CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1701:

  Which of the following is considered a risk management BEST practice of succession planning?

  A. Reducing risk of critical information being known to an individual person who may leave the organization
  B. Implementing company-wide disaster recovery and business continuity plans
  C. Providing career advancement opportunities to junior staff which reduces the possibility of insider threats
  D. Considering departmental risk management practices in place of company-wide practices
  B. Implementing company-wide disaster recovery and business continuity plans

• Question 1702:

  The new Chief Information Officer (CIO) of company ABC, Joe has noticed that company XWY is always one step ahead with similar products. He tasked his Chief Security Officer to implement new security controls to ensure confidentiality of company ABC's proprietary data and complete accountability for all data transfers. Which of the following security controls did the Chief Security Officer implement to BEST meet these requirements? (Select Two)

  A. Redundancy
  B. Hashing
  C. DRP
  D. Digital Signatures
  E. Encryptions
  B. Hashing
  E. Encryptions

• Question 1703:

  The public key is used to perform which of the following? (Select THREE).

  A. Validate the CRL
  B. Validate the identity of an email sender
  C. Encrypt messages
  D. Perform key recovery
  E. Decrypt messages
  F. Perform key escrow
  B. Validate the identity of an email sender
  C. Encrypt messages
  E. Decrypt messages

  ---

  B: The sender uses the private key to create a digital signature. The message is, in effect, signed with the private key. The sender then sends the message to the receiver. The receiver uses the public key attached to the message to validate

  the digital signature. If the values match, the receiver knows the message is authentic.

  C: The sender uses the public key to encrypt a message, and the receiver uses the private key to decrypt the message.

  E: You encrypt data with the private key and decrypt with the public key, though the opposite is much more frequent.

  Public-key cryptography, also known as asymmetric cryptography, is a class of cryptographic protocols based on algorithms that require two separate keys, one of which is secret (or private) and one of which is public. Although different, the

  two parts of this key pair are mathematically linked.

• Question 1704:

  An organization receives an email that provides instruction on how to protect a system from being a target of new malware that is rapidly infecting systems. The incident response team investigates the notification and determines it to invalid and notifies users to disregard the email. Which of the following Best describes this occurrence?

  A. Phishing
  B. Scareware
  C. SPAM
  D. Hoax
  D. Hoax

• Question 1705:

  A programmer has allocated a 32 bit variable to store the results of an operation between two user supplied 4 byte operands. To which of the following types of attack is this application susceptible?

  A. XML injection
  B. Command injection
  C. Integer overflow
  D. Header manipulation
  C. Integer overflow

• Question 1706:

  A malicious individual used an unattended customer service kiosk in a busy store to change the prices of several products. The alteration was not noticed until several days later and resulted in the loss of several thousand dollars for the store. Which of the following would BEST prevent this from occurring again?

  A. Password expiration
  B. Screen locks
  C. Inventory control
  D. Asset tracking
  B. Screen locks

• Question 1707:

  Which of the following risks could IT management be mitigating by removing an all-in-one device?

  A. Continuity of operations
  B. Input validation
  C. Single point of failure
  D. Single sign on
  C. Single point of failure

  ---

  The major disadvantage of combining everything into one, although you do this to save costs, is to include a potential single point of failure and the reliance/dependence on a single vendor.

• Question 1708:

  After recovering from a data breach in which customer data was lost, the legal team meets with the Chief Security Officer (CSO) to discuss ways to better protect the privacy of customer data. Which of the following controls support this goal?

  A. Contingency planning
  B. Encryption and stronger access control
  C. Hashing and non-repudiation
  D. Redundancy and fault tolerance
  B. Encryption and stronger access control

  ---

  Encryption is used to protect data/contents/documents. Access control refers to controlling who accesses any data/contents/documents and to exercise authorized control to the accessing of that data.

• Question 1709:

  Which of the following is true about input validation in a client-server architecture, when data integrity is critical to the organization?

  A. It should be enforced on the client side only.
  B. It must be protected by SSL encryption.
  C. It must rely on the user's knowledge of the application.
  D. It should be performed on the server side.
  D. It should be performed on the server side.

  ---

  Client-side validation should only be used to improve user experience, never for security purposes. A client-side input validation check can improve application performance by catching malformed input on the client and, therefore, saving a roundtrip to the server. However, client side validation can be easily bypassed and should never be used for security purposes. Always use server-side validation to protect your application from malicious attacks.

• Question 1710:

  Users at a company report that a popular news website keeps taking them to a web page with derogatory content. This is an example of which of the following?

  A. Evil twin
  B. DNS poisoning
  C. Vishing
  D. Session hijacking
  B. DNS poisoning

  ---

  DNS spoofing (or DNS cache poisoning) is a computer hacking attack, whereby data is introduced into a Domain Name System (DNS) resolver's cache, causing the name server to return an incorrect IP address, diverting traffic to the attacker's computer (or any other computer). A domain name system server translates a human-readable domain name (such as example.com) into a numerical IP address that is used to route communications between nodes. Normally if the server doesn't know a requested translation it will ask another server, and the process continues recursively. To increase performance, a server will typically remember (cache) these translations for a certain amount of time, so that, if it receives another request for the same translation, it can reply without having to ask the other server again. When a DNS server has received a false translation and caches it for performance optimization, it is considered poisoned, and it supplies the false data to clients. If a DNS server is poisoned, it may return an incorrect IP address, diverting traffic to another computer (in this case, the server hosting the web page with derogatory content).