CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 11:

  After several thefts a Chief Executive Officer (CEO) wants to ensure unauthorized do not have to corporate grounds or its employees. The CEO just approved new budget line items for fences, lighting, locks and CCTVs. Which of the following is the primary focus?

  A. Safety
  B. Confidentiality
  C. Availability
  D. Integrity
  A. Safety

• Question 12:

  Which of the following would be a reason for developers to utilize an AES cipher in CCM mode (Counter with Chain Block Message Authentication Code)?

  A. It enables the ability to reverse the encryption with a separate key
  B. It allows for one time pad inclusions with the passphrase
  C. Counter mode alternates between synchronous and asynchronous encryption
  D. It allows a block cipher to function as a steam cipher
  D. It allows a block cipher to function as a steam cipher

• Question 13:

  Which of the following should be used to authenticate and log connections from wireless users connecting with EAP-TLS?

  A. Kerberos
  B. LDAP
  C. SAML
  D. RADIUS
  D. RADIUS

  ---

  EAP-TLS, defined in RFC 2716, is an IETF open standard, and is well-supported among wireless vendors. It offers a good deal of security, since TLS is considered the successor of the SSL standard. It uses PKI to secure communication to the RADIUS authentication server.

  Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for users who connect and use a network service. Because of the broad support and the ubiquitous nature of the RADIUS protocol, it is often used by ISPs and enterprises to manage access to the Internet or internal networks, wireless networks, and integrated e- mail services.

• Question 14:

  Joe the system administrator has noticed an increase in network activity from outside sources. He wishes to direct traffic to avoid possible penetration while heavily monitoring the traffic with little to no impact on the current server load. Which of the following would be BEST course of action?

  A. Apply an additional firewall ruleset on the user PCs.
  B. Configure several servers into a honeynet
  C. Implement an IDS to protect against intrusion
  D. Enable DNS logging to capture abnormal traffic
  B. Configure several servers into a honeynet

• Question 15:

  A company has had their web application become unavailable several times in the past few months due to increased demand. Which of the following should the company perform to increase availability?

  A. Implement a web application firewall to prevent DDoS attacks'
  B. Configure the firewall to work with the IPS to rate limit customer requests
  C. Implement a load balancer to distribute traffic based on back end server utilization
  D. Configure the web server to detect race conditions and automatically restart the web services
  C. Implement a load balancer to distribute traffic based on back end server utilization

• Question 16:

  A company has several conference rooms with wired network jacks that are used by both employees and guests. Employees need access to internal resources and guests only need access to the Internet. Which of the following combinations is BEST to meet the requirements?

  A. NAT and DMZ
  B. VPN and IPSec
  C. Switches and a firewall
  D. 802.1x and VLANs
  D. 802.1x and VLANs

  ---

  802.1x is a port-based authentication mechanism. It's based on Extensible Authentication Protocol (EAP) and is commonly used in closed-environment wireless networks. 802.1x was initially used to compensate for the weaknesses of Wired Equivalent Privacy (WEP), but today it's often used as a component in more complex authentication and connection- management systems, including Remote Authentication Dial-In User Service (RADIUS), Diameter, Cisco System's Terminal Access Controller Access-Control System Plus (TACACS+), and Network Access Control (NAC).

  A virtual local area network (VLAN) is a hardware-imposed network segmentation created by switches. By default, all ports on a switch are part of VLAN 1. But as the switch administrator changes the VLAN assignment on a port-by-port basis, various ports can be grouped together and be distinct from other VLAN port designations. VLANs are used for traffic management. Communications between ports within the same VLAN occur without hindrance, but communications between VLANs require a routing function.

• Question 17:

  A company recently experienced data loss when a server crashed due to a midday power outage. Which of the following should be used to prevent this from occurring again?

  A. Recovery procedures
  B. EMI shielding
  C. Environmental monitoring
  D. Redundancy
  D. Redundancy

  ---

  Redundancy refers to systems that either are duplicated or fail over to other systems in the event of a malfunction (in this case a power outage). Failover refers to the process of reconstructing a system or switching over to other systems when a failure is detected. In the case of a server, the server switches to a redundant server when a fault is detected. This strategy allows service to continue uninterrupted until the primary server can be restored.

• Question 18:

  During a recent audit, it was discovered that many services and desktops were missing security patches. Which of the following BEST describes the assessment that was performed to discover this issue?

  A. Network mapping
  B. Vulnerability scan
  C. Port Scan
  D. Protocol analysis
  B. Vulnerability scan

• Question 19:

  After encrypting all laptop hard drives, an executive officer's laptop has trouble booting to the operating system. Now that it is successfully encrypted the helpdesk cannot retrieve the data. Which of the following can be used to decrypt the information for retrieval?

  A. Recovery agent
  B. Private key
  C. Trust models
  D. Public key
  A. Recovery agent

  ---

  To access the data the hard drive need to be decrypted. To decrypt the hard drive you would need the proper private key. The key recovery agent can retrieve the required key. A key recovery agent is an entity that has the ability to recover a key, key components, or plaintext messages as needed.

• Question 20:

  Which of the following is the default port for TFTP?

  A. 20
  B. 69
  C. 21
  D. 68
  B. 69

  ---

  TFTP makes use of UDP port 69.