CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1631:

  Which of the following firewall rules only denies DNS zone transfers?

  A. deny udp any any port 53
  B. deny ip any any
  C. deny tcp any any port 53
  D. deny all dns packets
  C. deny tcp any any port 53

  ---

  DNS operates over TCP and UDP port 53. TCP port 53 is used for zone transfers.

• Question 1632:

  Which of the following would Matt, a security administrator, use to encrypt transmissions from an internal database to an internal server, keeping in mind that the encryption process must add as little latency to the process as possible?

  A. ECC
  B. RSA
  C. SHA
  D. 3DES
  D. 3DES

  ---

  3DES would be less secure compared to ECC, but 3DES would require less computational power.

  Triple-DES (3DES) is a technological upgrade of DES. 3DES is still used, even though AES is the preferred choice for government applications. 3DES is considerably harder to break than many other systems, and it's more secure than DES.

  It increases the key length to 168 bits (using three 56-bit DES keys).

• Question 1633:

  A security administrator must implement a system that will support and enforce the following file system access control model:

  FILE NAMESECURITY LABEL

  Employees.docConfidential

  Salary.xlsConfidential

  OfficePhones.xlsUnclassified

  PersonalPhones.xlsRestricted

  Which of the following should the security administrator implement?

  A. White and black listing
  B. SCADA system
  C. Trusted OS
  D. Version control
  C. Trusted OS

  ---

  A trusted operating system (TOS) is any operating system that meets the government's requirements for security. Trusted OS uses a form of Mandatory access control called Multi-Level Security.

  The Mandatory access control (MAC) is a form of access control commonly employed by government and military environments. MAC specifies that access is granted based on a set of rules rather than at the discretion of a user. The rules

  that govern MAC are hierarchical in nature and are often called sensitivity labels, security domains, or classifications.

  MLS is an implementation of MAC that focuses on confidentiality. A Multi-Level Security operating system is able to enforce the separation of multiple classifications of information as well as manage multiple users with varying levels of

  information clearance. The military and intelligence community must handle and process various hierarchical levels of classified information. At the high-end there is Top Secret, followed in turn by Secret, Confidential, and Unclassified:

• Question 1634:

  A software development company wants to implement a digital rights management solution to protect its intellectual property. Which of the following should the company implement to enforce software digital rights?

  A. Transport encryption
  B. IPsec
  C. Non-repudiation
  D. Public key infrastructure
  D. Public key infrastructure

  ---

  The Public-Key Infrastructure (PKI) is intended to offer a means of providing security to messages and transactions on a grand scale. The need for universal systems to support e- commerce, secure transactions, and information privacy is one aspect of the issues being addressed with PKI. A PKI can be used to protect software.

• Question 1635:

  The security administrator is analyzing a user's history file on a Unix server to determine if the user was attempting to break out of a rootjail. Which of the following lines in the user's history log shows evidence that the user attempted to escape the rootjail?

  A. cd ../../../../bin/bash
  B. whoami
  C. ls /root
  D. sudo -u root
  A. cd ../../../../bin/bash

  ---

  On modern UNIX variants, including Linux, you can define the root directory on a perprocess basis. The chroot utility allows you to run a process with a root directory other than /.

  The root directory appears at the top of the directory hierarchy and has no parent: A process cannot access any files above the root directory (because they do not exist). If, for example, you run a program (process) and specify its root

  directory as /home/sam/jail, the program would have no concept of any files in /home/sam or above: jail is the program's root directory and is labeled / (not jail).

  By creating an artificial root directory, frequently called a (chroot) jail, you prevent a program from accessing or modifying--possibly maliciously--files outside the directory hierarchy starting at its root. You must set up a chroot jail properly to

  increase security: If you do not set up the chroot jail correctly, you can actually make it easier for a malicious user to gain access to a system than if there were no chroot jail.

  The command cd .. takes you up one level in the directory structure. Repeated commands would take you to the top level the root which is represented by a forward slash /. The command /bin/bash is an attempt to run the bash shell from the

  root level.

• Question 1636:

  Methods to test the responses of software and web applications to unusual or unexpected inputs are known as:

  A. Brute force.
  B. HTML encoding.
  C. Web crawling.
  D. Fuzzing.
  D. Fuzzing.

  ---

  Fuzzing is a software testing technique that involves providing invalid, unexpected, or random data to as inputs to a computer program. The program is then monitored for exceptions such as crashes, or failed validation, or memory leaks.

• Question 1637:

  A company used a partner company to develop critical components of an application. Several employees of the partner company have been arrested for cybercrime activities. Which of the following should be done to protect the interest of the company?

  A. Perform a penetration test against the application
  B. Conduct a source code review of the application
  C. Perform a baseline review of the application
  D. Scan the application with antivirus and anti-spyware products.
  A. Perform a penetration test against the application

• Question 1638:

  Which of the following utilities can be used in Linux to view a list of users' failed authentication attempts?

  A. badlog
  B. faillog
  C. wronglog
  D. killlog
  B. faillog

  ---

  var/log/faillog - This Linux log fi le contains failed user logins. You'll find this log useful when tracking attempts to crack into your system.

  /var/log/apport.log This log records application crashes. Sometimes these can reveal attempts to compromise the system or the presence of a virus or spyware.

• Question 1639:

  A network engineer is setting up a network for a company. There is a BYOD policy for the employees so that they can connect their laptops and mobile devices.

  Which of the following technologies should be employed to separate the administrative network from the network in which all of the employees' devices are connected?

  A. VPN
  B. VLAN
  C. WPA2
  D. MAC filtering
  B. VLAN

  ---

  A virtual local area network (VLAN) is a hardware-imposed network segmentation created by switches. VLANs are used for traffic management. Communications between ports within the same VLAN occur without hindrance, but communications between VLANs require a routing function.

• Question 1640:

  Which of the following devices would MOST likely have a DMZ interface?

  A. Firewall
  B. Switch
  C. Load balancer
  D. Proxy
  A. Firewall

  ---

  Explanation: The DMZ is a buffer network between the public untrusted Internet and the private trusted LAN. Often a DMZ is deployed through the use of a multihomed firewall.