CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 271:

  The chief security officer (CS0) has issued a new policy that requires that all internal websites be configured for HTTPS traffic only. The network administrator has been tasked to update all internal sites without incurring additional costs. Which of the following is the best solution for the network administrator to secure each internal website?

  A. Use certificates signed by the company CA
  B. Use a signing certificate as a wild card certificate
  C. Use certificates signed by a public ca
  D. Use a self-signed certificate on each internal server
  A. Use certificates signed by the company CA

• Question 272:

  Which of the following protocols provides for mutual authentication of the client and server?

  A. Two-factor authentication
  B. Radius
  C. Secure LDAP
  D. Biometrics
  C. Secure LDAP

  ---

  C: The LDAP directory service is based on a client-server model. The function of LDAP is to enable access to an existing directory. Because it is a client-server model it makes provision for mutual authentication between the two parties.

• Question 273:

  Which of the following ports should be opened on a firewall to allow for NetBIOS communication? (Select TWO).

  A. 110
  B. 137
  C. 139
  D. 143
  E. 161
  F. 443
  B. 137
  C. 139

  ---

  Explanation: NetBIOS provides four distinct services:

  Name service for name registration and resolution (port: 137/udp) Name service for name registration and resolution (port: 137/tcp) Datagram distribution service for connectionless communication (port: 138/udp) Session service for

  connection-oriented communication (port: 139/tcp)

• Question 274:

  Which of the following is an effective way to ensure the BEST temperature for all equipment within a datacenter?

  A. Fire suppression
  B. Raised floor implementation
  C. EMI shielding
  D. Hot or cool aisle containment
  D. Hot or cool aisle containment

  ---

  There are often multiple rows of servers located in racks in server rooms. The rows of servers are known as aisles, and they can be cooled as hot aisles and cold aisles. With a hot aisle, hot air outlets are used to cool the equipment, whereas with cold aisles, cold air intake is used to cool the equipment. Combining the two, you have cold air intake from below the aisle and hot air outtake above it, providing constant circulation. This is a more effective way of controlling temperature to safeguard your equipment in a data center.

• Question 275:

  The security manager received a report that an employee was involved in illegal activity and has saved data to a workstation's hard drive. During the investigation, local law enforcement's criminal division confiscates the hard drive as evidence. Which of the following forensic procedures is involved?

  A. Chain of custody
  B. System image
  C. Take hashes D. Order of volatility
  A. Chain of custody

  ---

  Chain of custody deals with how evidence is secured, where it is stored, and who has access to it. When you begin to collect evidence, you must keep track of that evidence at all times and show who has it, who has seen it, and where it has been.

• Question 276:

  Which of the following allows an organization to store a sensitive PKI component with a trusted third party?

  A. Trust model
  B. Public Key Infrastructure
  C. Private key
  D. Key escrow
  D. Key escrow

  ---

  Sensitive PKI data, such as private keys, can be put into key escrow data. The key escrow data can be kept at a trusted third party.

  Key escrow is an arrangement in which the keys needed to decrypt encrypted data are held in escrow so that, under certain circumstances, an authorized third party may gain access to those keys. These third parties may include businesses,

  who may want access to employees' private communications, or governments, who may wish to be able to view the contents of encrypted communications.

• Question 277:

  A company has established a network-level connection with several business partners to facilitate business transactions. Each business partner interacts with the same FOUR APPLICATION servers within the company. The company should implement which of the following defense types to protect the remainder of the organization from those partners?

  A. DMZ
  B. IDS
  C. VPN
  D. NAC
  C. VPN

• Question 278:

  A security administrator wishes to increase the security of the wireless network. Which of the following BEST addresses this concern?

  A. Change the encryption from TKIP-based to CCMP-based.
  B. Set all nearby access points to operate on the same channel.
  C. Configure the access point to use WEP instead of WPA2.
  D. Enable all access points to broadcast their SSIDs.
  A. Change the encryption from TKIP-based to CCMP-based.

  ---

  CCMP makes use of 128-bit AES encryption with a 48-bit initialization vector. This initialization vector makes cracking a bit more difficult.

• Question 279:

  Joe, a security analyst, is attempting to determine if a new server meets the security requirements of his organization. As a step in this process, he attempts to identify a lack of security controls and to identify common misconfigurations on the server. Which of the following is Joe attempting to complete?

  A. Black hat testing
  B. Vulnerability scanning
  C. Black box testing
  D. Penetration testing
  B. Vulnerability scanning

• Question 280:

  Joe a system administrator receives reports that users attempting to reach the corporate website are arriving at an unfamiliar website instead. An investigation by a forensic analyst found that the name server log has several corporate IP addresses that were changed using Joe's credentials. Which of the following is this attack called?

  A. Xmas attack
  B. DNS poisoning
  C. Web server attack
  D. Spoofing attack
  B. DNS poisoning