CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 201:

  One of the findings of risk assessment is that many of the servers on the data center subnet contain data that is in scope for PCI compliance, Everyone in the company has access to these servers, regardless of their job function. Which of the following should the administrator do?

  A. Segment the network
  B. Use 802.1X
  C. Deploy a proxy sever
  D. Configure ACLs
  E. Write an acceptable use policy
  A. Segment the network

• Question 202:

  A security engineer is tasked with encrypting corporate email. Which of the following technologies provide the MOST complete protection? (Select TWO)

  A. PGP/GPG
  B. S/MIME
  C. IPSEC
  D. Secure POP3
  E. IMAP
  F. HMAC
  B. S/MIME
  F. HMAC

• Question 203:

  The network security engineer just deployed an IDS on the network, but the Chief Technical Officer (CTO) has concerns that the device is only able to detect known anomalies. Which of the following types of IDS has been deployed?

  A. Signature Based IDS
  B. Heuristic IDS
  C. Behavior Based IDS
  D. Anomaly Based IDS
  A. Signature Based IDS

  ---

  A signature based IDS will monitor packets on the network and compare them against a database of signatures or attributes from known malicious threats.

• Question 204:

  A security administrator is reviewing logs and notices multiple attempts to access the HVAC controls by a workstation with an IP address from the open wireless network. Which of the following would be the best way to prevent this type of attack from occurring again?

  A. Implement VLANs to separate the HVAC
  B. Enable WPA2 security for the wireless network
  C. Install a HIDS to protect the HVAC system
  D. Enable Mac filtering for the wireless network
  D. Enable Mac filtering for the wireless network

• Question 205:

  Ann the security administrator has been reviewing logs and has found several overnight sales personnel are accessing the finance department's network shares. Which of the following security controls should be implemented to BEST remediate this?

  A. Mandatory access
  B. Separation of duties
  C. Time of day restrictions
  D. Role based access
  C. Time of day restrictions

• Question 206:

  A system administrator has concerns regarding their users accessing systems and secured areas using others' credentials. Which of the following can BEST address this concern?

  A. Create conduct policies prohibiting sharing credentials.
  B. Enforce a policy shortening the credential expiration timeframe.
  C. Implement biometric readers on laptops and restricted areas.
  D. Install security cameras in areas containing sensitive systems.
  C. Implement biometric readers on laptops and restricted areas.

  ---

  Biometrics is an authentication process that makes use of physical characteristics to establish identification. This will prevent users making use of others credentials.

• Question 207:

  Recent data loss on financial servers due to security breaches forced the system administrator to harden their systems. Which of the following algorithms with transport encryption would be implemented to provide the MOST secure web connections to manage and access these servers?

  A. SSL
  B. TLS
  C. HTTP
  D. FTP
  B. TLS

  ---

  Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL), are cryptographic protocols designed to provide communications security over a computer network. Transport Layer Security (TLS) is a security protocol that expands upon SSL. Many industry analysts predict that TLS will replace SSL in the future. TLS 1.0 was first defined in RFC 2246 in January 1999 as an upgrade of SSL Version 3.0. As of February 2015, the latest versions of all major web browsers support TLS 1.0, 1.1, and 1.2, have them enabled by default.

• Question 208:

  After copying a sensitive document from his desktop to a flash drive, Joe, a user, realizes that the document is no longer encrypted. Which of the following can a security technician implement to ensure that documents stored on Joe's desktop remain encrypted when moved to external media or other network based storage?

  A. Whole disk encryption
  B. Removable disk encryption
  C. Database record level encryption
  D. File level encryption
  D. File level encryption

  ---

  Encryption is used to ensure the confidentiality of information. In this case you should make use of file level encryption. File level encryption is a form of disk encryption where individual files or directories are encrypted by the file system itself. This is in contrast to full disk encryption where the entire partition or disk, in which the file system resides, is encrypted.

• Question 209:

  A security administrator has configured FTP in passive mode. Which of the following ports should the security administrator allow on the firewall by default?

  A. 20
  B. 21
  C. 22
  D. 23
  B. 21

  ---

  When establishing an FTP session, clients start a connection to an FTP server that listens on TCP port 21 by default.

• Question 210:

  After a production outage, which of the following documents contains detailed information on the order in which the system should be restored to service?

  A. Succession planning
  B. Disaster recovery plan
  C. Information security plan
  D. Business impact analysis
  B. Disaster recovery plan

  ---

  A disaster-recovery plan, or scheme, helps an organization respond effectively when a disaster occurs. Disasters may include system failure, network failure, infrastructure failure, and natural disaster. The primary emphasis of such a plan is reestablishing services and minimizing losses.