CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 591:

  A new security policy being implemented requires all email within the organization be digitally signed by the author using PGP. Which of the following would needs to be created for each user?

  A. A certificate authority
  B. A key escrow
  C. A trusted key
  D. A public and private key
  A. A certificate authority

• Question 592:

  After a merger, it was determined that several individuals could perform the tasks of a network administrator in the merged organization. Which of the following should have been performed to ensure that employees have proper access?

  A. Time-of-day restrictions
  B. Change management
  C. Periodic auditing of user credentials
  D. User rights and permission review
  D. User rights and permission review

• Question 593:

  By hijacking unencrypted cookies an application allows an attacker to take over existing web sessions that do not use SSL or end to end encryption. Which of the following choices BEST mitigates the security risk of public web surfing? (Select TWO)

  A. WPA2
  B. WEP
  C. Disabling SSID broadcasting
  D. VPN
  E. Proximity to WIFI access point
  C. Disabling SSID broadcasting
  D. VPN

• Question 594:

  Which of the following provides data the best fault tolerance at the LOWEST cost?

  A. Load balancing
  B. Clustering
  C. Server virtualization
  D. RAID 6
  D. RAID 6

  ---

  RAID, or redundant array of independent disks (RAID). RAID allows your existing servers to have more than one hard drive so that if the main hard drive fails, the system keeps functioning. RAID can achieve fault tolerance using software which can be done using the existing hardware and software thus representing the lowest cost option.

• Question 595:

  The key management organization has implemented a key escrowing function. Which of the following technologies can provide protection for the PKI's escrowed keys?

  A. CRL
  B. OCSP
  C. TPM
  D. HSM
  A. CRL

• Question 596:

  A chief information security officer (CISO) is providing a presentation to a group of network engineers. In the presentation, the CISO presents information regarding exploit kits. Which of the following might the CISO present?

  A. Exploit kits are tools capable of taking advantage of multiple CVEs
  B. Exploit kits are vulnerability scanners used by penetration testers
  C. Exploit kits are WIFI scanning tools that can find new honeypots
  D. Exploit kits are a new type of malware that allow attackers to control their computers
  A. Exploit kits are tools capable of taking advantage of multiple CVEs

• Question 597:

  A security analyst needs to ensure all external traffic is able to access the company's front- end servers but protect all access to internal resources. Which of the following network design elements would MOST likely be recommended?

  A. DMZ
  B. Cloud computing
  C. VLAN
  D. Virtualization
  A. DMZ

  ---

  A demilitarized zone (DMZ) is an area of a network that is designed specifically for public users to access. The DMZ is a buffer network between the public untrusted Internet and the private trusted LAN. Often a DMZ is deployed through the use of a multihomed firewall.

• Question 598:

  A company needs to provide a secure backup mechanism for key storage in a PKI. Which of the following should the company implement?

  A. Ephemeral keys
  B. Steganography
  C. Key escrow
  D. Digital signatures
  C. Key escrow

• Question 599:

  A security administrator needs to implement a technology that creates a secure key exchange. Neither party involved in the key exchange will have pre-existing knowledge of one another. Which of the following technologies would allow for this?

  A. Blowfish
  B. NTLM
  C. Diffie-Hellman
  D. CHAP
  C. Diffie-Hellman

• Question 600:

  A computer supply company is located in a building with three wireless networks. The system security team implemented a quarterly security scan and saw the following.

  SSIDStateChannelLevel

  Computer AreUs1connected170dbm

  Computer AreUs2connected580dbm

  Computer AreUs3connected375dbm

  Computer AreUs4connected695dbm

  Which of the following is this an example of?

  A. Rogue access point
  B. Near field communication
  C. Jamming
  D. Packet sniffing
  A. Rogue access point

  ---

  The question states that the building has three wireless networks. However, the scan is showing four wireless networks with the SSIDs: Computer AreUs1 , Computer AreUs2 , Computer AreUs3 and Computer AreUs4. Therefore, one of these wireless networks probably shouldn't be there. This is an example of a rogue access point. A rogue access point is a wireless access point that has either been installed on a secure company network without explicit authorization from a local network administrator, or has been created to allow a hacker to conduct a man-in-the-middle attack. Rogue access points of the first kind can pose a security threat to large organizations with many employees, because anyone with access to the premises can install (maliciously or non- maliciously) an inexpensive wireless router that can potentially allow access to a secure network to unauthorized parties. Rogue access points of the second kind target networks that do not employ mutual authentication (client-server server-client) and may be used in conjunction with a rogue RADIUS server, depending on security configuration of the target network. To prevent the installation of rogue access points, organizations can install wireless intrusion prevention systems to monitor the radio spectrum for unauthorized access points.