CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 451:

  Use of a smart card to authenticate remote servers remains MOST susceptible to which of the following attacks?

  A. Malicious code on the local system
  B. Shoulder surfing
  C. Brute force certificate cracking
  D. Distributed dictionary attacks
  A. Malicious code on the local system

  ---

  Once a user authenticates to a remote server, malicious code on the user's workstation could then infect the server.

• Question 452:

  A business has set up a Customer Service kiosk within a shopping mall. The location will be staffed by an employee using a laptop during the mall business hours, but there are still concerns regarding the physical safety of the equipment while it is not in use. Which of the following controls would BEST address this security concern?

  A. Host-based firewall
  B. Cable locks
  C. Locking cabinets
  D. Surveillance video
  C. Locking cabinets

  ---

  Locking cabinets can be used to protect backup media, documentation and other physical artefacts. In this case a locking cabinet will keep the company's Customer Service kiosk under lock and key when not in use.

• Question 453:

  Which of the following BEST describes the weakness in WEP encryption?

  A. The initialization vector of WEP uses a crack-able RC4 encryption algorithm. Once enough packets are captured an XOR operation can be performed and the asymmetric keys can be derived.
  B. The WEP key is stored in plain text and split in portions across 224 packets of random data. Once enough packets are sniffed the IV portion of the packets can be removed leaving the plain text key.
  C. The WEP key has a weak MD4 hashing algorithm used. A simple rainbow table can be used to generate key possibilities due to MD4 collisions.
  D. The WEP key is stored with a very small pool of random numbers to make the cipher text. As the random numbers are often reused it becomes easy to derive the remaining WEP key.
  D. The WEP key is stored with a very small pool of random numbers to make the cipher text. As the random numbers are often reused it becomes easy to derive the remaining WEP key.

  ---

  WEP is based on RC4, but due to errors in design and implementation, WEP is weak in a number of areas, two of which are the use of a static common key and poor implementation of initiation vectors (IVs). When the WEP key is discovered, the attacker can join the network and then listen in on all other wireless client communications.

• Question 454:

  A security administrator needs to update the OS on all the switches in the company. Which of the following MUST be done before any actual switch configuration is performed?

  A. The request needs to be sent to the incident management team.
  B. The request needs to be approved through the incident management process.
  C. The request needs to be approved through the change management process.
  D. The request needs to be sent to the change management team.
  C. The request needs to be approved through the change management process.

  ---

  Change Management is a risk mitigation approach and refers to the structured approach that is followed to secure a company's assets. Thus the actual switch configuration should first be subject to the change management approval.

• Question 455:

  Given the following set of firewall rules:

  From the inside to outside allow source any destination any port any

  From inside to dmz allow source any destination any port tcp-80

  From inside to dmz allow source any destination any port tcp-443

  Which of the following would prevent FTP traffic from reaching a server in the DMZ from the inside network?

  A. Implicit deny
  B. Policy routing
  C. Port forwarding
  D. Forwarding proxy
  A. Implicit deny

• Question 456:

  A security administrator is installing a single camera outside in order to detect unauthorized vehicles in the parking lot. Which of the following is the MOST important consideration when deploying a CCTV camera to meet the requirement?

  A. Training
  B. Expense
  C. Resolution
  D. Field of view
  C. Resolution

• Question 457:

  Which of the following protocols is MOST likely to be leveraged by users who need additional information about another user?

  A. LDAP
  B. RADIUS
  C. Kerberos
  D. TACACS+
  A. LDAP

  ---

  A `directory' contains information about users.

  The Lightweight Directory Access Protocol (LDAP) is a directory service protocol that runs on a layer above the TCP/IP stack. It provides a mechanism used to connect to, search, and modify Internet directories.

  The Lightweight Directory Access Protocol (LDAP) is an open, vendor-neutral, industry standard application protocol for accessing and maintaining distributed directory information services over an Internet Protocol (IP) network. Directory

  services play an important role in developing intranet and Internet applications by allowing the sharing of information about users, systems, networks, services, and applications throughout the network. As examples, directory services may

  provide any organized set of records, often with a hierarchical structure, such as a corporate email directory. Similarly, a telephone directory is a list of subscribers with an address and a phone number.

• Question 458:

  Joe, a technician, is tasked with finding a way to test operating system patches for a wide variety of servers before deployment to the production environment while utilizing a limited amount of hardware resources. Which of the following would provide the BEST environment for performing this testing?

  A. OS hardening
  B. Application control
  C. Virtualization
  D. Sandboxing
  C. Virtualization

  ---

  Virtualization is used to host one or more operating systems in the memory of a single host computer and allows multiple operating systems to run simultaneously on the same hardware, reducing costs. Virtualization offers the flexibility of quickly and easily making backups of entire virtual systems, and quickly recovering the virtual system when errors occur. Furthermore, malicious code compromises of virtual systems rarely affect the host system, which allows for safer testing and experimentation.

• Question 459:

  Ann, a security administrator, has been instructed to perform fuzz-based testing on the company's applications. Which of the following best describes what she will do?

  A. Enter random or invalid data into the application in an attempt to cause it to fault
  B. Work with the developers to eliminate horizontal privilege escalation opportunities
  C. Test the applications for the existence of built-in- back doors left by the developers
  D. Hash the application to verify it won't cause a false positive on the HIPS.
  A. Enter random or invalid data into the application in an attempt to cause it to fault

• Question 460:

  A company is about to release a very large patch to its customers. An administrator is required to test patch installations several times prior to distributing them to customer PCs. Which of the following should the administrator use to test the patching process quickly and often?

  A. Create an incremental backup of an unpatched PC
  B. Create an image of a patched PC and replicate it to servers
  C. Create a full disk image to restore after each installation
  D. Create a virtualized sandbox and utilize snapshots
  D. Create a virtualized sandbox and utilize snapshots

  ---

  Sandboxing is the process of isolating a system before installing new applications or patches on it so as to restrict the software from being able to cause harm to production systems.

  Before the patch is installed, a snapshot of the system should be taken. Snapshots are backups that can be used to quickly recover from poor updates, and errors arising from newly installed applications.