CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 411:

  Four weeks ago a network administrator applied a new IDS and allowed it to gather baseline data. As rumors of a layoff begins to spread, the IDS alerted the network administrator that access to sensitive client files had risen for above normal. Which of the following kind of IDS is in use?

  A. Protocol based
  B. Heuristic based
  C. Signature based
  D. Anomaly based
  D. Anomaly based

• Question 412:

  During a third-party audit, it is determined that a member of the firewall team can request, approve, and implement a new rule-set on the firewall. Which of the following will the audit team most l likely recommend during the audit out brief?

  A. Discretionary access control for the firewall team
  B. Separation of duties policy for the firewall team
  C. Least privilege for the firewall team
  D. Mandatory access control for the firewall team
  B. Separation of duties policy for the firewall team

• Question 413:

  The IT department has setup a website with a series of questions to allow end users to reset their own accounts. Which of the following account management practices does this help?

  A. Account Disablements
  B. Password Expiration
  C. Password Complexity
  D. Password Recovery
  D. Password Recovery

  ---

  People tend to forget their own passwords and because a user's password in not stored on the operating system, only a hash value is kept and most operating systems allows the administrator to change the value meaning that the password can then be recovered. If you allow end users to reset their own accounts then the password recovery process is helped along.

• Question 414:

  The SSID broadcast for a wireless router has been disabled but a network administrator notices that unauthorized users are accessing the wireless network. The administor has determined that attackers are still able to detect the presence of the wireless network despite the fact the SSID has been disabled. Which of the following would further obscure the presence of the wireless network?

  A. Upgrade the encryption to WPA or WPA2
  B. Create a non-zero length SSID for the wireless router
  C. Reroute wireless users to a honeypot
  D. Disable responses to a broadcast probe request
  D. Disable responses to a broadcast probe request

• Question 415:

  When designing a corporate NAC solution, which of the following is the MOST relevant integration issue?

  A. Infrastructure time sync
  B. End user mobility
  C. 802.1X supplicant compatibility
  D. Network Latency
  E. Network Zoning
  D. Network Latency

• Question 416:

  Ann a network administrator has been tasked with strengthening the authentication of users logging into systems in area containing sensitive information. Users log in with usernames and passwords, following by a retinal scan. Which of the following could she implement to add an additional factor of authorization?

  A. Requiring PII usage
  B. Fingerprint scanner
  C. Magnetic swipe cards
  D. Complex passphrases
  B. Fingerprint scanner

• Question 417:

  In order for network monitoring to work properly, you need a PC and a network card running in what mode?

  A. Launch
  B. Exposed
  C. Promiscuous
  D. Sweep
  C. Promiscuous

  ---

  Promiscuous mode allows the network card to look at any packet that it sees on the network. This even includes packets that are not addressed to that network card.

• Question 418:

  Ann was reviewing her company's event logs and observed several instances of GUEST accessing the company print server, file server, and archive database. As she continued to investigate, Ann noticed that it seemed to happen at random intervals throughout the day, but mostly after the weekly automated patching and often logging in at the same time. Which of the following would BEST mitigate this issue?

  A. Enabling time of day restrictions
  B. Disabling unnecessary services
  C. Disabling unnecessary accounts
  D. Rogue machine detection
  C. Disabling unnecessary accounts

  ---

  User account control is a very important part of operating system hardening. It is important that only active accounts be operational and that they be properly managed. This means disabling unnecessary accounts.

  Enabled accounts that are not needed on a system provide a door through which attackers can gain access. You should disable all accounts that are not needed immediately--on servers and workstations alike. Here are some types of

  accounts that you should disable:

  Employees Who Have Left the Company: Be sure to disable immediately accounts for any employee who has left the company. This should be done the minute employment is terminated.

  Temporary Employees: It is not uncommon to create short-term accounts for brief periods of time for access by temporary employees. These also need to be disabled the moment they are no longer needed.

  Default Guest Accounts: In many operating systems, a guest account is created during installation and intended for use by those needing only limited access and lacking their own account on the system. This account presents a door into the

  system that should not be there, and all who have worked with the operating system knows of its existence, thus making it a likely target for attackers.

• Question 419:

  The Chief Security Officer (CSO) is contacted by a first responder. The CSO assigns a handler. Which of the following is occurring?

  A. Unannounced audit response
  B. Incident response process
  C. Business continuity planning
  D. Unified threat management
  E. Disaster recovery process
  B. Incident response process

  ---

  The Incident response policy outlines the processes that should be followed when an incident occurs. Thus when a CSO is contacted by a first responder and then assign a handler for the incident it is clearly the incident response process that is put in practice.

• Question 420:

  Which of the following authentication services uses a default TCP port of 88?

  A. Kerberos
  B. TACACS+
  C. SAML
  D. LDAP
  A. Kerberos