CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 241:

  By default, which of the following uses TCP port 22? (Select THREE).

  A. FTPS
  B. STELNET
  C. TLS
  D. SCP
  E. SSL
  F. HTTPS
  G. SSH
  H. SFTP
  D. SCP
  G. SSH
  H. SFTP

  ---

  G: Secure Shell (SSH) is a cryptographic network protocol for securing data communication. It establishes a secure channel over an insecure network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login, remote command execution, but any network service can be secured with SSH. SSH uses port 22.

  D: SCP stands for Secure Copy. SCP is used to securely copy files over a network. SCP uses SSH to secure the connection and therefore uses port 22.

  H: SFTP stands for stands for Secure File Transfer Protocol and is used for transferring files using FTP over a secure network connection. SFTP uses SSH to secure the connection and therefore uses port 22.

• Question 242:

  Which of the following defines a business goal for system restoration and acceptable data loss?

  A. MTTR
  B. MTBF
  C. RPO
  D. Warm site
  C. RPO

  ---

  The recovery point objective (RPO) defines the point at which the system needs to be restored. This could be where the system was two days before it crashed (whip out the old backup tapes) or five minutes before it crashed (requiring complete redundancy). This is an essential business goal insofar as system restoration and acceptable data loss is concerned.

• Question 243:

  A technician installed two ground plane antennae on 802.11n bridges connecting two buildings 500 feet apart. After configuring both radios to work at 2.4ghz and implementing the correct configuration, connectivity tests between the two buildings are unsuccessful. Which of the following should the technician do to resolve the connectivity problem?

  A. Substitute wireless bridges for wireless access points
  B. Replace the 802.11n bridges with 802.11ac bridges
  C. Configure both bridges to use 5GHz instead of 2.4GHz
  D. Replace the current antennae with Yagi antennae
  D. Replace the current antennae with Yagi antennae

• Question 244:

  Which of the following risk mitigation strategies will allow Ann, a security analyst, to enforce least privilege principles?

  A. User rights reviews
  B. Incident management
  C. Risk based controls
  D. Annual loss expectancy
  A. User rights reviews

  ---

  A least privilege policy should be used when assigning permissions. Give users only the permissions and rights that they need to do their work and no more.

• Question 245:

  The security department has implemented a new laptop encryption product in the environment. The product requires one user name and password at the time of boot up and also another password after the operating system has finished loading. This setup is using which of the following authentication types?

  A. Two-factor authentication
  B. Single sign-on
  C. Multifactor authentication
  D. Single factor authentication
  D. Single factor authentication

  ---

  Single-factor authentication is when only one authentication factor is used. In this case, Something you know is being used as an authentication factor. Username, password, and PIN form part of Something you know.

• Question 246:

  A database administrator contacts a security administrator to request firewall changes for a connection to a new internal application. The security administrator notices that the new application uses a port typically monopolized by a virus. The security administrator denies the request and suggests a new port or service be used to complete the application's task. Which of the following is the security administrator practicing in this example?

  A. Explicit deny
  B. Port security
  C. Access control lists
  D. Implicit deny
  C. Access control lists

  ---

  Traffic that comes into the router is compared to ACL entries based on the order that the entries occur in the router. New statements are added to the end of the list. The router continues to look until it has a match. If no matches are found when the router reaches the end of the list, the traffic is denied. For this reason, you should have the frequently hit entries at the top of the list. There is an implied deny for traffic that is not permitted.

• Question 247:

  Which of the following exploits either a host file on a target machine or vulnerabilities on a DNS server in order to carry out URL redirection?

  A. Pharming
  B. Spoofing
  C. Vishing
  D. Phishing
  B. Spoofing

• Question 248:

  A technician wants to securely collect network device configurations and statistics through a scheduled and automated process. Which of the following should be implemented if configuration integrity is most important and a credential compromise should not allow interactive logons?

  A. SNMPv3
  B. TFTP
  C. SSH
  D. TLS
  A. SNMPv3

  ---

  SNMPv3 provides the following security features:

  Message integrity--Ensures that a packet has not been tampered with in transit. Authentication--Determines that the message is from a valid source. Encryption--Scrambles the content of a packet to prevent it from being learned by an

  unauthorized source.

• Question 249:

  Users are unable to connect to the web server at IP 192.168.0.20. Which of the following can be inferred of a firewall that is configured ONLY with the following ACL? PERMIT TCP ANY HOST 192.168.0.10 EQ 80 PERMIT TCP ANY HOST 192.168.0.10 EQ 443

  A. It implements stateful packet filtering.
  B. It implements bottom-up processing.
  C. It failed closed.
  D. It implements an implicit deny.
  D. It implements an implicit deny.

  ---

  Implicit deny is the default security stance that says if you aren't specifically granted access or privileges for a resource, you're denied access by default. Implicit deny is the default response when an explicit allow or deny isn't present.

• Question 250:

  A technician is configuring a switch to support VOPIP phones. The technician wants to ensure the phones do not require external power packs. Which of the following would allow the phones to be powered using the network connection?

  A. PoE+
  B. PBX
  C. PSTN
  D. POTS
  A. PoE+