CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 461:

  A system administrator wants to enable WPA2 CCMP. Which of the following is the only encryption used?

  A. RC4
  B. DES
  C. 3DES
  D. AES
  D. AES

  ---

  Cipher Block Chaining Message Authentication Code Protocol (CCMP) makes use of 128- bit AES encryption with a 48-bit initialization vector.

• Question 462:

  Which of the following BEST describes disk striping with parity?

  A. RAID O
  B. RAID 1
  C. RAID 2
  D. RAID 5
  D. RAID 5

• Question 463:

  The security administration team at a company has been tasked with implementing a data- at-rest solution for its company storage. Due to the large amount of storage the Chief Information Officer (CISO) decides that a 128-bit cipher is needed but the CISO also does not want to degrade system performance any more than necessary. Which of the following encryptions needs BOTH of these needs?

  A. SHA1
  B. DSA
  C. AES
  D. 3DES
  C. AES

• Question 464:

  The Chief Information Security Officer (CISO) has mandated that all IT systems with credit card data be segregated from the main corporate network to prevent unauthorized access and that access to the IT systems should be logged. Which of the following would BEST meet the CISO's requirements?

  A. Sniffers
  B. NIDS
  C. Firewalls
  D. Web proxies
  E. Layer 2 switches
  C. Firewalls

  ---

  The basic purpose of a firewall is to isolate one network from another.

• Question 465:

  An auditor's report discovered several accounts with no activity for over 60 days. The accounts were later identified as contractors' accounts who would be returning in three months and would need to resume the activities. Which of the following would mitigate and secure the auditors finding?

  A. Disable unnecessary contractor accounts and inform the auditor of the update.
  B. Reset contractor accounts and inform the auditor of the update.
  C. Inform the auditor that the accounts belong to the contractors.
  D. Delete contractor accounts and inform the auditor of the update.
  A. Disable unnecessary contractor accounts and inform the auditor of the update.

  ---

  A disabled account cannot be used. It is `disabled'. Whenever an employee leaves a company, the employee's user account should be disabled. The question states that the accounts are contractors' accounts who would be returning in three months. Therefore, it would be easier to keep the accounts rather than deleting them which would require that the accounts are recreated in three months time. By disabling the accounts, we can ensure that the accounts cannot be used; in three months when the contractors are back, we can simply re-enable the accounts.

• Question 466:

  A computer is suspected of being compromised by malware. The security analyst examines the computer and finds that a service called Telnet is running and connecting to an external website over port 443. This Telnet service was found by comparing the system's services to the list of standard services on the company's system image. This review process depends on:

  A. MAC filtering.
  B. System hardening.
  C. Rogue machine detection.
  D. Baselining.
  D. Baselining.

  ---

  Application baseline defines the level or standard of security that will be implemented and maintained for the application. It may include requirements of hardware components, operating system versions, patch levels, installed applications and their configurations, and available ports and services. Systems can be compared to the baseline to ensure that the required level of security is being maintained.

• Question 467:

  A recent review of accounts on various systems has found that after employees passwords are required to change they are recycling the same password as before. Which of the following policies should be enforced to prevent this from happening? (Select TWO)

  A. Reverse encryption
  B. Minimum password age
  C. Password complexity
  D. Account lockouts
  E. Password history
  F. Password expiration
  B. Minimum password age
  E. Password history

• Question 468:

  A distributed denial of service attack can BEST be described as:

  A. Invalid characters being entered into a field in a database application.
  B. Users attempting to input random or invalid data into fields within a web browser application.
  C. Multiple computers attacking a single target in an organized attempt to deplete its resources.
  D. Multiple attackers attempting to gain elevated privileges on a target system.
  C. Multiple computers attacking a single target in an organized attempt to deplete its resources.

  ---

  A Distributed Denial of Service (DDoS) attack is an attack from several different computers targeting a single computer.

  One common method of attack involves saturating the target machine with external communications requests, so much so that it cannot respond to legitimate traffic, or responds so slowly as to be rendered essentially unavailable. Such

  attacks usually lead to a server overload.

  A distributed denial-of-service (DDoS) attack occurs when multiple systems flood the bandwidth or resources of a targeted system, usually one or more web servers. Such an attack is often the result of multiple compromised systems (for

  example a botnet) flooding the targeted system with traffic. When a server is overloaded with connections, new connections can no longer be accepted. The major advantages to an attacker of using a distributed denial-of-service attack are

  that multiple machines can generate more attack traffic than one machine, multiple attack machines are harder to turn off than one attack machine, and that the behavior of each attack machine can be stealthier, making it harder to track and

  shut down. These attacker advantages cause challenges for defense mechanisms. For example, merely purchasing more incoming bandwidth than the current volume of the attack might not help, because the attacker might be able to simply

  add more attack machines. This after all will end up completely crashing a website for periods of time. Malware can carry DDoS attack mechanisms; one of the better-known examples of this was MyDoom. Its DoS mechanism was triggered

  on a specific date and time. This type of DDoS involved hardcoding the target IP address prior to release of the malware and no further interaction was necessary to launch the attack.

• Question 469:

  Ann, a security administrator, has concerns regarding her company's wireless network. The network is open and available for visiting prospective clients in the conference room, but she notices that many more devices are connecting to the network than should be.

  Which of the following would BEST alleviate Ann's concerns with minimum disturbance of current functionality for clients?

  A. Enable MAC filtering on the wireless access point.
  B. Configure WPA2 encryption on the wireless access point.
  C. Lower the antenna's broadcasting power.
  D. Disable SSID broadcasting.
  C. Lower the antenna's broadcasting power.

  ---

  Some access points include power level controls that allow you to reduce the amount of output provided if the signal is traveling too far.

• Question 470:

  Which of the following would the security engineer set as the subnet mask for the servers below to utilize host addresses on separate broadcast domains? Server 1: 192.168.100.6 Server 2: 192.168.100.9 Server 3: 192.169.100.20

  A. /24
  B. /27
  C. /28
  D. /29
  E. /30
  D. /29

  ---

  Using this option will result in all three servers using host addresses on different broadcast domains.