CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 331:

  An administrator is implementing a new management system for the machinery on the company's production line. One requirement is that the system only be accessible while within the production facility. Which of the following will be the MOST effective solution in limiting access based on this requirement?

  A. Access control list
  B. Firewall policy
  C. Air Gap
  D. MAC filter
  A. Access control list

• Question 332:

  A forensic analyst is reviewing electronic evidence after a robbery. Security cameras installed at the site do not record any footage. Which of the following types of controls was being used?

  A. Detective
  B. Corrective
  C. Deterrent
  D. Preventive
  C. Deterrent

• Question 333:

  Which of the following should be considered to mitigate data theft when using CAT5 wiring?

  A. CCTV
  B. Environmental monitoring
  C. Multimode fiber
  D. EMI shielding
  D. EMI shielding

  ---

  EMI Shielding refers to the process of preventing electronic emissions from your computer systems from being used to gather intelligence and preventing outside electronic emissions from disrupting your information-processing abilities. Thus all wiring should be shielded to mitigate data theft.

• Question 334:

  An active directory setting restricts querying to only secure connections. Which of the following ports should be selected to establish a successful connection?

  A. 389
  B. 440
  C. 636
  D. 3286
  C. 636

  ---

  Port 636 is used for secure LDAP (LDAPS).

  Incorrect Options:

  A: Port 389 is used for LDAP.

  B: Port 440 is not used for secure Active Directory connections.

  D: Port 3286 is not used for secure Active Directory connections.

  Reference:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis, 2014, p. 147

  https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers

• Question 335:

  An organization does not have adequate resources to administer its large infrastructure. A security administrator wishes to combine the security controls of some of the network devices in the organization. Which of the following methods would BEST accomplish this goal?

  A. Unified Threat Management
  B. Virtual Private Network
  C. Single sign on
  D. Role-based management
  A. Unified Threat Management

  ---

  When you combine a firewall with other abilities (intrusion prevention, antivirus, content filtering, etc.), what used to be called an all-in-one appliance is now known as a unified threat management (UTM) system. The advantages of combining everything into one include a reduced learning curve (you only have one product to learn), a single vendor to deal with, and--typically--reduced complexity.

• Question 336:

  A company uses PGP to ensure that sensitive email is protected. Which of the following types of cryptography is being used here for the key exchange?

  A. Symmetric
  B. Session-based
  C. Hashing
  D. Asymmetric
  A. Symmetric

  ---

  PGP combines symmetric-key encryption and public-key encryption. The message is encrypted using a symmetric encryption algorithm, which requires a symmetric key. Each symmetric key is used only once and is also called a session key.

• Question 337:

  A member of a digital forensics team, Joe arrives at a crime scene and is preparing to collect system data. Before powering the system off, Joe knows that he must collect the most volatile date first. Which of the following is the correct order in which Joe should collect the data?

  A. CPU cache, paging/swap files, RAM, remote logging data
  B. RAM, CPU cache. Remote logging data, paging/swap files
  C. Paging/swap files, CPU cache, RAM, remote logging data
  D. CPU cache, RAM, paging/swap files, remote logging data
  B. RAM, CPU cache. Remote logging data, paging/swap files

• Question 338:

  A security administrator forgets their card to access the server room. The administrator asks a coworker if they could use their card for the day. Which of the following is the administrator using to gain access to the server room?

  A. Man-in-the-middle
  B. Tailgating
  C. Impersonation
  D. Spoofing
  C. Impersonation

  ---

  Impersonation is where a person, computer, software application or service pretends to be someone or something it's not. Impersonation is commonly non-maliciously used in client/server applications. However, it can also be used as a security threat.

  In this question, by using the coworker's card, the security administrator is `impersonating' the coworker. The server room locking system and any logging systems will `think' that the coworker has entered the server room.

• Question 339:

  Which of the following can take advantage of man in the middle techniques to prevent data exfiltration?

  A. DNS poisoning
  B. URL hijacking
  C. ARP spoofing
  D. HTTPS inspection
  A. DNS poisoning

• Question 340:

  Environmental control measures include which of the following?

  A. Access list
  B. Lighting
  C. Motion detection
  D. EMI shielding
  D. EMI shielding

  ---

  Environmental controls include HVAC, Fire Suppression, EMI Shielding, Hot and Cold Aisles, Environmental monitoring as well as Temperature and Humidity controls.