CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 661:

  A firewall technician has been instructed to disable all non-secure ports on a corporate firewall. The technician has blocked traffic on port 21, 69, 80, and 137-139. The technician has allowed traffic on ports 22 and 443. Which of the following correctly lists the protocols blocked and allowed?

  A. Blocked: TFTP, HTTP, NetBIOS; Allowed: HTTPS, FTP
  B. Blocked: FTP, TFTP, HTTP, NetBIOS; Allowed: SFTP, SSH, SCP, HTTPS
  C. Blocked: SFTP, TFTP, HTTP, NetBIOS; Allowed: SSH, SCP, HTTPS
  D. Blocked: FTP, HTTP, HTTPS; Allowed: SFTP, SSH, SCP, NetBIOS
  B. Blocked: FTP, TFTP, HTTP, NetBIOS; Allowed: SFTP, SSH, SCP, HTTPS

  ---

  The question states that traffic on port 21, 69, 80, and 137-139 is blocked, while ports 22 and 443 are allowed.

  Port 21 is used for FTP by default.

  Port 69 is used for TFTP.

  Port 80 is used for HTTP.

  Ports 137-139 are used for NetBIOS.

  VMM uses SFTP over default port 22.

  Port 22 is used for SSH by default.

  SCP runs over TCP port 22 by default.

  Port 443 is used for HTTPS.

• Question 662:

  A network administrator uses an RFID card to enter the datacenter, a key to open the server rack, and a username and password to logon to a server. These are examples of which of the following?

  A. Multifactor authentication
  B. Single factor authentication
  C. Separation of duties
  D. Identification
  B. Single factor authentication

  ---

  Single-factor authentication (SFA) is a process for securing access to a given system by identifying the party requesting access via a single category of credentials. In this case, the network administrator makes use of an RFID card to access the datacenter, a key to access the server rack, and a username and password to access a server.

• Question 663:

  An administrator is implementing a security control that only permits the execution of allowed programs. Which of the following are cryptography concepts that should be used to identify the allowed programs? (Select two.)

  A. Digital signatures
  B. Hashing
  C. Asymmetric encryption
  D. openID
  E. key escrow
  A. Digital signatures
  B. Hashing

• Question 664:

  Which of the following helps to establish an accurate timeline for a network intrusion?

  A. Hashing images of compromised systems
  B. Reviewing the date of the antivirus definition files
  C. Analyzing network traffic and device logs
  D. Enforcing DLP controls at the perimeter
  C. Analyzing network traffic and device logs

  ---

  Network activity as well as intrusion can be viewed on device logs and by analyzing the network traffic that passed through your network. Thus to establish an accurate timeline for a network intrusion you can look at and analyze the device logs and network traffic to yield the appropriate information.

• Question 665:

  Company A and Company B both supply contractual services to a fast paced and growing auto parts manufacturer with a small local Area Network (LAN) at its local site. Company A performs in-house billing and invoices services for the local auto parts manufactacturer. Company B provides in-house parts and widgets services for the local auto parts manufacturers. Which of the following is the BEST method to mitigate security risk within the environment?

  A. Virtual Private Network
  B. Role-Based access
  C. Network segmentation
  D. Public Key Infrastructure
  C. Network segmentation

• Question 666:

  Which of the following cryptographic related browser settings allows an organization to communicate securely?

  A. SSL 3.0/TLS 1.0
  B. 3DES
  C. Trusted Sites
  D. HMAC
  A. SSL 3.0/TLS 1.0

  ---

  Secure Sockets Layer (SSL) is used to establish a secure communication connection between two TCP-based machines. Transport Layer Security (TLS) is a security protocol that expands upon SSL. Many industry analysts predict that TLS will replace SSL in the future. TLS 1.0 was first defined in RFC 2246 in January 1999 as an upgrade of SSL Version 3.0. As of February 2015, the latest versions of all major web browsers support TLS 1.0, 1.1, and 1.2, have them enabled by default.

• Question 667:

  Which of the following concepts allows an organization to group large numbers of servers together in order to deliver a common service?

  A. Clustering
  B. RAID
  C. Backup Redundancy
  D. Cold site
  A. Clustering

  ---

  Anytime you connect multiple computers to work/act together as a single server, it is known as clustering. Clustered systems utilize parallel processing (improving performance and availability) and add redundancy (but also add costs). Clustering is done whenever you connect multiple computers to work and act together as a single server. It is meant to utilize parallel processing and can also add to redundancy.

• Question 668:

  A software developer utilizes cryptographic functions to generate codes that verify message integrity. Due to the nature if the data that is being sent back and forth from the client application to the server, the developer would like to change the cryptographic function to one that verities both authentication and message integrity. Which of the following algorithms should the software developer utilize?

  A. HMAC
  B. SHA
  C. Two Fish
  D. RIPEMD
  D. RIPEMD

• Question 669:

  When an authorized application is installed on a server, the application triggers an alert on the HIDS. This is known as a:

  A. Vulnerability
  B. False negative
  C. False positive
  D. Threat vector
  C. False positive

• Question 670:

  A security administrator notices that a specific network administrator is making unauthorized changes to the firewall every Saturday morning. Which of the following would be used to mitigate this issue so that only security administrators can make changes to the firewall?

  A. Mandatory vacations
  B. Job rotation
  C. Least privilege
  D. Time of day restrictions
  C. Least privilege

  ---

  A least privilege policy is to give users only the permissions that they need to do their work and no more. That is only allowing security administrators to be able to make changes to the firewall by practicing the least privilege principle.