CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 21:

  Which of the following would be used to allow a subset of traffic from a wireless network to an internal network?

  A. Access control list
  B. 802.1X
  C. Port security
  D. Load balancers
  B. 802.1X

• Question 22:

  Which of the following must a user implement if they want to send a secret message to a coworker by embedding it within an image?

  A. Transport encryption
  B. Steganography
  C. Hashing
  D. Digital signature
  B. Steganography

  ---

  Steganography is the process of concealing a file, message, image, or video within another file, message, image, or video.

  Note: The advantage of steganography over cryptography alone is that the intended secret message does not attract attention to itself as an object of scrutiny. Plainly visible encrypted messages, no matter how unbreakable will arouse

  interest, and may in themselves be incriminating in countries where encryption is illegal. Thus, whereas cryptography is the practice of protecting the contents of a message alone, steganography is concerned with concealing the fact that a

  secret message is being sent, as well as concealing the contents of the message.

• Question 23:

  During a data breach cleanup, it is discovered that not all of the sites involved have the necessary data wiping tools. The necessary tools are quickly distributed to the required technicians, but when should this problem best be revisited?

  A. Reporting
  B. Preparation
  C. Mitigation
  D. Lessons learned
  A. Reporting

• Question 24:

  While responding to an incident on a Linux server, the administrator needs to disable unused services. Which of the following commands can be used to see processes that are listening on a TCP port?

  A. Lsof
  B. Tcpdump
  C. Top
  D. Ifconfig
  A. Lsof

• Question 25:

  Drag the items on the left to show the different types of security for the shown devices. Not all fields need to be filled. Not all items need to be used.

  Select and Place:

  

  

  ---

  For mobile devices, at bare minimum you should have the following security measures in place: Screen lock, Strong password, Device encryption, Remote wipe/Sanitation, voice encryption, GPS tracking, Application control, Storage

  segmentation, Asset tracking as well as Device Access control.

  For servers in a data center your security should include: Fire extinguishers such as FM200 as part of fire suppression; Biometric, proximity badges, mantraps, HVAC, cable locks;

  these can all be physical security measures to control access to the server.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis, 2014, p. 418

• Question 26:

  A breach at a credit card company resulted in customers credit card information being exposed . The company has conducted a full forensic investigation and identified the source of the breach. Which of the following should the company do NEXT?

  A. Move to the incident identification phase
  B. Implement the risk assessment plan
  C. Implement damage and loss control procedures
  D. Implement first responder processes
  C. Implement damage and loss control procedures

• Question 27:

  According to company policy an administrator must logically keep the Human Resources department separated from the Accounting department. Which of the following would be the simplest way to accomplish this?

  A. NIDS
  B. DMZ
  C. NAT
  D. VLAN
  D. VLAN

  ---

  Explanation: A virtual local area network (VLAN) is a hardware-imposed network segmentation created by switches.

• Question 28:

  When a communications plan is developed for disaster recovery and business continuity plans, the MOST relevant items to include would be: (Select TWO).

  A. Methods and templates to respond to press requests, institutional and regulatory reporting requirements.
  B. Methods to exchange essential information to and from all response team members, employees, suppliers, and customers.
  C. Developed recovery strategies, test plans, post-test evaluation and update processes.
  D. Defined scenarios by type and scope of impact and dependencies, with quantification of loss potential.
  E. Methods to review and report on system logs, incident response, and incident handling.
  A. Methods and templates to respond to press requests, institutional and regulatory reporting requirements.
  B. Methods to exchange essential information to and from all response team members, employees, suppliers, and customers.

  ---

  A: External emergency communications that should fit into your business continuity plan include notifying family members of an injury or death, discussing the disaster with the media, and providing status information to key clients and stakeholders. Each message needs to be prepared with the audience (e.g., employees, media, families, government regulators) in mind; broad general announcements may be acceptable in the initial aftermath of an incident, but these will need to be tailored to the audiences in subsequent releases.

  B: A typical emergency communications plan should be extensive in detail and properly planned by a business continuity planner. Internal alerts are sent using either email, overhead building paging systems, voice messages or text messages to cell/smartphones with instructions to evacuate the building and relocate at assembly points, updates on the status of the situation, and notification of when it's safe to return to work.

• Question 29:

  The act of magnetically erasing all of the data on a disk is known as:

  A. Wiping
  B. Dissolution
  C. Scrubbing
  D. Degaussing
  D. Degaussing

  ---

  Degaussing is a form a data wiping that entails the use of magnets to alter the magnetic structure of the storage medium.

• Question 30:

  Sara, a security administrator, manually hashes all network device configuration files daily and compares them to the previous days' hashes. Which of the following security concepts is Sara using?

  A. Confidentiality
  B. Compliance
  C. Integrity
  D. Availability
  C. Integrity

  ---

  Integrity means the message can't be altered without detection.