CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 541:

  Which of the following forms of software testing can best be performed with no knowledge of how a system is internally structured or functions? (Select Two.)

  A. Boundary testing
  B. White box
  C. Fuzzing
  D. Black box
  E. Grey Box
  C. Fuzzing
  D. Black box

• Question 542:

  Which of the following password attacks is MOST likely to crack the largest number of randomly generated passwords?

  A. Hybrid
  B. Birthday attack
  C. Dictionary
  D. Rainbow tables
  D. Rainbow tables

  ---

  When a password is "tried" against a system it is "hashed" using encryption so that the actual password is never sent in clear text across the communications line. This prevents eavesdroppers from intercepting the password. The hash of a password usually looks like a bunch of garbage and is typically a different length than the original password. Your password might be "shitzu" but the hash of your password would look something like "7378347eedbfdd761619451949225ec1". To verify a user, a system takes the hash value created by the password hashing function on the client computer and compares it to the hash value stored in a table on the server. If the hashes match, then the user is authenticated and granted access. Password cracking programs work in a similar way to the login process. The cracking program starts by taking plaintext passwords, running them through a hash algorithm, such as MD5, and then compares the hash output with the hashes in the stolen password file. If it finds a match then the program has cracked the password. Rainbow Tables are basically huge sets of precomputed tables filled with hash values that are pre-matched to possible plaintext passwords. The Rainbow Tables essentially allow hackers to reverse the hashing function to determine what the plaintext password might be. The use of Rainbow Tables allow for passwords to be cracked in a very short amount of time compared with brute-force methods, however, the trade-off is that it takes a lot of storage (sometimes Terabytes) to hold the Rainbow Tables themselves. With a rainbow table, all of the possible hashes are computed in advance. In other words, you create a series of tables; each has all the possible two-letter, three-letter, four-letter, and so forth combinations and the hash of that combination, using a known hashing algorithm like SHA-2. Now if you search the table for a given hash, the letter combination in the table that produced the hash must be the password you are seeking.

• Question 543:

  A web startup wants to implement single sign-on where its customers can log on to the site by suing their personal and existing corporate email credentials regardless of which company they work for. Is this directly supported by SAML?

  A. Mo not without extensive partnering and API integration with all required email providers
  B. Yes SAML is a web based single sign-on implementation exactly fir this purpose
  C. No a better approach would be to use required email providers LDAP or RADIUS repositories
  D. Yes SAML can use oauth2 to provide this functionality out of the box
  A. Mo not without extensive partnering and API integration with all required email providers

• Question 544:

  Which of the following automated or semi-automated software testing techniques relies on inputting large amounts of random data to detect coding errors or application loopholes?

  A. Fuzzing
  B. Black box
  C. Fault injection
  D. SQL injection
  A. Fuzzing

• Question 545:

  Which of the following is an advantage of implementing individual file encryption on a hard drive which already deploys full disk encryption?

  A. Reduces processing overhead required to access the encrypted files
  B. Double encryption causes the individually encrypted files to partially lose their properties
  C. Individually encrypted files will remain encrypted when copied to external media
  D. File level access control only apply to individually encrypted files in a fully encrypted drive
  C. Individually encrypted files will remain encrypted when copied to external media

  ---

  With full disk encryption a file is encrypted as long as it remains on the disk. This is because the data on the disk is decrypted when the user logs on, thus the data is in a decrypted form when it is copied to another disk. Individually encrypted files on the other hand remain encrypted.

• Question 546:

  A security administrator is troubleshooting an authentication issues using a network sniffer. The security administrator reviews a packet capture of the authentication process and notices that authentication is performed using extensible markup over SOAP. Which of the following authentication services is the security administrator troubleshooting?

  A. SAML
  B. XTACACS
  C. Secure LDAP
  D. RADIUS
  A. SAML

• Question 547:

  A recently installed application update caused a vital application to crash during the middle of the workday. The application remained down until a previous version could be reinstalled on the server, and this resulted in a significant loss of data and revenue.

  Which of the following could BEST prevent this issue from occurring again?

  A. Application configuration baselines
  B. Application hardening
  C. Application access controls
  D. Application patch management
  D. Application patch management

  ---

  Patch management is the process of maintaining the latest source code for applications and operating systems by applying the latest vendor updates. This helps protect a systems from newly discovered attacks and vulnerabilities. A part of patch management is testing the effects of vendor updates on a test system first to ensure that the updates do not have detrimental effects on the system, and, should the updates have no detrimental effects on the test systems, backing up the production systems before applying the updates on a production system.

• Question 548:

  Which of the following BEST describes the type of attack that is occurring?

  

  

  A. Smurf Attack
  B. Man in the middle
  C. Backdoor
  D. Replay
  E. Spear Phishing
  F. Xmas Attack
  G. Blue Jacking
  H. Ping of Death
  A. Smurf Attack

  ---

  The exhibit shows that all the computers on the network are being `pinged'. This indicates that the ping request was sent to the network broadcast address. We can also see that all the replies were received by one (probably with a spoofed

  address) host on the network.

  This is typical of a smurf attack.

  A smurf attack is a type of network security breach in which a network connected to the Internet is swamped with replies to ICMP echo (PING) requests. A smurf attacker sends PING requests to an Internet broadcast address. These are

  special addresses that broadcast all received messages to the hosts connected to the subnet. Each broadcast address can support up to 255 hosts, so a single PING request can be multiplied 255 times. The return address of the request

  itself is spoofed to be the address of the attacker's victim. All the hosts receiving the PING request reply to this victim's address instead of the real sender's address. A single attacker sending hundreds or thousands of these PING messages

  per second can fill the victim's T-1 (or even T-3) line with ping replies, bring the entire Internet service to its knees.

  Smurfing falls under the general category of Denial of Service attacks -- security attacks that don't try to steal information, but instead attempt to disable a computer or network.

• Question 549:

  In regards to secure coding practices, why is input validation important?

  A. It mitigates buffer overflow attacks.
  B. It makes the code more readable.
  C. It provides an application configuration baseline.
  D. It meets gray box testing standards.
  A. It mitigates buffer overflow attacks.

  ---

  Buffer overflow is an exploit at programming error, bugs and flaws. It occurs when an application is fed more input data than it is programmed to handle. This may cause the application to terminate or to write data beyond the end of the allocated space in memory. The termination of the application may cause the system to send the data with temporary access to privileged levels in the system, while overwriting can cause important data to be lost. Proper error and exception handling and input validation will help prevent Buffer overflow exploits.

• Question 550:

  An organization uses a Kerberos-based LDAP service for network authentication. The service is also utilized for internal web applications. Finally access to terminal applications is achieved using the same authentication method by joining the legacy system to the Kerberos realm. This company is using Kerberos to achieve which of the following?

  A. Trusted Operating System
  B. Rule-based access control
  C. Single sign on
  D. Mandatory access control
  C. Single sign on