CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 401:

  While troubleshooting a new wireless 802.11 ac network an administrator discovers that several of the older systems cannot connect. Upon investigation the administrator discovers that the older devices only support 802.11 and RC4. The administrator does not want to affect the performance of the newer 802.11 ac devices on the network. Which of the following should the administrator do to accommodate all devices and provide the MOST security?

  A. Disable channel bonding to allow the legacy devices and configure WEP fallback
  B. Configure the AP in protected mode to utilize WPA2 with CCMP
  C. Create a second SSID on the AP which utilizes WPA and TKIP
  D. Configure the AP to utilize the 5Gh band only and enable WEP
  B. Configure the AP in protected mode to utilize WPA2 with CCMP

• Question 402:

  A network administrator wants to block both DNS requests and zone transfers coming from outside IP addresses. The company uses a firewall which implements an implicit allow and is currently configured with the following ACL applied to its external interface. PERMIT TCP ANY ANY 80 PERMIT TCP ANY ANY 443 Which of the following rules would accomplish this task? (Select TWO).

  A. Change the firewall default settings so that it implements an implicit deny
  B. Apply the current ACL to all interfaces of the firewall
  C. Remove the current ACL
  D. Add the following ACL at the top of the current ACL DENY TCP ANY ANY 53
  E. Add the following ACL at the bottom of the current ACL DENY ICMP ANY ANY 53
  F. Add the following ACL at the bottom of the current ACL DENY IP ANY ANY 53
  A. Change the firewall default settings so that it implements an implicit deny
  F. Add the following ACL at the bottom of the current ACL DENY IP ANY ANY 53

  ---

  Implicit deny is the default security stance that says if you aren't specifically granted access or privileges for a resource, you're denied access by default. Implicit deny is the default response when an explicit allow or deny isn't present.

  DNS operates over TCP and UDP port 53. TCP port 53 is used for zone transfers. These are zone file exchanges between DNS servers, special manual queries, or used when a response exceeds 512 bytes. UDP port 53 is used for most typical DNS queries.

• Question 403:

  The IT department has setup a share point site to be used on the intranet. Security has established the groups and permissions on the site. No one may modify the permissions and all requests for access are centrally managed by the security team. This is an example of which of the following control types?

  A. Rule based access control
  B. Mandatory access control
  C. User assigned privilege
  D. Discretionary access control
  D. Discretionary access control

  ---

  Discretionary access control (DAC) allows access to be granted or restricted by an object's owner based on user identity and on the discretion of the object owner.

• Question 404:

  A company's legacy server requires administration using Telnet. Which of the following protocols could be used to secure communication by offering encryption at a lower OSI layer? (Select TWO).

  A. IPv6
  B. SFTP
  C. IPSec
  D. SSH
  E. IPv4
  A. IPv6
  C. IPSec

  ---

  Telnet supports IPv6 connections.

  IPv6 is the communications protocol that provides an identification and location system for computers on networks and routes traffic across the Internet. IPsec is a protocol suite for securing Internet Protocol (IP) communications by

  authenticating and encrypting each IP packet of a communication session. IPsec is a compulsory component for IPv6.

  IPsec operates at Layer 3 of the OSI model, whereas Telnet operates at Layer 7.

• Question 405:

  Which of the following hardware based encryption devices is used as a part of multi-factor authentication to access a secured computing system?

  A. Database encryption
  B. USB encryption
  C. Whole disk encryption
  D. TPM
  D. TPM

  ---

  Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the system's motherboard and is enabled or disable in BIOS. It helps with hash key generation and stores cryptographic keys, passwords, or certificates.

• Question 406:

  A network administrator is configuring access control for the sales department which has high employee turnover. Which of the following is BEST suited when assigning user rights to individuals in the sales department?

  A. Time of day restrictions
  B. Group based privileges
  C. User assigned privileges
  D. Domain admin restrictions
  B. Group based privileges

  ---

  The question states that the sales department has a high employee turnover. You can assign permissions to access resources either to a user or a group. The most efficient way is to assign permissions to a group (group based privileges). Then when a new employee starts, you simply add the new user account to the appropriate groups. The user then inherits all the permissions assigned to the groups.

• Question 407:

  Encryption used by RADIUS is BEST described as:

  A. Quantum
  B. Elliptical curve
  C. Asymmetric
  D. Symmetric
  D. Symmetric

  ---

  The RADIUS server uses a symmetric encryption method. Note: Symmetric algorithms require both ends of an encrypted message to have the same key and processing algorithms. Symmetric algorithms generate a secret key that must be protected.

• Question 408:

  The system administrator is reviewing the following logs from the company web server:

  12:34:56 GET /directory_listing.php?user=adminandpass=admin1

  12:34:57 GET /directory_listing.php?user=adminandpass=admin2

  12:34:58 GET /directory_listing.php?user=adminandpass=1admin

  12:34:59 GET /directory_listing.php?user=adminandpass=2admin

  Which of the following is this an example of?

  A. Online rainbow table attack
  B. Offline brute force attack
  C. Offline dictionary attack
  D. Online hybrid attack
  D. Online hybrid attack

  ---

  This is an example of an online hybrid attack. A hybrid attack is a combination of attacks. In this example, we have a combination of a dictionary attack and a brute-force attack. A brute force attack is a trial-and-error method used to obtain

  information such as a user password or personal identification number (PIN). In a brute force attack, automated software is used to generate a large number of consecutive guesses as to the value of the desired data.

  A dictionary attack uses a list of words to use as passwords. The combination or hybrid attack adds characters or numbers or even other words to the beginning or end of the password guesses. In this example we have a password guess of

  `admin'. From the word admin, we have four combinations, `admin1, 1admin, admin2, 2admin'.

• Question 409:

  Employees are reporting that they have been receiving a large number of emails advertising products and services. Links in the email direct the users' browsers to the websites for the items being offered. No reports of increased virus activity have been observed. A security administrator suspects that the users are the targets of:

  A. A watering hole attack
  B. Spear phishing
  C. A spoofing attack
  D. A spam campaign
  D. A spam campaign

• Question 410:

  A financial company requires a new private network link with a business partner to cater for realtime and batched data flows.

  Which of the following activities should be performed by the IT security staff member prior to establishing the link?

  A. Baseline reporting
  B. Design review
  C. Code review
  D. SLA reporting
  B. Design review

  ---

  This question is asking about a new private network link (a VPN) with a business partner. This will provide access to the local network from the business partner. When implementing a VPN, an important step is the design of the VPN. The

  VPN should be designed to ensure that the security of the network and local systems is not compromised.

  The design review assessment examines the ports and protocols used, the rules, segmentation, and access control in the systems or applications. A design review is basically a check to ensure that the design of the system meets the security

  requirements.