CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 571:

  A company storing data on a secure server wants to ensure it is legally able to dismiss and prosecute staff who intentionally access the server via Telnet and illegally tamper with customer data. Which of the following administrative controls should be implemented to BEST achieve this?

  A. Command shell restrictions
  B. Restricted interface
  C. Warning banners
  D. Session output pipe to /dev/null
  C. Warning banners

  ---

  Within Microsoft Windows, you have the ability to put signs (in the form of onscreen pop-up banners) that appear before the login telling similar information--authorized access only, violators will be prosecuted, and so forth. Such banners convey warnings or regulatory information to the user that they must "accept" in order to use the machine or network. You need to make staff aware that they may legally be prosecuted and a message is best given via a banner so that all staff using workstation will get notification.

• Question 572:

  Which of the following will help prevent smurf attacks?

  A. Allowing necessary UDP packets in and out of the network
  B. Disabling directed broadcast on border routers
  C. Disabling unused services on the gateway firewall
  D. Flash the BIOS with the latest firmware
  B. Disabling directed broadcast on border routers

  ---

  A smurf attack involves sending PING requests to a broadcast address. Therefore, we can prevent smurf attacks by blocking broadcast packets on our external routers. A smurf attack is a type of network security breach in which a network

  connected to the Internet is swamped with replies to ICMP echo (PING) requests. A smurf attacker sends PING requests to an Internet broadcast address. These are special addresses that broadcast all received messages to the hosts

  connected to the subnet. Each broadcast address can support up to 255 hosts, so a single PING request can be multiplied 255 times. The return address of the request itself is spoofed to be the address of the attacker's victim. All the hosts

  receiving the PING request reply to this victim's address instead of the real sender's address. A single attacker sending hundreds or thousands of these PING messages per second can fill the victim's T-1 (or even T-3) line with ping replies,

  bring the entire Internet service to its knees.

  Smurfing falls under the general category of Denial of Service attacks -- security attacks that don't try to steal information, but instead attempt to disable a computer or network.

• Question 573:

  An advantage of virtualizing servers, databases, and office applications is:

  A. Centralized management.
  B. Providing greater resources to users.
  C. Stronger access control.
  D. Decentralized management.
  A. Centralized management.

  ---

  Virtualization consists of allowing one set of hardware to host multiple virtual Machines and in the case of software and applications; one host is all that is required. This makes centralized management a better prospect.

• Question 574:

  Which of the following is an important implementation consideration when deploying a wireless network that uses a shared password?

  A. Authentication server
  B. Server certificate
  C. Key length
  D. EAP method
  C. Key length

  ---

  Key length is the main issue of concern since the wireless network uses a shared password. With risks of shared passwords makes the length of the password a crucial factor to risk mitigation.

• Question 575:

  After a new RADIUS server is added to the network, an employee is unable to connect to the company's WPA2-Enterprise WIFI network, which is configured to prompt for the employee's network username and password. The employee reports receiving an error message after a brief connection attempt, but is never prompted for credentials. Which of the following issues could be causing the problem?

  A. The employee's account is locked out in the directory service
  B. The new RADIUS server is overloading the wireless access point
  C. The new RADIUS server's certificate is not trusted by the employee's PC
  D. The employee's account is disabled in the RADIUS server's local database
  A. The employee's account is locked out in the directory service

• Question 576:

  An attacker discovers a new vulnerability in an enterprise application. The attacker takes advantage of the vulnerability by developing new malware. After installing the malware the attacker is provided with access to the infected machine. Which of the following is being described?

  A. Zero-day exploit
  B. Remote code execution
  C. Session hijacking
  D. Command injection
  A. Zero-day exploit

• Question 577:

  Which of the following types of security services are used to support authentication for remote users and devices?

  A. Biometrics
  B. HSM
  C. RADIUS
  D. TACACS
  C. RADIUS

  ---

  RADIUS authentication phase takes place when a network client connects to a network access server (NAS) and provides authentication credentials. The NAS will then make use of the authentication credentials to issue a RADIUS authentication request to the RADIUS server, which will then exchange RADIUS authentication messages with the NAS.

• Question 578:

  An access point has been configured for AES encryption but a client is unable to connect to it. Which of the following should be configured on the client to fix this issue?

  A. WEP
  B. CCMP
  C. TKIP
  D. RC4
  B. CCMP

  ---

  CCMP is an encryption protocol designed for Wireless LAN products that implement the standards of the IEEE 802.11i amendment to the original IEEE 802.11 standard. CCMP is an enhanced data cryptographic encapsulation mechanism designed for data confidentiality and based upon the Counter Mode with CBC-MAC (CCM) of the AES standard.

• Question 579:

  A security guard has informed the Chief information Security Officer that a person with a tablet has been walking around the building. The guard also noticed strange white markings in different areas of the parking lot. The person is attempting which of the following types of attacks?

  A. Jamming
  B. War chalking
  C. Packet sniffing
  D. Near field communication
  B. War chalking

• Question 580:

  Which of the following can be implemented in hardware or software to protect a web server from cross-site scripting attacks?

  A. Intrusion Detection System
  B. Flood Guard Protection
  C. Web Application Firewall
  D. URL Content Filter
  C. Web Application Firewall

  ---

  Cross-site scripting (XSS) is a form of malicious code-injection attack on a web server in which an attacker injects code into the content sent to website visitors. XSS can be mitigated by implementing patch management on the web server, using firewalls, and auditing for suspicious activity.