CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 361:

  Pete, a network administrator, is capturing packets on the network and notices that a large amount of the traffic on the LAN is SIP and RTP protocols. Which of the following should he do to segment that traffic from the other traffic?

  A. Connect the WAP to a different switch.
  B. Create a voice VLAN.
  C. Create a DMZ.
  D. Set the switch ports to 802.1q mode.
  B. Create a voice VLAN.

  ---

  It is a common and recommended practice to separate voice and data traffic by using VLANs. Separating voice and data traffic using VLANs provides a solid security boundary, preventing data applications from reaching the voice traffic. It also gives you a simpler method to deploy QoS, prioritizing the voice traffic over the data.

• Question 362:

  When reviewing a digital certificate for accuracy, which of the following would Matt, a security administrator, focus on to determine who affirms the identity of the certificate owner?

  A. Trust models
  B. CRL
  C. CA
  D. Recovery agent
  C. CA

  ---

  A certificate authority (CA) is an organization that is responsible for issuing, revoking, and distributing certificates. The CA affirms the identity of the certificate owner.

• Question 363:

  Which of the following types of risk reducing policies also has the added indirect benefit of cross training employees when implemented?

  A. Least privilege
  B. Job rotation
  C. Mandatory vacations
  D. Separation of duties
  B. Job rotation

  ---

  A job rotation policy defines intervals at which employees must rotate through positions. Similar in purpose to mandatory vacations, it helps to ensure that the company does not become too dependent on one person and it does afford the company with the opportunity to place another person in that same job.

• Question 364:

  Which of the following is the BEST concept to maintain required but non-critical server availability?

  A. SaaS site
  B. Cold site
  C. Hot site
  D. Warm site
  D. Warm site

  ---

  Warm sites provide computer systems and compatible media capabilities. If a warm site is used, administrators and other staff will need to install and configure systems to resume operations. For most organizations, a warm site could be a remote office, a leased facility, or another organization with which yours has a reciprocal agreement. Another term for a warm site/reciprocal site is active/active model.

• Question 365:

  Which of the following types of cloud computing would be MOST appropriate if an organization required complete control of the environment?

  A. Hybrid Cloud
  B. Private cloud
  C. Community cloud
  D. Community cloud
  E. Public cloud
  B. Private cloud

• Question 366:

  Which of the following uses both a public and private key?

  A. RSA
  B. AES
  C. MD5
  D. SHA
  A. RSA

  ---

  The RSA algorithm is an early public-key encryption system that uses large integers as the basis for the process.

  RSA uses both a public key and a secret.

  RSA key generation process:

  1.

  Generate two large random primes, p and q, of approximately equal size such that their product, n = pq, is of the required bit length (such as 2048 bits, 4096 bits, and so forth).

  Let n = pq

  Let m = (p-1)(q-1)

  2.

  Choose a small number e, co-prime to m (note: Two numbers are co-prime if they have no common factors).

  3.

  Find d, such that

  de % m = 1

  4.

  Publish e and n as the public key. Keep d and n as the secret key.

• Question 367:

  Which of the following documents outlines the responsibility of both participants in an agreement between two organizations?

  A. RFC
  B. MOU
  C. RFQ
  D. SLA
  B. MOU

• Question 368:

  A review of administrative access has discovered that too many accounts have been granted administrative rights. Which of the following will alert the security team when elevated access is applied?

  A. Establishing user access reviews
  B. Establishing user based privileges
  C. Establishing monitoring on accounts
  D. Establishing group based privileges
  C. Establishing monitoring on accounts

• Question 369:

  A security administrator is evaluating three different services: radius, diameter, and Kerberos. Which of the following is a feature that is UNIQUE to Kerberos?

  A. It provides authentication services
  B. It uses tickets to identify authenticated users
  C. It provides single sign-on capability
  D. It uses XML for cross-platform interoperability
  B. It uses tickets to identify authenticated users

• Question 370:

  A company wants to prevent end users from plugging unapproved smartphones into PCs and transferring data. Which of the following would be the BEST control to implement?

  A. MDM
  B. IDS
  C. DLP
  D. HIPS
  C. DLP