CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 431:

  Which of the following BEST describes a protective countermeasure for SQL injection?

  A. Eliminating cross-site scripting vulnerabilities
  B. Installing an IDS to monitor network traffic
  C. Validating user input in web applications
  D. Placing a firewall between the Internet and database servers
  C. Validating user input in web applications

  ---

  By validating user input and preventing special characters, we can prevent the injection of client-side scripting code.

  SQL injection is a code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). SQL injection must

  exploit a security vulnerability in an application's software, for example, when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly

  executed. SQL injection is mostly known as an attack vector for websites but can be used to attack any type of SQL database.

• Question 432:

  Sara, the Chief Security Officer (CSO), has had four security breaches during the past two years.

  Each breach has cost the company $3,000. A third party vendor has offered to repair the security hole in the system for $25,000. The breached system is scheduled to be replaced in five years.

  Which of the following should Sara do to address the risk?

  A. Accept the risk saving $10,000.
  B. Ignore the risk saving $5,000.
  C. Mitigate the risk saving $10,000.
  D. Transfer the risk saving $5,000.
  D. Transfer the risk saving $5,000.

  ---

  Risk transference involves sharing some of the risk burden with someone else, such as an insurance company. The cost of the security breach over a period of 5 years would amount to $30,000 and it is better to save $5,000.

• Question 433:

  An employee reports work was being completed on a company-owned laptop using a public wireless hot-spot. A pop-up screen appeared, and the user closed the pop-up. Seconds later, the desktop background was changed to the image of a padlock with a message demanding immediate payment to recover the data. Which of the following types of malware MOST likely caused this issue?

  A. Ransomware
  B. Rootkit
  C. Scareware
  D. Spyware
  A. Ransomware

• Question 434:

  Deploying a wildcard certificate is one strategy to:

  A. Secure the certificate's private key.
  B. Increase the certificate's encryption key length.
  C. Extend the renewal date of the certificate.
  D. Reduce the certificate management burden.
  D. Reduce the certificate management burden.

  ---

  A wildcard certificate is a public key certificate which can be used with multiple subdomains of a domain. This saves money and reduces the management burden of managing multiple certificates, one for each subdomain.

  A single Wildcard certificate for *.example.com, will secure all these domains: payment.example.com contact.example.com login-secure.example.com www.example.com

  Because the wildcard only covers one level of subdomains (the asterisk doesn't match full stops), these domains would not be valid for the certificate: test.login.example.com

• Question 435:

  A network stream needs to be encrypted. Sara, the network administrator, has selected a cipher which will encrypt 8 bits at a time before sending the data across the network. Which of the following has Sara selected?

  A. Block cipher
  B. Stream cipher
  C. CRC
  D. Hashing algorithm
  A. Block cipher

  ---

  With a block cipher the algorithm works on chunks of data--encrypting one and then moving to the next. Example: Blowfish is an encryption system that performs a 64-bit block cipher at very fast speeds.

• Question 436:

  A network technician at a company, Joe is working on a network device. He creates a rule to prevent users from connecting to a toy website during the holiday shopping season. This website is blacklisted and is known to have SQL injections and malware. Which of the following has been implemented?

  A. Mandatory access
  B. Network separation
  C. Firewall rules
  D. Implicit Deny
  D. Implicit Deny

• Question 437:

  A corporation has experienced several media leaks of proprietary data on various web forums. The posts were made during business hours and it is believed that the culprit is posting during work hours from a corporate machine. The Chief Information Officer (CIO) wants to scan internet traffic and keep records for later use in legal proceedings once the culprit is found. Which of the following provides the BEST solution?

  A. Protocol analyzer
  B. NIPS
  C. Proxy server
  D. HIDS
  A. Protocol analyzer

• Question 438:

  Pete, the Chief Executive Officer (CEO) of a company, has increased his travel plans for the next two years to improve business relations. Which of the following would need to be in place in case something happens to Pete?

  A. Succession planning
  B. Disaster recovery
  C. Separation of duty
  D. Removing single loss expectancy
  A. Succession planning

  ---

  Succession planning outlines those internal to the organization who have the ability to step into positions when they open. By identifying key roles that cannot be left unfilled and associating internal employees who can step into these roles, you can groom those employees to make sure that they are up to speed when it comes time for them to fill those positions.

• Question 439:

  A network engineer is designing a secure tunneled VPN. Which of the following protocols would be the MOST secure?

  A. IPsec
  B. SFTP
  C. BGP
  D. PPTP
  A. IPsec

  ---

  Layer 2 Tunneling Protocol (L2TP) came about through a partnership between Cisco and Microsoft with the intention of providing a more secure VPN protocol. L2TP is considered to be a more secure option than PPTP, as the IPSec protocol which holds more secure encryption algorithms, is utilized in conjunction with it. It also requires a pre-shared certificate or key. L2TP's strongest level of encryption makes use of 168 bit keys, 3 DES encryption algorithm and requires two levels of authentication. L2TP has a number of advantages in comparison to PPTP in terms of providing data integrity and authentication of origin verification designed to keep hackers from compromising the system. However, the increased overhead required to manage this elevated security means that it performs at a slower pace than PPTP.

• Question 440:

  Which of the following protocols is used by IPv6 for MAC address resolution?

  A. NDP
  B. ARP
  C. DNS
  D. NCP
  A. NDP

  ---

  The Neighbor Discovery Protocol (NDP) is a protocol in the Internet protocol suite used with Internet Protocol Version 6 (IPv6).