CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 251:

  Which of the following best describes the initial processing phase used in mobile device forensics?

  A. The phone should be powered down and the battery removed to preserve the state of data on any internal or removable storage utilized by the mobile device
  B. The removable data storage cards should be processed first to prevent data alteration when examining the mobile device
  C. The mobile device should be examined first, then removable storage and lastly the phone without removable storage should be examined again
  D. The phone and storage cards should be examined as a complete unit after examining the removable storage cards separately.
  A. The phone should be powered down and the battery removed to preserve the state of data on any internal or removable storage utilized by the mobile device

• Question 252:

  During a routine audit it is discovered that someone has been using a state administrator account to log into a seldom used server. The person used server. The person has been using the server to view inappropriate websites that are prohibited to end users. Which of the following could BEST prevent this from occurring again?

  A. Credential management
  B. Group policy management
  C. Acceptable use policies
  D. Account expiration policies
  D. Account expiration policies

• Question 253:

  The information security technician wants to ensure security controls are deployed and functioning as intended to be able to maintain an appropriate security posture. Which of the following security techniques is MOST appropriate to do this?

  A. Log audits
  B. System hardening
  C. Use IPS/IDS
  D. Continuous security monitoring
  D. Continuous security monitoring

  ---

  A security baseline is the security setting of a system that is known to be secure. This is the initial security setting of a system. Once the baseline has been applied, it must be maintained or improved. Maintaining the security baseline requires continuous monitoring.

• Question 254:

  A network technician is configuring clients for VLAN access. The network address for the sales department is 192.168.0.64 with a broadcast address of 192.168.0.71. Which of the following IP address/subnet mask combinations could be used to correctly configure a client machine in the sales department?

  A. 192.168.0.64/29
  B. 192.168.0.66/27
  C. 192.168.0.67/29
  D. 192.168.0.70/28
  A. 192.168.0.64/29

• Question 255:

  A website is breached, exposing the usernames and MD5 password hashes of its entire user base. Many of these passwords are later cracked using rainbow tables. Which of the following actions could have helped prevent the use of rainbow tables on the password hashes?

  A. use salting when computing MD5 hashes of the user passwords
  B. Use SHA as a hashing algorithm instead of MD%
  C. Require SSL for all user logins to secure the password hashes in transit
  D. Prevent users from using a dictionary word in their password
  B. Use SHA as a hashing algorithm instead of MD%

• Question 256:

  An administrator needs to secure a wireless network and restrict access based on the hardware address of the device. Which of the following solutions should be implemented?

  A. Use a stateful firewall
  B. Enable MAC filtering
  C. Upgrade to WPA2 encryption
  D. Force the WAP to use channel 1
  B. Enable MAC filtering

  ---

  MAC addresses are also known as an Ethernet hardware address (EHA), hardware address or physical address. Enabling MAC filtering would allow for a WAP to restrict or allow access based on the hardware address of the device.

• Question 257:

  A system security analyst wants to capture data flowing in and out of the enterprise. Which of the following would MOST likely help in achieving this goal?

  A. Taking screenshots
  B. Analyzing Big Data metadata
  C. Analyzing network traffic and logs
  D. Capturing system image
  C. Analyzing network traffic and logs

• Question 258:

  An achievement in providing worldwide Internet security was the signing of certificates associated with which of the following protocols?

  A. TCP/IP
  B. SSL
  C. SCP
  D. SSH
  B. SSL

  ---

  SSL (Secure Sockets Layer) is used for establishing an encrypted link between two computers, typically a web server and a browser. SSL is used to enable sensitive information such as login credentials and credit card numbers to be transmitted securely.

• Question 259:

  Which of the following is the BEST way to prevent Cross-Site Request Forgery (XSRF) attacks?

  A. Check the referrer field in the HTTP header
  B. Disable Flash content
  C. Use only cookies for authentication
  D. Use only HTTPS URLs
  A. Check the referrer field in the HTTP header

  ---

  XSRF or cross-site request forgery applies to web applications and is an attack that exploits the web application's trust of a user who known or is supposed to have been authenticated. This is accomplished by changing values in the HTTP header and even in the user's cookie to falsify access. It can be prevented by embedding additional authentication data into requests that allows the web application to detect requests from unauthorized locations. Examples are synchronizer token patterns, cookie-to-header tokens, and checking the HTTP Referrer header and the HTTP Origin header.

• Question 260:

  Which of the following results in datacenters with failed humidity controls? (Select TWO).

  A. Excessive EMI
  B. Electrostatic charge
  C. Improper ventilation
  D. Condensation
  E. Irregular temperature
  B. Electrostatic charge
  D. Condensation

  ---

  Humidity control prevents the buildup of static electricity in the environment. If the humidity drops much below 50 percent, electronic components are extremely vulnerable to damage from electrostatic shock. Most environmental systems also regulate humidity; however, a malfunctioning system can cause the humidity to be almost entirely extracted from a room. Make sure that environmental systems are regularly serviced. Electrostatic damage can occur when humidity levels get too low. Condensation is a direct result from failed humidity levels.