CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 561:

  A project manager is evaluating proposals for a cloud commuting project. The project manager is particularly concerned about logical security controls in place at the service provider's facility. Which of the following sections of the proposal would be MOST important to review, given the project manager's concerns?

  A. CCTV monitoring
  B. Perimeter security lighting system
  C. Biometric access system
  D. Environmental system configuration
  C. Biometric access system

• Question 562:

  A system administrator wants to use open source software but is worried about the source code being comprised. As a part of the download and installation process, the administrator should verify the integrity of the software by:

  A. Creating a digital signature of the file before installation
  B. Using a secure protocol like HTTPS to download the file
  C. Checking the has against an official mirror that contains the same file
  D. Encryption any connections the software makes
  C. Checking the has against an official mirror that contains the same file

• Question 563:

  The datacenter design team is implementing a system, which requires all servers installed in racks to face in a predetermined direction. AN infrared camera will be used to verify that servers are properly racked. Which of the following datacenter elements is being designed?

  A. Hot and cold aisles
  B. Humidity control
  C. HVAC system
  D. EMI shielding
  A. Hot and cold aisles

  ---

  There are often multiple rows of servers located in racks in server rooms. The rows of servers are known as aisles, and they can be cooled as hot aisles and cold aisles. With a hot aisle, hot air outlets are used to cool the equipment, whereas with cold aisles, cold air intake is used to cool the equipment. Combining the two, you have cold air intake from below the aisle and hot air outtake above it, providing constant circulation. Infrared cameras are heat detection measures thus it is hot and cold aisle design elements.

• Question 564:

  Which of the following should a company implement to BEST mitigate from zero-day malicious code executing on employees' computers?

  A. Least privilege accounts
  B. Host-based firewalls
  C. Intrusion Detection Systems
  D. Application white listing
  D. Application white listing

  ---

  Application whitelisting is a security stance that prohibits unauthorized software from being able to execute unless it is on the preapproved exception list: the whitelist. This prevents any and all software, including malware, from executing unless it is on the whitelist. This can help block zero-day attacks, which are new attacks that exploit flaws or vulnerabilities in targeted systems and applications that are unknown or undisclosed to the world in general.

• Question 565:

  The security administrator needs to manage traffic on a layer 3 device to support FTP from a new remote site. Which of the following would need to be implemented?

  A. Implicit deny
  B. VLAN management
  C. Port security
  D. Access control lists
  D. Access control lists

  ---

  In the OSI model, IP addressing and IP routing are performed at layer 3 (the network layer). In this question we need to configure routing. When configuring routing, you specify which IP range (in this case, the IP subnet of the remote site) is allowed to route traffic through the router to the FTP server.

  Traffic that comes into the router is compared to ACL entries based on the order that the entries occur in the router. New statements are added to the end of the list. The router continues to look until it has a match. If no matches are found when the router reaches the end of the list, the traffic is denied. For this reason, you should have the frequently hit entries at the top of the list. There is an implied deny for traffic that is not permitted.

• Question 566:

  Which of the following is a requirement when implementing PKI if data loss is unacceptable?

  A. Web of trust
  B. Non-repudiation
  C. Key escrow
  D. Certificate revocation list
  C. Key escrow

  ---

  Key escrow is a database of stored keys that later can be retrieved. Key escrow addresses the possibility that a third party may need to access keys. Under the conditions of key escrow, the keys needed to encrypt/decrypt data are held in an escrow account (think of the term as it relates to home mortgages) and made available if that third party requests them. The third party in question is generally the government, but it could also be an employer if an employee's private messages have been called into question.

• Question 567:

  Ann a user has been promoted from a sales position to sales manager. Which of the following risk mitigation strategies would be MOST appropriate when a user changes job roles?

  A. Implement data loss prevention
  B. Rest the user password
  C. User permissions review
  D. Notify incident management
  C. User permissions review

• Question 568:

  Which of the following is the appropriate network structure used to protect servers and services that must be provided to external clients without completely eliminating access for internal users?

  A. NAC
  B. VLAN
  C. DMZ
  D. Subnet
  C. DMZ

• Question 569:

  During a server audit, a security administrator does not notice abnormal activity. However, a network security analyst notices connections to unauthorized ports from outside the corporate network. Using specialized tools, the network security analyst also notices hidden processes running. Which of the following has MOST likely been installed on the server?

  A. SPIM
  B. Backdoor
  C. Logic bomb
  D. Rootkit
  D. Rootkit

  ---

  A rootkit is a collection of tools (programs) that enable administrator-level access to a computer or computer network. Typically, a cracker installs a rootkit on a computer after first obtaining user-level access, either by exploiting a known vulnerability or cracking a password. Once the rootkit is installed, it allows the attacker to mask intrusion and gain root or privileged access to the computer and, possibly, other machines on the network. A rootkit may consist of spyware and other programs that: monitor traffic and keystrokes; create a "backdoor" into the system for the hacker's use; alter log files; attack other machines on the network; and alter existing system tools to escape detection. The presence of a rootkit on a network was first documented in the early 1990s. At that time, Sun and Linux operating systems were the primary targets for a hacker looking to install a rootkit. Today, rootkits are available for a number of operating systems, including Windows, and are increasingly difficult to detect on any network.

• Question 570:

  A company would like to take electronic orders from a partner; however, they are concerned that a non-authorized person may send an order. The legal department asks if there is a solution that provides non-repudiation. Which of the following would meet the requirements of this scenario?

  A. Encryption
  B. Digital signatures
  C. Steganography
  D. Hashing
  E. Perfect forward secrecy
  B. Digital signatures

  ---

  A digital signature is an electronic mechanism to prove that a message was sent from a specific user (that is, it provides for non-repudiation) and that the message wasn't changed while in transit (it also provides integrity). Thus digital signatures will meet the stated requirements.