CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 641:

  The company's sales team plans to work late to provide the Chief Executive Officer (CEO) with a special report of sales before the quarter ends. After working for several hours, the team finds they cannot save or print the reports.

  Which of the following controls is preventing them from completing their work?

  A. Discretionary access control
  B. Role-based access control
  C. Time of Day access control
  D. Mandatory access control
  C. Time of Day access control

  ---

  Time of day restrictions limit when users can access specific systems based on the time of day or week. It can limit access to sensitive environments to normal business hours when oversight and monitoring can be performed to prevent fraud, abuse, or intrusion. In this case, the sales team is prevented from saving or printing reports after a certain time.

• Question 642:

  Although a web enabled application appears to only allow letters in the comment field of a web form, malicious user was able to carry a SQL injection attack by sending special characters through the web comment field. Which of the following has the application programmer failed to implement?

  A. Revision control system
  B. Client side exception handling
  C. Server side validation D. Server hardening
  C. Server side validation D. Server hardening

• Question 643:

  An organization has an internal PKI that utilizes client certificates on each workstation. When deploying a new wireless network, the security engineer has asked that the new network authenticate clients by utilizes the existing client certificates. Which of the following authentication mechanisms should be utilized to meet this goal?

  A. EAP-FAST
  B. LEAP
  C. PEAP
  D. EAP-TLS
  B. LEAP

• Question 644:

  A network inventory discovery application requires non-privileged access to all hosts on a network for inventory of installed applications. A service account is created by the network inventory discovery application for accessing all hosts. Which of the following is the MOST efficient method for granting the account non-privileged access to the hosts?

  A. Implement Group Policy to add the account to the users group on the hosts
  B. Add the account to the Domain Administrator group
  C. Add the account to the Users group on the hosts
  D. Implement Group Policy to add the account to the Power Users group on the hosts.
  A. Implement Group Policy to add the account to the users group on the hosts

  ---

  Group Policy is an infrastructure that allows you to implement specific configurations for users and computers. Group Policy settings are contained in Group Policy objects (GPOs), which are linked to the following Active Directory directory service containers: sites, domains, or organizational units (OUs). This means that if the GPO is linked to the domain, all Users groups in the domain will include the service account.

• Question 645:

  An employee from the fire Marshall's office arrives to inspect the data center. The operator allows him to bypass the multi-factor authentication to enter the data center. Which of the following types of attacks may be underway?

  A. Impersonation
  B. Hoax
  C. Tailgating
  D. Spoofing
  C. Tailgating

• Question 646:

  Matt, an IT administrator, wants to protect a newly built server from zero day attacks. Which of the following would provide the BEST level of protection?

  A. HIPS
  B. Antivirus
  C. NIDS
  D. ACL
  A. HIPS

  ---

  Intrusion prevention systems (IPS), also known as intrusion detection and prevention systems (IDPS), are network security appliances that monitor network and/or system activities for malicious activity. The main functions of intrusion prevention systems are to identify malicious activity, log information about this activity, attempt to block/stop it, and report it.

  Intrusion prevention systems are considered extensions of intrusion detection systems because they both monitor network traffic and/or system activities for malicious activity. The main differences are, unlike intrusion detection systems, intrusion prevention systems are placed in-line and are able to actively prevent/block intrusions that are detected. More specifically, IPS can take such actions as sending an alarm, dropping the malicious packets, resetting the connection and/ or blocking the traffic from the offending IP address. An IPS can also correct Cyclic Redundancy Check (CRC) errors, unfragment packet streams, prevent TCP sequencing issues, and clean up unwanted transport and network layer options. Host-based intrusion prevention system (HIPS) is an installed software package which monitors a single host for suspicious activity by analyzing events occurring within that host. A Host-based intrusion prevention system (HIPS) is an installed software package which monitors a single host for suspicious activity by analyzing events occurring within that host. As a zero-day attack is an unknown vulnerability (a vulnerability that does not have a fix or a patch to prevent it), the best defence would be an intrusion prevention system.

• Question 647:

  Ann, a software developer, has installed some code to reactivate her account one week after her account has been disabled. Which of the following is this an example of? (Select TWO).

  A. Rootkit
  B. Logic Bomb
  C. Botnet
  D. Backdoor
  E. Spyware
  B. Logic Bomb
  D. Backdoor

  ---

  This is an example of both a logic bomb and a backdoor. The logic bomb is configured to `go off' or activate one week after her account has been disabled. The reactivated account will provide a backdoor into the system.

  A logic bomb is a piece of code intentionally inserted into a software system that will set off a malicious function when specified conditions are met. For example, a programmer may hide a piece of code that starts deleting files should they

  ever be terminated from the company.

  Software that is inherently malicious, such as viruses and worms, often contain logic bombs that execute a certain payload at a pre-defined time or when some other condition is met. This technique can be used by a virus or worm to gain

  momentum and spread before being noticed. Some viruses attack their host systems on specific dates, such as Friday the 13th or April Fool's Day. Trojans that activate on certain dates are often called "time bombs".

  To be considered a logic bomb, the payload should be unwanted and unknown to the user of the software. As an example, trial programs with code that disables certain functionality after a set time are not normally regarded as logic bombs. A

  backdoor in a computer system (or cryptosystem or algorithm) is a method of bypassing normal authentication, securing unauthorized remote access to a computer, obtaining access to plaintext, and so on, while attempting to remain

  undetected. The backdoor may take the form of an installed program (e.g., Back Orifice) or may subvert the system through a rootkit.

  A backdoor in a login system might take the form of a hard coded user and password combination which gives access to the system.

• Question 648:

  The IT department has installed new wireless access points but discovers that the signal extends far into the parking lot. Which of the following actions should be taken to correct this?

  A. Disable the SSID broadcasting
  B. Configure the access points so that MAC filtering is not used
  C. Implement WEP encryption on the access points
  D. Lower the power for office coverage only
  D. Lower the power for office coverage only

  ---

  On the chance that the signal is actually traveling too far, some access points include power level controls, which allow you to reduce the amount of output provided.

• Question 649:

  An administrator is configuring a new Linux web server where each user account is confined to a cheroot jail. Which of the following describes this type of control?

  A. SysV
  B. Sandbox
  C. Zone
  D. Segmentation
  B. Sandbox

• Question 650:

  Used in conjunction, which of the following are PII? (Select TWO).

  A. Marital status
  B. Favorite movie
  C. Pet's name
  D. Birthday
  E. Full name
  D. Birthday
  E. Full name

  ---

  Personally identifiable information (PII) is a catchall for any data that can be used to uniquely identify an individual. This data can be anything from the person's name to a fingerprint (think biometrics), credit card number, or patient record. A birthday together with a full name makes it personally identifiable information.