CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 221:

  Pete, a network administrator, is implementing IPv6 in the DMZ. Which of the following protocols must he allow through the firewall to ensure the web servers can be reached via IPv6 from an IPv6 enabled Internet host?

  A. TCP port 443 and IP protocol 46
  B. TCP port 80 and TCP port 443
  C. TCP port 80 and ICMP
  D. TCP port 443 and SNMP
  B. TCP port 80 and TCP port 443

  ---

  HTTP and HTTPS, which uses TCP port 80 and TCP port 443 respectively, is necessary for Communicating with Web servers. It should therefore be allowed through the firewall.

• Question 222:

  Which of the following should be used when a business needs a block cipher with minimal key size for internal encryption?

  A. AES
  B. Blowfish
  C. RC5
  D. 3DES
  B. Blowfish

  ---

  Blowfish is an encryption system invented by a team led by Bruce Schneier that performs a 64-bit block cipher at very fast speeds. It is a symmetric block cipher that can use variable- length keys (from 32 bits to 448 bits).

• Question 223:

  A company's chief information officer (CIO) has analyzed the financial loss associated with the company's database breach. They calculated that one single breach could cost the company $1,000,000 at a minimum. Which of the following documents is the CIO MOST likely updating?

  A. Succession plan
  B. Continuity of operation plan
  C. Disaster recovery plan
  D. Business impact analysis
  D. Business impact analysis

  ---

  Business impact analysis (BIA) is the process of evaluating all of the critical systems in an organization to define impact and recovery plans. BIA isn't concerned with external threats or vulnerabilities; the analysis focuses on the impact a loss would have on the organization. A BIA comprises the following: identifying critical functions, prioritizing critical business functions, calculating a timeframe for critical systems loss, and estimating the tangible impact on the organization.

• Question 224:

  Jane, an individual, has recently been calling various financial offices pretending to be another person to gain financial information. Which of the following attacks is being described?

  A. Phishing
  B. Tailgating
  C. Pharming
  D. Vishing
  D. Vishing

  ---

  Vishing (voice or VoIP phishing) is an electronic fraud tactic in which individuals are tricked into revealing critical financial or personal information to unauthorized entities. Vishing works like phishing but does not always occur over the Internet

  and is carried out using voice technology. A vishing attack can be conducted by voice email, VoIP (voice over IP), or landline or cellular telephone.

  The potential victim receives a message, often generated by speech synthesis, indicating that suspicious activity has taken place in a credit card account, bank account, mortgage account or other financial service in their name. The victim is

  told to call a specific telephone number and provide information to "verify identity" or to "ensure that fraud does not occur." If the attack is carried out by telephone, caller ID spoofing can cause the victim's set to indicate a legitimate source,

  such as a bank or a government agency.

  Vishing is difficult for authorities to trace, particularly when conducted using VoIP. Furthermore, like many legitimate customer services, vishing scams are often outsourced to other countries, which may render sovereign law enforcement

  powerless.

  Consumers can protect themselves by suspecting any unsolicited message that suggests they are targets of illegal activity, no matter what the medium or apparent source. Rather than calling a number given in any unsolicited message, a

  consumer should directly call the institution named, using a number that is known to be valid, to verify all recent activity and to ensure that the account information has not been tampered with.

• Question 225:

  A security analyst has a sample of malicious software and needs to know what the sample in a carefully controlled and monitored virtual machine to observe the software's behavior. After the software has run, the analyst returns the virtual machines OS to a pre-defined know good state using what feature of virtualization?

  A. Host elasticity
  B. Antivirus
  C. sandbox
  D. snapshots
  D. snapshots

• Question 226:

  The software developer is responsible for writing the code and promoting from the development network to the quality network. The network administrator is responsible for promoting code to the application servers. Which of the following practices are they following to ensure application integrity?

  A. Job rotation
  B. Implicit deny
  C. Least privilege
  D. Separation of duties
  D. Separation of duties

• Question 227:

  Which of the following protocols provides transport security for virtual terminal emulation?

  A. TLS
  B. SSH
  C. SCP
  D. S/MIME
  B. SSH

  ---

  Secure Shell (SSH) is a tunneling protocol originally designed for Unix systems. It uses encryption to establish a secure connection between two systems. SSH also provides alternative, security-equivalent programs for such Unix standards as Telnet, FTP, and many other communications-oriented applications. SSH is available for use on Windows systems as well. This makes it the preferred method of security for Telnet and other cleartext oriented programs in the Unix environment.

• Question 228:

  A company's password and authentication policies prohibit the use of shared passwords and transitive trust. Which of the following if implemented would violate company policy? (Select TWO)

  A. Discretionary access control
  B. Federation
  C. Single sign-on
  D. TOTP
  E. Two-factor authentication
  A. Discretionary access control
  C. Single sign-on

• Question 229:

  Which of the following tools would allow Ann, the security administrator, to be able to BEST quantify all traffic on her network?

  A. Honeypot
  B. Port scanner
  C. Protocol analyzer
  D. Vulnerability scanner
  C. Protocol analyzer

  ---

  A Protocol Analyzer is a hardware device or more commonly a software program used to capture network data communications sent between devices on a network. By capturing and analyzing the packets sent between the systems on the

  network, Ann would be able to quantify the amount of traffic on the network.

  Well known software protocol analyzers include Message Analyzer (formerly Network Monitor) from Microsoft and Wireshark (formerly Ethereal).

• Question 230:

  A security technician has been asked to recommend an authentication mechanism that will allow users to authenticate using a password that will only be valid for a predefined time interval. Which of the following should the security technician recommend?

  A. CHAP
  B. TOTP
  C. HOTP
  D. PAP
  B. TOTP

  ---

  Explanation: Time-based one-time password (TOTP) tokens are devices or applications that generate passwords at fixed time intervals. Therefore, the password will only be valid for a predefined time interval.