

  A. The certificate will be added to the Certificate Revocation List (CRL).
  B. Clients will be notified that the certificate is invalid.
  C. The ecommerce site will not function until the certificate is renewed.
  D. The ecommerce site will no longer use encryption.
  B. Clients will be notified that the certificate is invalid.

  ---

  A similar process to certificate revocation will occur when a certificate is allowed to expire. Notification will be sent out to clients of the invalid certificate. The process of revoking a certificate begins when the CA is notified that a particular certificate needs to be revoked. This must be done whenever the private key becomes known. The owner of a certificate can request that it be revoked at any time, or the administrator can make the request.

• Question 1623:

  Which of the following documents outlines the technical and security requirements of an agreement between organizations?

  A. BPA
  B. RFQ
  C. ISA
  D. RFC
  C. ISA

  ---

  ISA/ Interconnection Security Agreement is an agreement between two organizations that have connected systems. The agreement documents the technical requirements of the connected systems.

• Question 1624:

  Which of the following should be enabled in a laptop's BIOS prior to full disk encryption?

  A. USB
  B. HSM
  C. RAID
  D. TPM
  D. TPM

  ---

  Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the system's motherboard and is enabled or disable in BIOS. It helps with hash key generation and stores cryptographic keys, passwords, or certificates.

• Question 1625:

  Which of the following components MUST be trusted by all parties in PKI?

  A. Key escrow
  B. CA
  C. Private key
  D. Recovery key
  B. CA

  ---

  A certificate authority (CA) is an organization that is responsible for issuing, revoking, and distributing certificates. In a simple trust model all parties must trust the CA. In a more complicated trust model all parties must trust the Root CA.

• Question 1626:

  After a user performed a war driving attack, the network administrator noticed several similar markings where WiFi was available throughout the enterprise. Which of the following is the term used to describe these markings?

  A. IV attack
  B. War dialing
  C. Rogue access points
  D. War chalking
  D. War chalking

  ---

  War chalking is the act of making chalk marks on outdoor surfaces (walls, sidewalks, buildings, sign posts, trees) to indicate the existence of an open wireless network connection, usually offering an Internet connection so that others can benefit from the free wireless access. The open connections typically come from the access points of wireless networks located within buildings to serve enterprises. The chalk symbols indicate the type of access point that is available at that specific spot.

• Question 1627:

  Users can authenticate to a company's web applications using their credentials form a popular social media site. Which of the following poses the greatest risk with this integration?

  A. Malicious users can exploit local corporate credentials with their social media credentials
  B. Changes to passwords on the social media site can be delayed from replicating to the company
  C. Data loss from the corporate servers can create legal liabilities with the social media site
  D. Password breaches to the social media affect the company application as well
  D. Password breaches to the social media affect the company application as well

• Question 1628:

  A malicious program modified entries in the LMHOSTS file of an infected system. Which of the following protocols would have been affected by this?

  A. ICMP
  B. BGP
  C. NetBIOS
  D. DNS
  C. NetBIOS

  ---

  The LMHOSTS file provides a NetBIOS name resolution method that can be used for small networks that do not use a WINS server. NetBIOS has been adapted to run on top of TCP/IP, and is still extensively used for name resolution and registration in Windows-based environments.

• Question 1629:

  A company's Chief Information Officer realizes the company cannot continue to operate after a disaster. Which of the following describes the disaster?

  A. Risk
  B. Asset
  C. Threat
  D. Vulnerability
  C. Threat

  ---

  Threat is basically anything that can take advantage of any vulnerability that may be found. When the CIO realizes that the company cannot continue to operate after a disaster, the disaster is then the threat to the company.

• Question 1630:

  A technician is unable to manage a remote server. Which of the following ports should be opened on the firewall for remote server management? (Select TWO).

  A. 22
  B. 135
  C. 137
  D. 143
  E. 443
  F. 3389
  A. 22
  F. 3389

  ---

  A secure remote administration solution and Remote Desktop protocol is required. Secure Shell (SSH) is a secure remote administration solution and makes use of TCP port

  22. Remote Desktop Protocol (RDP) uses TCP port 3389.