CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1741:

  The loss prevention department has purchased a new application that allows the employees to monitor the alarm systems at remote locations. However, the application fails to connect to the vendor's server and the users are unable to log in. Which of the following are the MOST likely causes of this issue? (Select TWO).

  A. URL filtering
  B. Role-based access controls
  C. MAC filtering
  D. Port Security
  E. Firewall rules
  A. URL filtering
  E. Firewall rules

  ---

  A URL filter is used to block URLs (websites) to prevent users accessing the website. Firewall rules act like ACLs, and they are used to dictate what traffic can pass between the firewall and the internal network. Three possible actions can be taken based on the rule's criteria: Block the connection Allow the connection Allow the connection only if it is secured

  Incorrect Options:

  B: Role-based Access Control is basically based on a user's job description. When a user is assigned a specific role in an environment, that user's access to objects is granted based on the required tasks of that role. Since the sales team needs to save and print reports, they would not be restricted if restrictions were role-based.

  C: A MAC filter is a list of authorized wireless client interface MAC addresses that is used by a WAP to block access to all unauthorized devices.

  D: Port security works at level 2 of the OSI model and allows an administrator to configure switch ports so that only certain MAC addresses can use the port.

  Reference:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp. 19, 61, 276

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis, 2014, p. 157

• Question 1742:

  Which of the following is the BEST technology for the sender to use in order to secure the in-band exchange of a shared key?

  A. Steganography
  B. Hashing algorithm
  C. Asymmetric cryptography
  D. Steam cipher
  C. Asymmetric cryptography

• Question 1743:

  Which of the following provides the BEST application availability and is easily expanded as demand grows?

  A. Server virtualization
  B. Load balancing
  C. Active-Passive Cluster
  D. RAID 6
  B. Load balancing

  ---

  Load balancing is a way of providing high availability by splitting the workload across multiple computers.

• Question 1744:

  Which of the following firewall types inspects Ethernet traffic at the MOST levels of the OSI model?

  A. Packet Filter Firewall
  B. Stateful Firewall
  C. Proxy Firewall
  D. Application Firewall
  B. Stateful Firewall

  ---

  Stateful inspections occur at all levels of the network.

• Question 1745:

  A security analyst is working on a project team responsible for the integration of an enterprise SSO solution. The SSO solution requires the use of an open standard for the exchange of authentication and authorization across numerous web based applications. Which of the following solutions is most appropriate for the analyst to recommend in this scenario?

  A. SAML
  B. XTACACS
  C. RADIUS
  D. TACACS+
  E. Secure LDAP
  A. SAML

• Question 1746:

  A technician has installed new vulnerability scanner software on a server that is joined to the company domain. The vulnerability scanner is able to provide visibility over the patch posture of all company's clients. Which of the following is being used?

  A. Gray box vulnerability testing
  B. Passive scan
  C. Credentialed scan
  D. Bypassing security controls
  A. Gray box vulnerability testing

• Question 1747:

  Which of the following concepts is enforced by certifying that email communications have been sent by who the message says it has been sent by?

  A. Key escrow
  B. Non-repudiation
  C. Multifactor authentication
  D. Hashing
  B. Non-repudiation

  ---

  Regarding digital security, the cryptological meaning and application of non-repudiation shifts to mean:

  A service that provides proof of the integrity and origin of data. An authentication that can be asserted to be genuine with high assurance.

• Question 1748:

  A company wishes to prevent unauthorized employee access to the data center. Which of the following is the MOST secure way to meet this goal?

  A. Use Motion detectors to signal security whenever anyone entered the center
  B. Mount CCTV cameras inside the center to monitor people as they enter
  C. Install mantraps at every entrance to the data center in conjunction with their badges
  D. Place biometric readers at the entrances to verify employees' identity
  C. Install mantraps at every entrance to the data center in conjunction with their badges

• Question 1749:

  The ore-sales engineering team needs to quickly provide accurate and up-to-date information to potential clients. This information includes design specifications and engineering data that is developed and stored using numerous applications across the enterprise. Which of the following authentication technique is MOST appropriate?

  A. Common access cards
  B. TOTP
  C. Single sign-on
  D. HOTP
  B. TOTP

• Question 1750:

  Which of the following would Pete, a security administrator, do to limit a wireless signal from penetrating the exterior walls?

  A. Implement TKIP encryption
  B. Consider antenna placement
  C. Disable the SSID broadcast
  D. Disable WPA
  B. Consider antenna placement

  ---

  Explanation: Cinderblock walls, metal cabinets, and other barriers can reduce signal strength significantly. Therefore, antenna placement is critical.