CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 1761:

  A security technician wants to implement stringent security controls over web traffic by restricting the client source TCP ports allowed through the corporate firewall. Which of the following should the technician implement?

  A. Deny port 80 and 443 but allow proxies
  B. Only allow port 80 and 443
  C. Only allow ports above 1024
  D. Deny ports 80 and allow port 443
  B. Only allow port 80 and 443

• Question 1762:

  Ann, a security administrator, has been tasked by the Chief information officer (CIO) to have the company's application servers tested using black box methodology. Which of the following BEST describes what Ann has been asked to do?

  A. Verify the server's patch level and attempt various known exploits that might be possible due to missing security updates.
  B. Simulate an external attack where the attackers have been provided with user access privileges on the server.
  C. Organize the application developers to attempt to compromise their servers by entering invalid data into their entry fields.
  D. Simulate an external attack where the attackers have no information regarding the software or systems in place.
  C. Organize the application developers to attempt to compromise their servers by entering invalid data into their entry fields.

• Question 1763:

  A developer needs to utilize AES encryption in an application but requires the speed of encryption and decryption to be as fast as possible. The data that will be secured is not sensitive so speed is valued over encryption complexity. Which of the following would BEST satisfy these requirements?

  A. AES with output feedback
  B. AES with cipher feedback
  C. AES with cipher block chaining
  D. AES with counter mode
  B. AES with cipher feedback

• Question 1764:

  Which of the following is the summary of loss for a given year?

  A. MTBF
  B. ALE
  C. SLA
  D. ARO
  B. ALE

  ---

  Explanation: ALE stands for Annualized Loss Expectancy

• Question 1765:

  The security team would like to gather intelligence about the types of attacks being launched against the organization. Which of the following would provide them with the MOST information?

  A. Implement a honeynet
  B. Perform a penetration test
  C. Examine firewall logs
  D. Deploy an IDS
  A. Implement a honeynet

  ---

  A honeynet is a network set up with intentional vulnerabilities; its purpose is to invite attack, so that an attacker's activities and methods can be studied and that information used to increase network security. A honeynet contains one or more honey pots, which are computer systems on the Internet expressly set up to attract and "trap" people who attempt to penetrate other people's computer systems. Although the primary purpose of a honeynet is to gather information about attackers' methods and motives, the decoy network can benefit its operator in other ways, for example by diverting attackers from a real network and its resources. The Honeynet Project, a non-profit research organization dedicated to computer security and information sharing, actively promotes the deployment of honeynets. In addition to the honey pots, a honeynet usually has real applications and services so that it seems like a normal network and a worthwhile target. However, because the honeynet doesn't actually serve any authorized users, any attempt to contact the network from without is likely an illicit attempt to breach its security, and any outbound activity is likely evidence that a system has been compromised. For this reason, the suspect information is much more apparent than it would be in an actual network, where it would have to be found amidst all the legitimate network data. Applications within a honeynet are often given names such as "Finances" or "Human Services" to make them sound appealing to the attacker.

  A virtual honeynet is one that, while appearing to be an entire network, resides on a single server.

• Question 1766:

  A network engineer is configuring a VPN tunnel connecting a company's network to a business partner. Which of the following protocols should be used for key exchange?

  A. SHA-1
  B. RC4
  C. Blowfish
  D. Diffie-Hellman
  A. SHA-1

• Question 1767:

  An information system owner has supplied a new requirement to the development team that calls for increased non-repudiation within the application. After undergoing several audits, the owner determined that current levels of non-repudiation were insufficient. Which of the following capabilities would be MOST appropriate to consider implementing is response to the new requirement?

  A. Transitive trust
  B. Symmetric encryption
  C. Two-factor authentication
  D. Digital signatures
  E. One-time passwords
  D. Digital signatures

• Question 1768:

  While performing surveillance activities an attacker determines that an organization is using 802.1X to secure LAN access. Which of the following attack mechanisms can the attacker utilize to bypass the identified network security controls?

  A. MAC spoofing
  B. Pharming
  C. Xmas attack
  D. ARP poisoning
  D. ARP poisoning

• Question 1769:

  After running into the data center with a vehicle, attackers were able to enter through the hole in the building and steal several key servers in the ensuing chaos. Which of the following security measures can be put in place to mitigate the issue from occurring in the future?

  A. Fencing
  B. Proximity readers
  C. Video surveillance
  D. Bollards
  D. Bollards

  ---

  To stop someone from entering a facility, barricades or gauntlets can be used. These are often used in conjunction with guards, fencing, and other physical security measures. Bollards are physical barriers that are strong enough to withstand impact with a vehicle.

• Question 1770:

  Results from a vulnerability analysis indicate that all enabled virtual terminals on a router can be accessed using the same password. The company's network device security policy mandates that at least one virtual terminal have a different password than the other virtual terminals. Which of the following sets of commands would meet this requirement?

  A. line vty 0 6 P@s5W0Rd password line vty 7 Qwer++!Y password
  B. line console 0 password password line vty 0 4 password P@s5W0Rd
  C. line vty 0 3 password Qwer++!Y line vty 4 password P@s5W0Rd
  D. line vty 0 3 password Qwer++!Y line console 0 password P@s5W0Rd
  C. line vty 0 3 password Qwer++!Y line vty 4 password P@s5W0Rd

  ---

  The VTY lines are the Virtual Terminal lines of the router, used solely to control inbound Telnet connections. They are virtual, in the sense that they are a function of software - there is no hardware associated with them.

  Two numbers follow the keyword VTY because there is more than one VTY line for router access. The default number of lines is five on many Cisco routers. Here, I'm configuring one password for all terminal (VTY) lines. I can specify the

  actual terminal or VTY line numbers as a range. The syntax that you'll see most often, vty 0 4, covers all five terminal access lines.