CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1731:

  Joe, the system administrator, has been asked to calculate the Annual Loss Expectancy (ALE) for a $5,000 server, which often crashes. In the past year, the server has crashed 10 times, requiring a system reboot to recover with only 10% loss of data or function. Which of the following is the ALE of this server?

  A. $500
  B. $5,000
  C. $25,000
  D. $50,000
  B. $5,000

  ---

  SLE ?ARO = ALE, where SLE is equal to asset value (AV) times exposure factor (EF); and ARO is the annualized rate of occurrence. (5000 x 10) x 0.1 = 5000

• Question 1732:

  Internet banking customers currently use an account number and password to access their online accounts. The bank wants to improve security on high value transfers by implementing a system which call users back on a mobile phone to authenticate the transaction with voice verification. Which of the following authentication factors are being used by the bank?

  A. Something you know, something you do, and something you have
  B. Something you do, somewhere you are, and something you have
  C. Something you are, something you do and something you know
  D. Something you have, something you are, and something you know
  C. Something you are, something you do and something you know

• Question 1733:

  The programmer confirms that there is potential for a buffer overflow on one of the data input fields in a corporate application. The security analyst classifies this as a (N).

  A. Threat
  B. Risk
  C. Attack
  D. Vulnerability
  D. Vulnerability

• Question 1734:

  The systems administrator wishes to implement a hardware-based encryption method that could also be used to sign code. They can achieve this by:

  A. Utilizing the already present TPM.
  B. Configuring secure application sandboxes.
  C. Enforcing whole disk encryption.
  D. Moving data and applications into the cloud.
  A. Utilizing the already present TPM.

  ---

  Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the system's motherboard and is enabled or disable in BIOS. It helps with hash key generation and stores cryptographic keys, passwords, or certificates.

• Question 1735:

  Having adequate lighting on the outside of a building is an example of which of the following security controls?

  A. Deterrent
  B. Compensating
  C. Detective
  D. Preventative
  A. Deterrent

• Question 1736:

  Ann is starting a disaster recovery program. She has gathered specifics and team members for a meeting on site. Which of the following types of tests is this?

  A. Structured walkthrough
  B. Full Interruption test
  C. Checklist test
  D. Tabletop exercise
  A. Structured walkthrough

  ---

  A structured walkthrough test of a recovery plan involves representatives from each of the functional areas coming together to review the plan to determine if the plan pertaining to their area is accurate and complete and can be implemented when required.

• Question 1737:

  Which of the following has serious security implications for large organizations and can potentially allow an attacker to capture conversations?

  A. Subnetting
  B. NAT
  C. Jabber
  D. DMZ
  C. Jabber

  ---

  Jabber is a new unified communications application and could possible expose you to attackers that want to capture conversations because Jabber provides a single interface across presence, instant messaging, voice, video messaging, desktop sharing and conferencing.

• Question 1738:

  A company is trying to implement physical deterrent controls to improve the overall security posture of their data center. Which of the following BEST meets their goal?

  A. Visitor logs
  B. Firewall
  C. Hardware locks
  D. Environmental monitoring
  C. Hardware locks

  ---

  Hardware security involves applying physical security modifications to secure the system(s) and preventing them from leaving the facility. Don't spend all of your time worrying about intruders coming through the network wire while overlooking the obvious need for physical security. Hardware security involves the use of locks to prevent someone from picking up and carrying out your equipment.

• Question 1739:

  An administrator wants to minimize the amount of time needed to perform backups during the week. It is also acceptable to the administrator for restoration to take an extended time frame.

  Which of the following strategies would the administrator MOST likely implement?

  A. Full backups on the weekend and incremental during the week
  B. Full backups on the weekend and full backups every day
  C. Incremental backups on the weekend and differential backups every day
  D. Differential backups on the weekend and full backups every day
  A. Full backups on the weekend and incremental during the week

  ---

  A full backup is a complete, comprehensive backup of all fi les on a disk or server. The full backup is current only at the time it's performed. Once a full backup is made, you have a complete archive of the system at that point in time. A system shouldn't be in use while it undergoes a full backup because some fi les may not get backed up. Once the system goes back into operation, the backup is no longer current. A full backup can be a time- consuming process on a large system. An incremental backup is a partial backup that stores only the information that has been changed since the last full or the last incremental backup. If a full backup were performed on a Sunday night, an incremental backup done on Monday night would contain only the information that changed since Sunday night. Such a backup is typically considerably smaller than a full backup. Each incremental backup must be retained until a full backup can be performed. Incremental backups are usually the fastest backups to perform on most systems, and each incremental backup tape is relatively small.

• Question 1740:

  A group of users from multiple departments are working together on a project and will maintain their digital output in a single location. Which of the following is the BEST method to ensure access is restricted to use by only these users?

  A. Mandatory access control
  B. Rule-based access
  C. Group based privileges
  D. User assigned privileges
  D. User assigned privileges