CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 651:

  Which of the following would BEST be used to calculate the expected loss of an event, if the likelihood of an event occurring is known? (Select TWO).

  A. DAC
  B. ALE
  C. SLE
  D. ARO
  E. ROI
  B. ALE
  C. SLE

  ---

  ALE (Annual Loss Expectancy) is equal to the SLE (Single Loss Expectancy) times the annualized rate of occurrence. SLE (Single Loss Expectancy) is equal to asset value (AV) times exposure factor (EF).

• Question 652:

  To mitigate the risk of intrusion, an IT Manager is concerned with using secure versions of protocols and services whenever possible. In addition, the security technician is required to monitor the types of traffic being generated. Which of the following tools is the technician MOST likely to use?

  A. Port scanner
  B. Network analyzer
  C. IPS
  D. Audit Logs
  B. Network analyzer

• Question 653:

  Which of the following ports is used for SSH, by default?

  A. 23
  B. 32
  C. 12
  D. 22
  D. 22

  ---

  Secure Shell (SSH) is a cryptographic network protocol for securing data communication. It establishes a secure channel over an insecure network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login, remote command execution, but any network service can be secured with SSH. SSH uses port 22.

• Question 654:

  Which of the following technical controls helps to prevent Smartphones from connecting to a corporate network?

  A. Application white listing
  B. Remote wiping
  C. Acceptable use policy
  D. Mobile device management
  D. Mobile device management

  ---

  Mobile device management (MDM) is allows for managing the mobile devices that employees use to access company resources. MDM is intended to improve security, provide monitoring, enable remote management, and support troubleshooting. It can be used to push or remove applications, manage data, and enforce configuration settings on these devices.

• Question 655:

  A company is deploying a new VoIP phone system. They require 99.999% uptime for their phone service and are concerned about their existing data network interfering with the VoIP phone system. The core switches in the existing data network are almost fully saturated. Which of the following options will pro-vide the best performance and availability for both the VoIP traffic, as well as the traffic on the existing data network?

  A. Put the VoIP network into a different VLAN than the existing data network.
  B. Upgrade the edge switches from 10/100/1000 to improve network speed
  C. Physically separate the VoIP phones from the data network
  D. Implement flood guards on the data network
  A. Put the VoIP network into a different VLAN than the existing data network.

• Question 656:

  Using a protocol analyzer, a security consultant was able to capture employee's credentials. Which of the following should the consultant recommend to the company, in order to mitigate the risk of employees credentials being captured in the same manner in the future?

  A. Wiping of remnant data
  B. Hashing and encryption of data in-use
  C. Encryption of data in-transit
  D. Hashing of data at-rest
  B. Hashing and encryption of data in-use

• Question 657:

  A security specialist has been asked to evaluate a corporate network by performing a vulnerability assessment. Which of the following will MOST likely be performed?

  A. Identify vulnerabilities, check applicability of vulnerabilities by passively testing security controls.
  B. Verify vulnerabilities exist, bypass security controls and exploit the vulnerabilities.
  C. Exploit security controls to determine vulnerabilities and misconfigurations.
  D. Bypass security controls and identify applicability of vulnerabilities by passively testing security controls.
  A. Identify vulnerabilities, check applicability of vulnerabilities by passively testing security controls.

  ---

  We need to determine if vulnerabilities exist by passively testing security controls. A vulnerability scan is the automated process of proactively identifying security vulnerabilities of computing systems in a network in order to determine if and where a system can be exploited and/or threatened. While public servers are important for communication and data transfer over the Internet, they open the door to potential security breaches by threat agents, such as malicious hackers. Vulnerability scanning employs software that seeks out security flaws based on a database of known flaws, testing systems for the occurrence of these flaws and generating a report of the findings that an individual or an enterprise can use to tighten the network's security. Vulnerability scanning typically refers to the scanning of systems that are connected to the Internet but can also refer to system audits on internal networks that are not connected to the Internet in order to assess the threat of rogue software or malicious employees in an enterprise.

• Question 658:

  The security administrator receives a service ticket saying a host based firewall is interfering with the operation of a new application that is being tested in delevopment. The administrator asks for clarification on which ports need to be open. The software vendor replies that it could use up to 20 ports and many customers have disabled the host based firewall. After examining the system the administrator sees several ports that are open for database and application servers that only used locally. The vendor continues to recommend disabling the host based firewall. Which of the following is the best course of action for the administrator to take?

  A. Allow ports used by the application through the network firewall
  B. Allow ports used externally through the host firewall
  C. Follow the vendor recommendations and disable the host firewall
  D. Allow ports used locally through the host firewall
  D. Allow ports used locally through the host firewall

• Question 659:

  A merchant acquirer has the need to store credit card numbers in a transactional database in a high performance environment. Which of the following BEST protects the credit card data?

  A. Database field encryption
  B. File-level encryption
  C. Data loss prevention system
  D. Full disk encryption
  A. Database field encryption

  ---

  Database encryption makes use of cryptography functions that are built into the database software to encrypt the data stored in the data base. This often offers granular encryption options which allows for the encryptions of the entire database, specific database tables, or specific database fields, such as a credit card number field.

• Question 660:

  When considering a vendor-specific vulnerability in critical industrial control systems which of the following techniques supports availability?

  A. Deploying identical application firewalls at the border
  B. Incorporating diversity into redundant design
  C. Enforcing application white lists on the support workstations
  D. Ensuring the systems' anti-virus definitions are up-to-date
  B. Incorporating diversity into redundant design

  ---

  If you know there is a vulnerability that is specific to one vendor, you can improve availability by implementing multiple systems that include at least one system from a different vendor and so is not affected by the vulnerability.