CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 341:

  Which statement is TRUE about the operation of a packet sniffer?

  A. It can only have one interface on a management network.
  B. They are required for firewall operation and stateful inspection.
  C. The Ethernet card must be placed in promiscuous mode.
  D. It must be placed on a single virtual LAN interface.
  C. The Ethernet card must be placed in promiscuous mode.

  ---

  A sniffer (packet sniffer) is a tool that intercepts data flowing in a network. If computers are connected to a local area network that is not filtered or switched, the traffic can be broadcast to all computers contained in the same segment. This doesn't generally occur, since computers are generally told to ignore all the comings and goings of traffic from other computers. However, in the case of a sniffer, all traffic is shared when the sniffer software commands the Network Interface Card (NIC) to stop ignoring the traffic. The NIC is put into promiscuous mode, and it reads communications between computers within a particular segment. This allows the sniffer to seize everything that is flowing in the network, which can lead to the unauthorized access of sensitive data. A packet sniffer can take the form of either a hardware or software solution. A sniffer is also known as a packet analyzer.

• Question 342:

  Which of the following is a step in deploying a WPA2-Enterprise wireless network?

  A. Install a token on the authentication server
  B. Install a DHCP server on the authentication server
  C. Install an encryption key on the authentication server
  D. Install a digital certificate on the authentication server
  D. Install a digital certificate on the authentication server

  ---

  When setting up a wireless network, you'll find two very different modes of Wi-Fi Protected Access (WPA) security, which apply to both the WPA and WPA2 versions. The easiest to setup is the Personal mode, technically called the Pre-

  Shared Key (PSK) mode. It doesn't require anything beyond the wireless router or access points (APs) and uses a single passphrase or password for all users/devices. The other is the Enterprise mode --which should be used by businesses

  and organizations--and is also known as the RADIUS, 802.1X, 802.11i, or EAP mode. It provides better security and key management, and supports other enterprise-type functionality, such as VLANs and NAP. However, it requires an

  external authentication server, called a Remote Authentication Dial In User Service (RADIUS) server to handle the 802.1X authentication of users.

  To help you better understand the process of setting up WPA/WPA2-Enterprise and 802.1X, here's the basic overall steps:

  Choose, install, and configure a RADIUS server, or use a hosted service. Create a certificate authority (CA), so you can issue and install a digital certificate onto the RADIUS server, which may be done as a part of the RADIUS server

  installation and configuration. Alternatively, you could purchase a digital certificate from a public CA, such as GoDaddy or Verisign, so you don't have to install the server certificate on all the clients. If using EAP-TLS, you'd also create digital

  certificates for each end-user. On the server, populate the RADIUS client database with the IP address and shared secret for each AP.

  On the server, populate user data with usernames and passwords for each end-user. On each AP, configure the security for WPA/WPA2-Enterprise and input the RADIUS server IP address and the shared secret you created for that particular

  AP. On each Wi-Fi computer and device, configure the security for WPA/WPA2-Enterprise and set the 802.1X authentication settings.

• Question 343:

  Which of the following ports should be used by a system administrator to securely manage a remote server?

  A. 22
  B. 69
  C. 137
  D. 445
  A. 22

  ---

  Secure Shell (SSH) is a more secure replacement for Telnet, rlogon, rsh, and rcp. SSH can be called a remote access or remote terminal solution. SSH offers a means by which a command-line, text-only interface connection with a server, router, switch, or similar device can be established over any distance. SSH makes use of TCP port 22.

• Question 344:

  Joe, a security analyst, asks each employee of an organization to sign a statement saying that they understand how their activities may be monitored. Which of the following BEST describes this statement? (Select TWO).

  A. Acceptable use policy
  B. Risk acceptance policy
  C. Privacy policy
  D. Email policy
  E. Security policy
  A. Acceptable use policy
  C. Privacy policy

  ---

  Privacy policies define what controls are required to implement and maintain the sanctity of data privacy in the work environment. Privacy policy is a legal document that outlines how data collected is secured. It should encompass information regarding the information the company collects, privacy choices you have based on your account, potential information sharing of your data with other parties, security measures in place, and enforcement. Acceptable use policies (AUPs) describe how the employees in an organization can use company systems and resources, both software and hardware.

• Question 345:

  Which of the following would provide the STRONGEST encryption?

  A. Random one-time pad
  B. DES with a 56-bit key
  C. AES with a 256-bit key
  D. RSA with a 1024-bit key
  A. Random one-time pad

  ---

  One-time pads are the only truly completely secure cryptographic implementations. They are so secure for two reasons. First, they use a key that is as long as a plaintext message. That means there is no pattern in the key application for an attacker to use. Also, one-time pad keys are used only once and then discarded. So even if you could break a one-time pad cipher, that same key would never be used again, so knowledge of the key would be useless.

• Question 346:

  A local hospital with a large four-acre campus wants to implement a wireless network so that doctors can use tablets to access patients' medical data. The hospital also wants to provide guest access to the internet for hospital patients and visitors in select areas. Which of the following areas should be addressed FIRST?

  A. MAC filters
  B. Site Survey
  C. Power level controls
  D. Antenna types
  B. Site Survey

• Question 347:

  When confidentiality is the primary concern, and a secure channel for key exchange is not available, which of the following should be used for transmitting company documents?

  A. Digital Signature
  B. Symmetric
  C. Asymmetric
  D. Hashing
  C. Asymmetric

  ---

  Asymmetric algorithms use two keys to encrypt and decrypt data. These asymmetric keys are referred to as the public key and the private key. Asymmetric algorithms do not require a secure channel for the initial exchange of secret keys between the parties.

• Question 348:

  Account lockout is a mitigation strategy used by Jane, the administrator, to combat which of the following attacks? (Select TWO).

  A. Spoofing
  B. Man-in-the-middle
  C. Dictionary
  D. Brute force
  E. Privilege escalation
  C. Dictionary
  D. Brute force

  ---

  Account lockout is a useful method for slowing down online password-guessing attacks. A dictionary attack performs password guessing by making use of a pre-existing list of likely passwords. A brute-force attack is intended to try every possible valid combination of characters to create possible passwords in the attempt to discover the specific passwords used by user accounts.

• Question 349:

  A system administrator must configure the company's authentication system to ensure that users will be unable to reuse the last ten passwords within a six months period. Which of the following settings must be configured? (Select Two)

  A. Minimum password age
  B. Password complexity
  C. Password history
  D. Minimum password length
  E. Multi-factor authentication
  F. Do not store passwords with reversible encryption
  A. Minimum password age
  C. Password history

• Question 350:

  Which of the following can Pete, a security administrator, use to distribute the processing effort when generating hashes for a password cracking program?

  A. RAID
  B. Clustering
  C. Redundancy
  D. Virtualization
  B. Clustering

  ---

  Anytime you connect multiple computers to work/act together as a single server, it is known as clustering. Clustered systems utilize parallel processing (improving performance and availability) and add redundancy. Server clustering is used to provide failover capabilities / redundancy in addition to scalability as demand increases.