CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 231:

  Joe wants to employ MD5 hashing on the company file server. Which of the following is Joe trying to achieve?

  A. Availability
  B. Confidentiality
  C. Non repudiation
  D. Integrity
  B. Confidentiality

• Question 232:

  An administrator needs to protect against downgrade attacks due to various vulnerabilities in SSL/TLS. Which of the following actions should be performed? (Select TWO)

  A. Set minimum protocol supported
  B. Request a new certificate from the CA
  C. Configure cipher order
  D. Disable flash cookie support
  E. Re-key the SSL certificate
  F. Add the old certificate to the CRL
  C. Configure cipher order
  E. Re-key the SSL certificate

• Question 233:

  An attacker captures the encrypted communication between two parties for a week, but is unable to decrypt the messages. The attacker then compromises the session key during one exchange and successfully compromises a single message. The attacker plans to use this key to decrypt previously captured and future communications, but is unable to. This is because the encryption scheme in use adheres to:

  A. Asymmetric encryption
  B. Out-of-band key exchange
  C. Perfect forward secrecy
  D. Secure key escrow
  A. Asymmetric encryption

• Question 234:

  A server with the IP address of 10.10.2.4 has been having intermittent connection issues. The logs show repeated connection attempts from the following IPs:

  10.10.3.16

  10.10.3.23

  212.178.24.26

  217.24.94.83

  These attempts are overloading the server to the point that it cannot respond to traffic. Which of the following attacks is occurring?

  A. XSS
  B. DDoS
  C. DoS
  D. Xmas
  B. DDoS

  ---

  A Distributed Denial of Service (DDoS) attack is an attack from several different computers targeting a single computer.

  One common method of attack involves saturating the target machine with external communications requests, so much so that it cannot respond to legitimate traffic, or responds so slowly as to be rendered essentially unavailable. Such

  attacks usually lead to a server overload.

  A distributed denial-of-service (DDoS) attack occurs when multiple systems flood the bandwidth or resources of a targeted system, usually one or more web servers. Such an attack is often the result of multiple compromised systems (for

  example a botnet) flooding the targeted system with traffic. When a server is overloaded with connections, new connections can no longer be accepted. The major advantages to an attacker of using a distributed denial-of-service attack are

  that multiple machines can generate more attack traffic than one machine, multiple attack machines are harder to turn off than one attack machine, and that the behavior of each attack machine can be stealthier, making it harder to track and

  shut down. These attacker advantages cause challenges for defense mechanisms. For example, merely purchasing more incoming bandwidth than the current volume of the attack might not help, because the attacker might be able to simply

  add more attack machines. This after all will end up completely crashing a website for periods of time. Malware can carry DDoS attack mechanisms; one of the better-known examples of this was MyDoom. Its DoS mechanism was triggered

  on a specific date and time. This type of DDoS involved hardcoding the target IP address prior to release of the malware and no further interaction was necessary to launch the attack.

• Question 235:

  An SSL session is taking place. After the handshake phase has been established and the cipher has been selected, which of the following are being used to secure data in transport? (Select TWO)

  A. Symmetrical encryption
  B. Ephemeral Key generation
  C. Diffie-Hellman
  D. AES
  E. RSA
  F. Asymmetrical encryption
  C. Diffie-Hellman
  E. RSA

• Question 236:

  Ann, a technician, wants to implement a single protocol on a remote server which will enable her to encrypt and proxy all of her traffic though the remote server via SOCKS5. Which of the following should Ann enable to support both encryption and proxy services?

  A. SSH
  B. IPSEC
  C. TLS
  D. HTTPS
  A. SSH

• Question 237:

  A system administrator has been instructed by the head of security to protect their data at- rest.

  Which of the following would provide the strongest protection?

  A. Prohibiting removable media
  B. Incorporating a full-disk encryption system
  C. Biometric controls on data center entry points
  D. A host-based intrusion detection system
  B. Incorporating a full-disk encryption system

  ---

  Full disk encryption can be used to encrypt an entire volume with 128-bit encryption. When the entire volume is encrypted, the data is not accessible to someone who might boot another operating system in an attempt to bypass the computer's security. Full disk encryption is sometimes referred to as hard drive encryption. This would be best to protect data that is at rest.

• Question 238:

  An administrator needs to segment internal traffic between layer 2 devices within the LAN. Which of the following types of network design elements would MOST likely be used?

  A. Routing
  B. DMZ
  C. VLAN
  D. NAT
  C. VLAN

  ---

  A virtual local area network (VLAN) is a hardware-imposed network segmentation created by switches. VLANs are used for traffic management. Communications between ports within the same VLAN occur without hindrance, but communications between VLANs require a routing function.

• Question 239:

  An encrypted message is sent using PKI from Sara, a client, to a customer. Sara claims she never sent the message. Which of the following aspects of PKI BEST ensures the identity of the sender?

  A. CRL
  B. Non-repudiation
  C. Trust models
  D. Recovery agents
  B. Non-repudiation

  ---

  Nonrepudiation prevents one party from denying actions they carried out. This means that the identity of the email sender will not be repudiated.

• Question 240:

  A user has forgotten their account password. Which of the following is the BEST recovery strategy?

  A. Upgrade the authentication system to use biometrics instead.
  B. Temporarily disable password complexity requirements.
  C. Set a temporary password that expires upon first use.
  D. Retrieve the user password from the credentials database.
  C. Set a temporary password that expires upon first use.

  ---

  Since a user's password isn't stored on most operating systems (only a hash value is kept), most operating systems allow the administrator to change the value for a user who has forgotten theirs. This new value allows the user to log in and then immediately change it to another value that they can (ideally) remember. Also setting a temporary password to expire upon first use will not allow a hacker the opportunity or time to use it.