CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 261:

  Which of the following allows a company to maintain access to encrypted resources when employee turnover is high?

  A. Recovery agent
  B. Certificate authority
  C. Trust model
  D. Key escrow
  A. Recovery agent

  ---

  If an employee leaves and we need access to data he has encrypted, we can use the key recovery agent to retrieve his decryption key. We can use this recovered key to access the data.

  A key recovery agent is an entity that has the ability to recover a key, key components, or plaintext messages as needed. As opposed to escrow, recovery agents are typically used to access information that is encrypted with older keys.

• Question 262:

  An organization's security policy states that users must authenticate using something you do. Which of the following would meet the objectives of the security policy?

  A. Fingerprint analysis
  B. Signature analysis
  C. Swipe a badge
  D. Password
  B. Signature analysis

  ---

  Authentication systems or methods are based on one or more of these five factors:

  Something you know, such as a password or PIN

  Something you have, such as a smart card, token, or identification device Something you are, such as your fingerprints or retinal pattern (often called biometrics) Something you do, such as an action you must take to complete authentication

  Somewhere you are (this is based on geolocation)

  Writing your signature on a document is `something you do'. Someone can then analyze the signature to see if it matches one stored on record.

• Question 263:

  Which of the following wireless security technologies continuously supplies new keys for WEP?

  A. TKIP
  B. Mac filtering
  C. WPA2
  D. WPA
  A. TKIP

  ---

  TKIP is a suite of algorithms that works as a "wrapper" to WEP, which allows users of legacy WLAN equipment to upgrade to TKIP without replacing hardware. TKIP uses the original WEP programming but "wraps" additional code at the beginning and end to encapsulate and modify it.

• Question 264:

  Pete, an employee, is terminated from the company and the legal department needs documents from his encrypted hard drive. Which of the following should be used to accomplish this task? (Select TWO).

  A. Private hash
  B. Recovery agent
  C. Public key
  D. Key escrow
  E. CRL
  B. Recovery agent
  D. Key escrow

  ---

  B: If an employee leaves and we need access to data he has encrypted, we can use the key recovery agent to retrieve his decryption key. We can use this recovered key to access the data.

  A key recovery agent is an entity that has the ability to recover a key, key components, or plaintext messages as needed. As opposed to escrow, recovery agents are typically used to access information that is encrypted with older keys.

  D: If a key need to be recovered for legal purposes the key escrow can be used. Key escrow addresses the possibility that a third party may need to access keys. Under the conditions of key escrow, the keys needed to encrypt/decrypt data

  are held in an escrow account (think of the term as it relates to home mortgages) and made available if that third party requests them. The third party in question is generally the government, but it could also be an employer if an employee's

  private messages have been called into question.

• Question 265:

  A defense contractor wants to use one of its classified systems to support programs from multiple intelligence agencies. Which of the following MUST be in place between the intelligence agencies to allow this?

  A. A DRP
  B. An SLA
  C. A MOU
  D. A BCP
  C. A MOU

• Question 266:

  Ann is the data owner of financial records for a company. She has requested that she have the ability to assign read and write privileges to her folders. The network administrator is tasked with setting up the initial access control system and handing Ann's administrative capabilities. Which of the following systems should be deployed?

  A. Role-based
  B. Mandatory
  C. Discretionary
  D. Rule-based
  C. Discretionary

  ---

  In a Discretionary Access Control (DAC) model, network users have some fl exibility regarding how information is accessed. This model allows users to share information dynamically with other users.

  Discretionary access control (DAC) allows access to be granted or restricted by an object's owner based on user identity and on the discretion of the object owner. In this question, Ann has requested that she have the ability to assign read

  and write privileges to her folders. Read and write access to Ann's files will be granted by Ann at her discretion. Therefore, this is an example of Discretionary Access Control.

• Question 267:

  The security administrator is observing unusual network behavior from a workstation. The workstation is communicating with a known malicious destination over an encrypted tunnel. A full antivirus scan, with an updated antivirus definition file, does not show any signs of infection.

  Which of the following has happened on the workstation?

  A. Zero-day attack
  B. Known malware infection
  C. Session hijacking
  D. Cookie stealing
  A. Zero-day attack

  ---

  The vulnerability was unknown in that the full antivirus scan did not detect it. This is zero day vulnerability.

  A zero day vulnerability refers to a hole in software that is unknown to the vendor. This security hole is then exploited by hackers before the vendor becomes aware and hurries to fix it--this exploit is called a zero day attack. Uses of zero day

  attacks can include infiltrating malware, spyware or allowing unwanted access to user information. The term "zero day" refers to the unknown nature of the hole to those outside of the hackers, specifically, the developers. Once the

  vulnerability becomes known, a race begins for the developer, who must protect users.

• Question 268:

  Ann is an employee in the accounting department and would like to work on files from her home computer. She recently heard about a new personal cloud storage service with an easy web interface. Before uploading her work related files into the cloud for access, which of the following is the MOST important security concern Ann should be aware of?

  A. Size of the files
  B. Availability of the files
  C. Accessibility of the files from her mobile device
  D. Sensitivity of the files
  D. Sensitivity of the files

  ---

  Cloud computing has privacy concerns, regulation compliance difficulties, use of open- /closed-source solutions, and adoption of open standards. It is also unsure whether cloud- based data is actually secured (or even securable).

• Question 269:

  A security administrator is concerned about the strength of user's passwords. The company does not want to implement a password complexity policy. Which of the following can the security Administrator implement to mitigate the risk of an online password attack against users with weak passwords?

  A. Increase the password length requirements
  B. Increase the password history
  C. Shorten the password expiration period
  D. Decrease the account lockout time
  C. Shorten the password expiration period

  ---

  Reducing the password expiration period will require passwords to be changed at the end of that period. A password needs to be changed if it doesn't meet the compliance requirements of the company's password policy, or is evidently insecure. It will also need to be changed if it has been reused, or due to possible compromise as a result of a system intrusion. This will give online password attackers less time to crack the weak passwords.

• Question 270:

  A network administrator was to implement a solution that will allow authorized traffic, deny unauthorized traffic and ensure that appropriate ports are being used for a number of TCP and UDP protocols. Which of the following network controls would meet these requirements?

  A. Stateful firewall
  B. Web security gateway
  C. URL filter
  D. proxy server
  E. web application firewall
  A. Stateful firewall