CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 381:

  An administrator must select an algorithm to encrypt data at rest. Which of the following could be used?

  A. RIPEMD
  B. Diffie-hellman
  C. ECDSA
  D. CHAP
  E. Blowfish
  E. Blowfish

• Question 382:

  A system administrator attempts to ping a hostname and the response is 2001:4860:0:2001::68.

  Which of the following replies has the administrator received?

  A. The loopback address
  B. The local MAC address
  C. IPv4 address
  D. IPv6 address
  D. IPv6 address

  ---

  IPv6 addresses are 128-bits in length. An IPv6 address is represented as eight groups of four hexadecimal digits, each group representing 16 bits (two octets). The groups are separated by colons (:). The hexadecimal digits are case-insensitive, but IETF recommendations suggest the use of lower case letters. The full representation of eight 4- digit groups may be simplified by several techniques, eliminating parts of the representation.

• Question 383:

  A network administrator identifies sensitive files being transferred from a workstation in the LAN to an unauthorized outside IP address in a foreign country. An investigation determines that the firewall has not been altered, and antivirus is upto-date on the workstation. Which of the following is the MOST likely reason for the incident?

  A. MAC Spoofing
  B. Session Hijacking
  C. Impersonation
  D. Zero-day
  D. Zero-day

  ---

  This question states that antivirus is up-to-date on the workstation and the firewall has not been altered. The antivirus software is up to date with all `known' viruses. A zero day vulnerability is an unknown vulnerability so a patch or virus definition has not been released yet.

  A zero day vulnerability refers to a hole in software that is unknown to the vendor. This security hole is then exploited by hackers before the vendor becomes aware and hurries to fix it--this exploit is called a zero day attack. Uses of zero day attacks can include infiltrating malware, spyware or allowing unwanted access to user information. The term "zero day" refers to the unknown nature of the hole to those outside of the hackers, specifically, the developers. Once the vulnerability becomes known, a race begins for the developer, who must protect users.

• Question 384:

  After making a bit-level copy of compromised server, the forensics analyst Joe wants to verify that he bid not accidentally make a change during his investigation. Which of the following should he perform?

  A. Take a hash of the image and compare it to the one being investigated
  B. Compare file sizes of all files prior to and after investigation
  C. Make a third image and compare it to the second image being investigated
  D. Compare the logs of the copy to the actual server
  A. Take a hash of the image and compare it to the one being investigated

• Question 385:

  While reviewing the security controls in place for a web-based application, a security controls assessor notices that there are no password strength requirements in place. Because of this vulnerability, passwords might be easily discovered using a brute force attack. Which of the following password requirements will MOST effectively improve the security posture of the application against these attacks? (Select two)

  A. Minimum complexity
  B. Maximum age limit
  C. Maximum length
  D. Minimum length
  E. Minimum age limit
  F. Minimum re-use limit
  D. Minimum length
  F. Minimum re-use limit

• Question 386:

  Joe Has read and write access to his own home directory. Joe and Ann are collaborating on a project, and Joe would like to give Ann write access to one particular file in this home directory. Which of the following types of access control would this reflect?

  A. Role-based access control
  B. Rule-based access control
  C. Mandatory access control
  D. Discretionary access control
  D. Discretionary access control

  ---

  Discretionary access control (DAC) allows access to be granted or restricted by an object's owner based on user identity and on the discretion of the object owner.

• Question 387:

  Jane, a security administrator, needs to implement a secure wireless authentication method that uses a remote RADIUS server for authentication. Which of the following is an authentication method Jane should use?

  A. WPA2-PSK
  B. WEP-PSK
  C. CCMP
  D. LEAP
  D. LEAP

  ---

  A RADIUS server is a server with a database of user accounts and passwords used as a central authentication database for users requiring network access. The Lightweight Extensible Authentication Protocol (LEAP) is a proprietary wireless LAN authentication method developed by Cisco Systems. Important features of LEAP are dynamic WEP keys and mutual authentication (between a wireless client and a RADIUS server). LEAP allows for clients to reauthenticate frequently; upon each successful authentication, the clients acquire a new WEP key (with the hope that the WEP keys don't live long enough to be cracked). LEAP may be configured to use TKIP instead of dynamic WEP.

• Question 388:

  After a new firewall has been installed, devices cannot obtain a new IP address. Which of the following ports should Matt, the security administrator, open on the firewall?

  A. 25
  B. 68
  C. 80
  D. 443
  B. 68

  ---

  The Dynamic Host Configuration Protocol (DHCP) is a standardized network protocol used on Internet Protocol (IP) networks for distributing IP addresses for interfaces and services. DHCP makes use of port 68.

• Question 389:

  The process of making certain that an entity (operating system, application, etc.) is as secure as it can be is known as:

  A. Stabilizing
  B. Reinforcing
  C. Hardening
  D. Toughening
  C. Hardening

  ---

  Hardening is the process of securing a system by reducing its surface of vulnerability. Reducing the surface of vulnerability typically includes removing unnecessary functions and features, removing unnecessary usernames or logins and disabling unnecessary services.

• Question 390:

  Which of the following can be used to control specific commands that can be executed on a network infrastructure device?

  A. LDAP
  B. Kerberos
  C. SAML
  D. TACACS+
  D. TACACS+