CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 181:

  Pete, the system administrator, has concerns regarding users losing their company provided smartphones. Pete's focus is on equipment recovery. Which of the following BEST addresses his concerns?

  A. Enforce device passwords.
  B. Use remote sanitation.
  C. Enable GPS tracking.
  D. Encrypt stored data.
  C. Enable GPS tracking.

  ---

  Global Positioning System (GPS) tracking can be used to identify its location of a stolen device and can allow authorities to recover the device. However, for GPS tracking to work, the device must have an Internet connection or a wireless phone service over which to send its location information.

• Question 182:

  Which of the following network architecture concepts is used to securely isolate at the boundary between networks?

  A. VLAN
  B. Subnetting
  C. DMZ
  D. NAT
  C. DMZ

  ---

  A demilitarized zone (DMZ) is an area of a network that is designed specifically for public users to access. The DMZ is a buffer network between the public untrusted Internet and the private trusted LAN. Often a DMZ is deployed through the use of a multihomed firewall.

• Question 183:

  Joe, a user, wants to send an encrypted email to Ann. Which of the following will Ann need to use to verify the validity's of Joe's certificate? (Select TWO).

  A. The CA's public key
  B. Joe's private key
  C. Ann's public key
  D. The CA's private key
  E. Joe's public key
  F. Ann's private key
  A. The CA's public key
  E. Joe's public key

  ---

  Joe wants to send a message to Ann. It's important that this message not be altered. Joe will use the private key to create a digital signature. The message is, in effect, signed with the private key. Joe then sends the message to Ann. Ann will use the public key attached to the message to validate the digital signature. If the values match, Ann knows the message is authentic and came from Joe. Ann will use a key provided by Joe--the public key--to decrypt the message. Most digital signature implementations also use a hash to verify that the message has not been altered, intentionally or accidently, in transit. Thus Ann would compare the signature area referred to as a message in the message with the calculated value digest (her private key in this case). If the values match, the message hasn't been tampered with and the originator is verified as the person they claim to be. This process provides message integrity, nonrepudiation, and authentication. A certificate authority (CA) is an organization that is responsible for issuing, revoking, and distributing certificates. A certificate is nothing more than a mechanism that associates the public key with an individual. If Joe wants to send Ann an encrypted e-mail, there should be a mechanism to verify to Ann that the message received from Mike is really from Joe. If a third party (the CA) vouches for Joe and Ann trusts that third party, Ann can assume that the message is authentic because the third party says so.

• Question 184:

  Which of the following are Data Loss Prevention (DLP) strategies that address data in transit issues? (Select TWO).

  A. Scanning printing of documents.
  B. Scanning of outbound IM (Instance Messaging).
  C. Scanning copying of documents to USB.
  D. Scanning of SharePoint document library.
  E. Scanning of shared drives.
  F. Scanning of HTTP user traffic.
  B. Scanning of outbound IM (Instance Messaging).
  F. Scanning of HTTP user traffic.

  ---

  DLP systems monitor the contents of systems (workstations, servers, networks) to make sure key content is not deleted or removed. They also monitor who is using the data (looking for unauthorized access) and transmitting the data. Outbound IM and HTTP user traffic refers to data over a network which falls within the DLP strategy.

• Question 185:

  Which of the following authentication services uses a ticket granting system to provide access?

  A. RADIUS
  B. LDAP
  C. TACACS+
  D. Kerberos
  D. Kerberos

  ---

  The basic process of Kerberos authentication is as follows:

  The subject provides logon credentials.

  The Kerberos client system encrypts the password and transmits the protected credentials to the KDC.

  The KDC verifies the credentials and then creates a ticket-granting ticket (TGT--a hashed form of the subject's password with the addition of a time stamp that indicates a valid lifetime). The TGT is encrypted and sent to the client. The client

  receives the TGT. At this point, the subject is an authenticated principle in the Kerberos realm.

  The subject requests access to resources on a network server. This causes the client to request a service ticket (ST) from the KDC.

  The KDC verifies that the client has a valid TGT and then issues an ST to the client. The ST includes a time stamp that indicates its valid lifetime.

  The client receives the ST.

  The client sends the ST to the network server that hosts the desired resource. The network server verifies the ST. If it's verified, it initiates a communication session with the client. From this point forward, Kerberos is no longer involved.

• Question 186:

  The server administrator has noted that most servers have a lot of free disk space and low memory utilization. Which of the following statements will be correct if the server administrator migrates to a virtual server environment?

  A. The administrator will need to deploy load balancing and clustering.
  B. The administrator may spend more on licensing but less on hardware and equipment.
  C. The administrator will not be able to add a test virtual environment in the data center.
  D. Servers will encounter latency and lowered throughput issues.
  B. The administrator may spend more on licensing but less on hardware and equipment.

  ---

  Migrating to a virtual server environment reduces cost by eliminating the need to purchase, manage, maintain and power physical machines. The fewer physical machines you have, the less money it costs.

• Question 187:

  During a recent audit, it was discovered that several user accounts belonging to former employees were still active and had valid VPN permissions. Which of the following would help reduce the amount of risk the organization incurs in this situation in the future?

  A. Time-of-day restrictions
  B. User access reviews
  C. Group-based privileges
  D. Change management policies
  B. User access reviews

• Question 188:

  An IT security technician is actively involved in identifying coding issues for her company.

  Which of the following is an application security technique that can be used to identify unknown weaknesses within the code?

  A. Vulnerability scanning
  B. Denial of service
  C. Fuzzing
  D. Port scanning
  C. Fuzzing

  ---

  Fuzzing is a software testing technique that involves providing invalid, unexpected, or random data to as inputs to a computer program. The program is then monitored for exceptions such as crashes, or failed validation, or memory leaks.

• Question 189:

  Users in an organization are experiencing when attempting to access certain websites. The users report that when they type in a legitimate URL, different boxes appear on the screen, making it difficult to access the legitimate sites. Which of the following would best mitigate this issue?

  A. Pop-up blockers
  B. URL filtering
  C. Antivirus
  D. Anti-spam
  C. Antivirus

• Question 190:

  A chief information officer (CIO) is concerned about PII contained in the organization's various data warehouse platforms. Since not all of the PII transferred to the organization is required for proper operation of the data warehouse application, the CIO requests the in needed PII data be parsed and securely discarded. Which of the following controls would be MOST appropriate in this scenario?

  A. Execution of PII data identification assessments
  B. Implementation of data sanitization routines
  C. Encryption of data-at-rest
  D. Introduction of education programs and awareness training
  E. Creation of policies and procedures
  E. Creation of policies and procedures