CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 471:

  A new intern in the purchasing department requires read access to shared documents. Permissions are normally controlled through a group called "Purchasing", however, the purchasing group permissions allow write access. Which of the following would be the BEST course of action?

  A. Modify all the shared files which read only permissions for the intern
  B. Create a new group that has only read permission for the files
  C. Remove all the permissions for the shared files
  D. Add the intern to the "Purchasing" group
  B. Create a new group that has only read permission for the files

• Question 472:

  A user authenticates to a local directory server. The user then opens a virtualization client to connect to a virtual server. Instead of supplying a username/password combination, the user simply checks a use directory credentials checkbox to authenticate to the virtual server. Which of the following authentication types has been utilized?

  A. Transitive trust
  B. Common access card
  C. Multifactor authentication
  D. Single sign-on
  B. Common access card

• Question 473:

  A portable data storage device has been determined to have malicious firmware. Which of the following is the BEST course of action to ensure data confidentiality?

  A. Format the device
  B. Re-image the device
  C. Perform virus scan in the device
  D. Physically destroy the device
  C. Perform virus scan in the device

• Question 474:

  Which of the following would MOST likely involve GPS?

  A. Wardriving
  B. Protocol analyzer
  C. Replay attack
  D. WPS attack
  A. Wardriving

  ---

  War driving, also called access point mapping, is the act of locating and possibly exploiting connections to wireless local area networks while driving around a city or elsewhere. To do war driving, you need a vehicle, a computer (which can be a laptop), a wireless Ethernet card set to work in promiscuous mode, and some kind of an antenna which can be mounted on top of or positioned inside the car. A GPS (Global Positioning System) system can be used to accurately map your location while detecting the wireless networks.

• Question 475:

  Full disk encryption is MOST effective against which of the following threats?

  A. Denial of service by data destruction
  B. Eavesdropping emanations
  C. Malicious code
  D. Theft of hardware
  D. Theft of hardware

  ---

  Full-disk encryption encrypts the data on the device. This feature ensures that the data on the device cannot be accessed in a useable form should the device be stolen. However, it does not prevent the theft of hardware it only protects data should the device be stolen.

• Question 476:

  Jane has recently implemented a new network design at her organization and wishes to passively identify security issues with the new network. Which of the following should Jane perform?

  A. Vulnerability assessment
  B. Black box testing
  C. White box testing
  D. Penetration testing
  A. Vulnerability assessment

  ---

  Vulnerability scanning has minimal impact on network resources due to the passive nature of the scanning.

  A vulnerability scan is the process of scanning the network and/or I.T. infrastructure for threats and vulnerabilities. The threats and vulnerabilities are then evaluated in a risk assessment and the necessary actions taken to resolve and

  vulnerabilities. A vulnerability scan scans for known weaknesses such as missing patches or security updates.

  A vulnerability scan is the automated process of proactively identifying security vulnerabilities of computing systems in a network in order to determine if and where a system can be exploited and/or threatened. While public servers are

  important for communication and data transfer over the Internet, they open the door to potential security breaches by threat agents, such as malicious hackers. Vulnerability scanning employs software that seeks out security flaws based on a

  database of known flaws, testing systems for the occurrence of these flaws and generating a report of the findings that an individual or an enterprise can use to tighten the network's security.

• Question 477:

  Which of the following is a security benefit of providing additional HVAC capacity or increased tonnage in a datacenter?

  A. Increased availability of network services due to higher throughput
  B. Longer MTBF of hardware due to lower operating temperatures
  C. Higher data integrity due to more efficient SSD cooling
  D. Longer UPS run time due to increased airflow
  B. Longer MTBF of hardware due to lower operating temperatures

  ---

  The mean time between failures (MTBF) is the measure of the anticipated incidence of failure for a system or component. This measurement determines the component's anticipated lifetime. If the MTBF of a cooling system is one year, you can anticipate that the system will last for a one-year period; this means that you should be prepared to replace or rebuild the system once a year. If the system lasts longer than the MTBF, your organization receives a bonus. MTBF is helpful in evaluating a system's reliability and life expectancy. Thus longer MTBF due to lower operating temperatures is a definite advantage

• Question 478:

  A router has a single Ethernet connection to a switch. In the router configuration, the Ethernet interface has three sub-interfaces, each configured with ACLs applied to them and 802.1q trunks. Which of the following is MOST likely the reason for the sub-interfaces?

  A. The network uses the subnet of 255.255.255.128.
  B. The switch has several VLANs configured on it.
  C. The sub-interfaces are configured for VoIP traffic.
  D. The sub-interfaces each implement quality of service.
  B. The switch has several VLANs configured on it.

  ---

  A subinterface is a division of one physical interface into multiple logical interfaces. Routers commonly employ subinterfaces for a variety of purposes, most common of these are for routing traffic between VLANs. Also, IEEE 802.1Q is the networking standard that supports virtual LANs (VLANs) on an Ethernet network.

• Question 479:

  A company is implementing a system to transfer direct deposit information to a financial institution. One of the requirements is that the financial institution must be certain that the deposit amounts within the file have not been changed. Which of the following should be used to meet the requirement?

  A. Key escrow
  B. Perfect forward secrecy
  C. Transport encryption
  D. Digital signatures
  E. File encryption
  D. Digital signatures

• Question 480:

  The incident response team has received the following email message.

  From: [email protected]

  To: [email protected]

  Subject: Copyright infringement

  A copyright infringement alert was triggered by IP address 13.10.66.5 at 09: 50: 01 GMT.

  After reviewing the following web logs for IP 13.10.66.5, the team is unable to correlate and identify the incident.

  09:

  45: 33 13.10.66.5 http: //remote.site.com/login.asp?user=john

  09:

  50: 22 13.10.66.5 http: //remote.site.com/logout.asp?user=anne

  10: 50: 01 13.10.66.5 http: //remote.site.com/access.asp?file=movie.mov

  11:

  02: 45 13.10.65.5 http: //remote.site.com/download.asp?movie.mov=ok

  Which of the following is the MOST likely reason why the incident response team is unable to identify and correlate the incident?

  A. The logs are corrupt and no longer forensically sound.
  B. Traffic logs for the incident are unavailable.
  C. Chain of custody was not properly maintained.
  D. Incident time offsets were not accounted for.
  D. Incident time offsets were not accounted for.

  ---

  It is quite common for workstation times to be off slightly from actual time, and that can happen with servers as well. Since a forensic investigation is usually dependent on a step- by-step account of what has happened, being able to follow events in the correct time sequence is critical. Because of this, it is imperative to record the time offset on each affected machine during the investigation. One method of assisting with this is to add an entry to a log file and note the time that this was done and the time associated with it on the system.