CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 41:

  You have been tasked with designing a security plan for your company. Drag and drop the appropriate security controls on the floor plan-Instructions: All objects must be used and all place holders must be filled. Order does not matter. When you have completed the simulation, please select the Done button to submit.

  Select and Place:

  

  

  ---

  Cable locks - Adding a cable lock between a laptop and a desk prevents someone from picking it up and walking away

  Proximity badge + reader

  Safe is a hardware/physical security measure

  Mantrap can be used to control access to sensitive areas.

  CCTV can be used as video surveillance.

  Biometric reader can be used to control and prevent unauthorized access.

  Locking cabinets can be used to protect backup media, documentation and other physical artefacts.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis, 2014, p. 369

• Question 42:

  The Chief Information Officer (CIO) is concerned with moving an application to a SaaS cloud provider. Which of the following can be implemented to provide for data confidentiality assurance during and after the migration to the cloud?

  A. HPM technology
  B. Full disk encryption
  C. DLP policy
  D. TPM technology
  C. DLP policy

  ---

  Data loss prevention (DLP) systems monitor the contents of systems (workstations, servers, and networks) to make sure that key content is not deleted or removed. They also monitor who is using the data (looking for unauthorized access) and transmitting the data. The Software as a Service (SaaS) applications are remotely run over the Web and as such requires DLP monitoring.

• Question 43:

  An administrator has concerns regarding the traveling sales team who works primarily from smart phones. Given the sensitive nature of their work, which of the following would BEST prevent access to the data in case of loss or theft?

  A. Enable screensaver locks when the phones are not in use to prevent unauthorized access
  B. Configure the smart phones so that the stored data can be destroyed from a centralized location
  C. Configure the smart phones so that all data is saved to removable media and kept separate from the device
  D. Enable GPS tracking on all smart phones so that they can be quickly located and recovered
  A. Enable screensaver locks when the phones are not in use to prevent unauthorized access

• Question 44:

  Although a vulnerability scan report shows no vulnerabilities have been discovered, a subsequent penetration test reveals vulnerabilities on the network. Which of the following has been reported by the vulnerability scan?

  A. Passive scan
  B. Active scan
  C. False positive
  D. False negative
  D. False negative

  ---

  With a false negative, you are not alerted to a situation when you should be alerted. A False negative is exactly the opposite of a false positive.

• Question 45:

  Joe, a newly hired employee, has a corporate workstation that has been compromised due to several visits to P2P sites. Joe insisted that he was not aware of any company policy that prohibits the use of such web sites. Which of the following is the BEST method to deter employees from the improper use of the company's information systems?

  A. Acceptable Use Policy
  B. Privacy Policy
  C. Security Policy
  D. Human Resource Policy
  A. Acceptable Use Policy

  ---

  Acceptable use policies (AUPs) describe how the employees in an organization can use company systems and resources, both software and hardware.

• Question 46:

  Which of the following assessment techniques would a security administrator implement to ensure that systems and software are developed properly?

  A. Baseline reporting
  B. Input validation
  C. Determine attack surface
  D. Design reviews
  D. Design reviews

  ---

  When implementing systems and software, an important step is the design of the systems and software. The systems and software should be designed to ensure that the system works as intended and is secure.

  The design review assessment examines the ports and protocols used, the rules, segmentation, and access control in the system or application. A design review is basically a check to ensure that the design of the system meets the security

  requirements.

• Question 47:

  An administrator configures all wireless access points to make use of a new network certificate authority. Which of the following is being used?

  A. WEP
  B. LEAP
  C. EAP-TLS
  D. TKIP
  C. EAP-TLS

  ---

  The majority of the EAP-TLS implementations require client-side X.509 certificates without giving the option to disable the requirement.

• Question 48:

  Which of the following is BEST used as a secure replacement for TELNET?

  A. HTTPS
  B. HMAC
  C. GPG
  D. SSH
  D. SSH

  ---

  SSH transmits both authentication traffic and data in a secured encrypted form, whereas Telnet transmits both authentication credentials and data in clear text.

• Question 49:

  A user attempts to install new and relatively unknown software recommended by a colleague. The user is unable to install the program, despite having successfully installed other programs previously. Which of the following is MOST likely the cause for the user's inability to complete the installation?

  A. Application black listing
  B. Network Intrusion Prevention System
  C. Group policy
  D. Application white listing
  A. Application black listing

• Question 50:

  Customers' credit card information was stolen from a popular video streaming company. A security consultant determined that the information was stolen, while in transit, from the gaming consoles of a particular vendor. Which of the following methods should the company consider to secure this data in the future?

  A. Application firewalls
  B. Manual updates
  C. Firmware version control
  D. Encrypted TCP wrappers
  D. Encrypted TCP wrappers

  ---

  Wrapping sensitive systems with a specific control is required when protecting data in transit. TCP wrappers are also security controls. TCP Wrapper is a host-based networking ACL system, used to filter network access to Internet Protocol

  servers on (Unix-like) operating systems such as Linux or BSD. It allows host or subnetwork IP addresses, names and/or inetd query replies, to be used as tokens on which to filter for access control purposes.

  TCP Wrapper should not be considered a replacement for a properly configured firewall. Instead, TCP Wrapper should be used in conjunction with a firewall and other security enhancements in order to provide another layer of protection in

  the implementation of a security policy.