CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1691:

  The data backup window has expanded into the morning hours and has begun to affect production users. The main bottleneck in the process is the time it takes to replicate the backups to separate severs at the offsite data center. Which of the following uses of deduplication could be implemented to reduce the backup window?

  A. Implement deduplication at the network level between the two locations
  B. Implement deduplication on the storage array to reduce the amount of drive space needed
  C. Implement deduplication on the server storage to reduce the data backed up
  D. Implement deduplication on both the local and remote servers
  B. Implement deduplication on the storage array to reduce the amount of drive space needed

• Question 1692:

  A computer is found to be infected with malware and a technician re-installs the operating system. The computer remains infected with malware. This is an example of:

  A. a rootkit.
  B. a MBR infection.
  C. an exploit kit.
  D. Spyware.
  B. a MBR infection.

  ---

  An MBR infection is malware that is installed into the Master Boot Record (MBR) of a hard disk. Reinstalling the operating system does not remove the malware from the MBR. A `Bootkit' is a rootkit that infects the Master Boot Record. Bootkits are an advanced form of rootkits that take the basic functionality of a rootkit and extend it with the ability to infect the master boot record (MBR) or volume boot record (VBR) so that the bootkit remains active even after a system reboot. Bootkits are designed to not only load from the master boot record but also remain active in the system memory from protected mode through the launch of the operating system and during the computer's active state.

• Question 1693:

  A company wants to improve its overall security posture by deploying environmental controls in its datacenter. Which of the following is considered an environmental control that can be deployed to meet this goal?

  A. Full-disk encryption
  B. Proximity readers
  C. Hard ward locks
  D. Fire suppression
  B. Proximity readers

• Question 1694:

  The security manager wants to unify the storage of credential, phone numbers, office numbers, and address information into one system. Which of the following is a system that will support the requirement on its own?

  A. LDAP
  B. SAML
  C. TACACS
  D. RADIUS
  A. LDAP

  ---

  A `directory' contains information about users.

  The Lightweight Directory Access Protocol (LDAP) is a directory service protocol that runs on a layer above the TCP/IP stack. It provides a mechanism used to connect to, search, and modify Internet directories.

  The Lightweight Directory Access Protocol (LDAP) is an open, vendor-neutral, industry standard application protocol for accessing and maintaining distributed directory information services over an Internet Protocol (IP) network. Directory

  services play an important role in developing intranet and Internet applications by allowing the sharing of information about users, systems, networks, services, and applications throughout the network. As examples, directory services may

  provide any organized set of records, often with a hierarchical structure, such as a corporate email directory. Similarly, a telephone directory is a list of subscribers with an address and a phone number.

• Question 1695:

  Which of the following is a best practice when setting up a client to use the LDAPS protocol with a server?

  A. The client should follow LDAP referrals to other secure servers on the network
  B. The client should trust the CA that signed the server's certificate
  C. The client should present a self-signed certificate to the server
  D. The client should have access to port 389 on the server
  C. The client should present a self-signed certificate to the server

• Question 1696:

  A technician wants to implement a dual factor authentication system that will enable the organization to authorize access to sensitive systems on a need-to-know basis. Which of the following should be implemented during the authorization stage?

  A. Biometrics
  B. Mandatory access control
  C. Single sign-on
  D. Role-based access control
  A. Biometrics

  ---

  This question is asking about "authorization", not authentication. Mandatory access control (MAC) is a form of access control commonly employed by government and military environments. MAC specifies that access is granted based on a set of rules rather than at the discretion of a user. The rules that govern MAC are hierarchical in nature and are often called sensitivity labels, security domains, or classifications.

  MAC can also be deployed in private sector or corporate business environments. Such cases typically involve the following four security domain levels (in order from least sensitive to most sensitive):

  Public Sensitive Private Confidential

  A MAC environment works by assigning subjects a clearance level and assigning objects a sensitivity label--in other words, everything is assigned a classification marker. Subjects or users are assigned clearance levels. The name of the clearance level is the same as the name of the sensitivity label assigned to objects or resources. A person (or other subject, such as a program or a computer system) must have the same or greater assigned clearance level as the resources they wish to access. In this manner, access is granted or restricted based on the rules of classification (that is, sensitivity labels and clearance levels). MAC is named as it is because the access control it imposes on an environment is mandatory. Its assigned classifications and the resulting granting and restriction of access can't be altered by users. Instead, the rules that define the environment and judge the assignment of sensitivity labels and clearance levels control authorization. MAC isn't a very granularly controlled security environment. An improvement to MAC includes the use of need to know: a security restriction where some objects (resources or data) are restricted unless the subject has a need to know them. The objects that require a specific need to know are assigned a sensitivity label, but they're compartmentalized from the rest of the objects with the same sensitivity label (in the same security domain). The need to know is a rule in and of itself, which states that access is granted only to users who have been assigned work tasks that require access to the cordoned-off object. Even if users have the proper level of clearance, without need to know, they're denied access. Need to know is the MAC equivalent of the principle of least privilege from DAC

• Question 1697:

  It is MOST difficult to harden against which of the following?

  A. XSS
  B. Zero-day
  C. Buffer overflow
  D. DoS
  C. Buffer overflow

• Question 1698:

  Which of the following can affect electrostatic discharge in a network operations center?

  A. Fire suppression
  B. Environmental monitoring
  C. Proximity card access
  D. Humidity controls
  D. Humidity controls

• Question 1699:

  Matt, a security administrator, wants to ensure that the message he is sending does not get intercepted or modified in transit. This concern relates to which of the following concepts?

  A. Availability
  B. Integrity
  C. Accounting
  D. Confidentiality
  B. Integrity

  ---

  Integrity means ensuring that data has not been altered. Hashing and message authentication codes are the most common methods to accomplish this. In addition, ensuring nonrepudiation via digital signatures supports integrity.

• Question 1700:

  A security team has identified that the wireless signal is broadcasting into the parking lot. To reduce the risk of an attack against the wireless network from the parking lot, which of the following controls should be used? (Select TWO).

  A. Antenna placement
  B. Interference
  C. Use WEP
  D. Single Sign on
  E. Disable the SSID
  F. Power levels
  A. Antenna placement
  F. Power levels

  ---

  Placing the antenna in the correct position is crucial. You can then adjust the power levels to exclude the parking lot.