CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 501:

  A network operations manager has added a second row of server racks in the datacenter. These racks face the opposite direction of the first row of racks. Which of the following is the reason the manager installed the racks this way?

  A. To lower energy consumption by sharing power outlets
  B. To create environmental hot and cold isles
  C. To eliminate the potential for electromagnetic interference
  D. To maximize fire suppression capabilities
  B. To create environmental hot and cold isles

• Question 502:

  Deploying compensating security controls is an example of:

  A. Risk avoidance
  B. Risk mitigation
  C. Risk transference
  D. Risk acceptance
  B. Risk mitigation

• Question 503:

  Which of the following means of wireless authentication is easily vulnerable to spoofing?

  A. MAC Filtering
  B. WPA - LEAP
  C. WPA - PEAP
  D. Enabled SSID
  A. MAC Filtering

  ---

  Each network interface on your computer or any other networked device has a unique MAC address. These MAC addresses are assigned in the factory, but you can easily change, or "spoof," MAC addresses in software. Networks can use MAC address filtering, only allowing devices with specific MAC addresses to connect to a network. This isn't a great security tool because people can spoof their MAC addresses.

• Question 504:

  Which of the following devices will help prevent a laptop from being removed from a certain location?

  A. Device encryption
  B. Cable locks
  C. GPS tracking
  D. Remote data wipes
  B. Cable locks

  ---

  Cable locks are theft deterrent devices that can be used to tether a device to a fixed point keep smaller devices from being easy to steal.

• Question 505:

  A datacenter requires that staff be able to identify whether or not items have been removed from the facility. Which of the following controls will allow the organization to provide automated notification of item removal?

  A. CCTV
  B. Environmental monitoring
  C. RFID
  D. EMI shielding
  C. RFID

  ---

  RFID is radio frequency identification that works with readers that work with 13.56 MHz smart cards and 125 kHz proximity cards and can open turnstiles, gates, and any other physical security safeguards once the signal is read. Fitting out the equipment with RFID will allow you to provide automated notification of item removal in the event of any of the equipped items is taken off the premises.

• Question 506:

  Due to hardware limitation, a technician must implement a wireless encryption algorithm that uses the RC4 protocol. Which of the following is a wireless encryption solution that the technician should implement while ensuring the STRONGEST level of security?

  A. WPA2-AES
  B. 802.11ac
  C. WPA-TKIP
  D. WEP
  C. WPA-TKIP

  ---

  WPA-TKIP uses the RC4 cipher.

  TKIP and the related WPA standard implement three new security features to address security problems encountered in WEP protected networks. First, TKIP implements a key mixing function that combines the secret root key with the initialization vector before passing it to the RC4 initialization. WEP, in comparison, merely concatenated the initialization vector to the root key, and passed this value to the RC4 routine. This permitted the vast majority of the RC4 based WEP related key attacks. Second, WPA implements a sequence counter to protect against replay attacks. Packets received out of order will be rejected by the access point. Finally, TKIP implements a 64-bit Message Integrity Check (MIC) To be able to run on legacy WEP hardware with minor upgrades, TKIP uses RC4 as its cipher. TKIP also provides a rekeying mechanism. TKIP ensures that every data packet is sent with a unique encryption key.

• Question 507:

  Which of the following pseudocodes can be used to handle program exceptions?

  A. If program detects another instance of itself, then kill program instance.
  B. If user enters invalid input, then restart program.
  C. If program module crashes, then restart program module.
  D. If user's input exceeds buffer length, then truncate the input.
  C. If program module crashes, then restart program module.

  ---

  Exception handling is an aspect of secure coding. When errors occur, the system should revert back to a secure state. This must be coded into the system by the programmer, and should capture all errors and exceptions that could cause the application or its modules to crash. Restarting the application or module would ensure that the application reverts back to a secure state.

• Question 508:

  The administrator receives a call from an employee named Joe. Joe says the Internet is down and he is receiving a blank page when typing to connect to a popular sports website. The administrator asks Joe to try visiting a popular search engine site, which Joe reports as successful. Joe then says that he can get to the sports site on this phone. Which of the following might the administrator need to configure?

  A. The access rules on the IDS
  B. The pop up blocker in the employee's browser
  C. The sensitivity level of the spam filter
  D. The default block page on the URL filter
  D. The default block page on the URL filter

  ---

  A URL filter is used to block access to a site based on all or part of a URL. There are a number of URL-filtering tools that can acquire updated master URL block lists from vendors, as well as allow administrators to add or remove URLs from a custom list.

• Question 509:

  Which of the following may cause Jane, the security administrator, to seek an ACL work around?

  A. Zero day exploit
  B. Dumpster diving
  C. Virus outbreak
  D. Tailgating
  A. Zero day exploit

  ---

  A zero day vulnerability is an unknown vulnerability so there is no fix or patch for it. One way to attempt to work around a zero day vulnerability would be to restrict the permissions by using an ACL (Access Control List)

  A zero day vulnerability refers to a hole in software that is unknown to the vendor. This security hole is then exploited by hackers before the vendor becomes aware and hurries to fix it--this exploit is called a zero day attack. Uses of zero day

  attacks can include infiltrating malware, spyware or allowing unwanted access to user information. The term "zero day" refers to the unknown nature of the hole to those outside of the hackers, specifically, the developers. Once the

  vulnerability becomes known, a race begins for the developer, who must protect users.

• Question 510:

  A security administrator is tasked with conducting an assessment made to establish the baseline security posture of the corporate IT infrastructure. The assessment must report actual flaws and weaknesses in the infrastructure. Due to the expense of hiring outside consultants, the testing must be performed using in-house or cheaply available resource. There cannot be a possibility of any requirement being damaged in the test. Which of the following has the administrator been tasked to perform?

  A. Risk transference
  B. Penetration test
  C. Threat assessment
  D. Vulnerability assessment
  D. Vulnerability assessment