CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 671:

  An application developer needs to allow employees to use their network credentials to access a new application being developed. Which of the following should be configured in the new application to enable this functionality?

  A. LDAP
  B. ACLs
  C. SNMP
  D. IPSec
  A. LDAP

• Question 672:

  A security architect is designing an enterprise solution for the sales force of a corporation which handles sensitive customer data. The solution must allow users to work from remote offices and support traveling users. Which of the following is the MOST appropriate control for the architect to focus onto ensure confidentiality of data stored on laptops?

  A. Full-disk encryption
  B. Digital sign
  C. Federated identity management
  D. Cable locks
  A. Full-disk encryption

• Question 673:

  Virtualization that allows an operating system kernel to run multiple isolated instances of the guest is called:

  A. Process segregation
  B. Software defined network
  C. Containers
  D. Sandboxing
  C. Containers

• Question 674:

  A bank chief information security officer (CISO) is responsible for a mobile banking platform that operates natively on iOS and Andriod. Which of the following security controls helps protect the associated publicly accessible API endpoints?

  A. Mobile device management
  B. Jailbreak detection
  C. Network segmentation
  D. Application firewalls
  D. Application firewalls

• Question 675:

  The datacenter manager is reviewing a problem with a humidity factor that is too low. Which of the following environmental problems may occur?

  A. EMI emanations
  B. Static electricity
  C. Condensation
  D. Dry-pipe fire suppression
  B. Static electricity

  ---

  Humidity control prevents the buildup of static electricity in the environment. If the humidity drops much below 50 percent, electronic components are extremely vulnerable to damage from electrostatic shock.

• Question 676:

  Which of the following can BEST help prevent cross-site scripting attacks and buffer overflows on a production system?

  A. Input validation
  B. Network intrusion detection system
  C. Anomaly-based HIDS
  D. Peer review
  A. Input validation

  ---

  Input validation is a defensive technique intended to mitigate against possible user input attacks, such as buffer overflows and fuzzing. Input validation checks every user input submitted to the application before processing that input. The check could be a length, a character type, a language type, or a domain.

• Question 677:

  Which of the following can be implemented if a security administrator wants only certain devices connecting to the wireless network?

  A. Disable SSID broadcast
  B. Install a RADIUS server
  C. Enable MAC filtering
  D. Lowering power levels on the AP
  C. Enable MAC filtering

  ---

  MAC filtering is commonly used in wireless networks. In computer networking, MAC Filtering (or GUI filtering, or layer 2 address filtering) refers to a security access control method whereby the 48-bit address assigned to each network card is

  used to determine access to the network.

  MAC addresses are uniquely assigned to each card, so using MAC filtering on a network permits and denies network access to specific devices through the use of blacklists and whitelists. While the restriction of network access through the

  use of lists is straightforward, an individual person is not identified by a MAC address, rather a device only, so an authorized person will need to have a whitelist entry for each device that he or she would use to access the network.

• Question 678:

  An internal auditor is concerned with privilege creep that is associated with transfers inside the company. Which mitigation measure would detect and correct this?

  A. User rights reviews
  B. Least privilege and job rotation
  C. Change management
  D. Change Control
  A. User rights reviews

  ---

  A privilege audit is used to determine that all groups, users, and other accounts have the appropriate privileges assigned according to the policies of an organization. This means that a user rights review will reveal whether user accounts have been assigned according to their `new' job descriptions , or if there are privilege creep culprits after transfers has occurred.

• Question 679:

  Pete, a security engineer, is trying to inventory all servers in a rack. The engineer launches RDP sessions to five different PCs and notices that the hardware properties are similar. Additionally, the MAC addresses of all five servers appear on the same switch port. Which of the following is MOST likely the cause?

  A. The system is running 802.1x.
  B. The system is using NAC.
  C. The system is in active-standby mode.
  D. The system is virtualized.
  D. The system is virtualized.

  ---

  Virtualization allows a single set of hardware to host multiple virtual machines.

• Question 680:

  An application developer has coded a new application with a module to examine all user entries for the graphical user interface. The module verifies that user entries match the allowed types for each field and that OS and database commands are rejected before entries are sent for further processing within the application. These are example of:

  A. Input validation
  B. SQL injection
  C. Application whitelisting
  D. Error handling
  A. Input validation