CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 681:

  Which of the following can be performed when an element of the company policy cannot be enforced by technical means?

  A. Develop a set of standards
  B. Separation of duties
  C. Develop a privacy policy
  D. User training
  D. User training

  ---

  User training is an important aspect of maintaining safety and security. It helps improve users' security awareness in terms of prevention, enforcement, and threats. It is of critical importance when element of the company policy cannot be enforced by technical means.

• Question 682:

  Given a class C network a technician has been tasked with creating a separate subnet for each of the eight departments in the company. Which of the following network masks would allow for each department to have a unique network space and what is the maximum number of hosts each department could have?

  A. Network 255.255.255.192, 62 hosts
  B. Network 255.255.255.224, 30 hosts
  C. Network 255.255.255.240, 16 hosts
  D. Network 255.255.255.248, 32 hosts
  D. Network 255.255.255.248, 32 hosts

• Question 683:

  A recent audit has revealed that several users have retained permissions to systems they should no longer have rights to after being promoted or changed job positions. Which of the following controls would BEST mitigate this issue?

  A. Separation of duties
  B. User account reviews
  C. Group based privileges
  D. Acceptable use policies
  A. Separation of duties

• Question 684:

  The security administrator has installed a new firewall which implements an implicit DENY policy by default. Click on the firewall and configure it to allow ONLY the following communication.

  1.

  The Accounting workstation can ONLY access the web server on the public network over the default HTTPS port. The accounting workstation should not access other networks.

  2.

  The HR workstation should be restricted to communicate with the Financial server ONLY, over the default SCP port

  3.

  The Admin workstation should ONLY be able to access the servers on the secure network over the default TFTP port.

  Instructions: The firewall will process the rules in a top-down manner in order as a first match The port number must be typed in and only one port number can be entered per rule Type ANY for all ports. The original firewall configuration can

  be reset at any time by pressing the reset button. Once you have met the simulation requirements, click save and then Done to submit.

  

  Hot Area:

  

  

  ---

  Implicit deny is the default security stance that says if you aren't specifically granted access or privileges for a resource, you’re denied access by default.

  Rule #1 allows the Accounting workstation to ONLY access the web server on the public network over the default HTTPS port, which is TCP port 443.

  Rule #2 allows the HR workstation to ONLY communicate with the Financial server over the default SCP port, which is TCP Port 22

  Rule #3 and Rule #4 allow the Admin workstation to ONLY access the Financial and Purchasing servers located on the secure network over the default TFTP port, which is Port 69.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp.26, 44

  http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers

• Question 685:

  A security administrator is responsible for ensuring that there are no unauthorized devices utilizing the corporate network. During a routine scan, the security administrator discovers an unauthorized device belonging to a user in the marketing department. The user is using an android phone in order to browse websites. Which of the following device attributes was used to determine that the device was unauthorized?

  A. An IMEI address
  B. A phone number
  C. A MAC address
  D. An asset ID
  C. A MAC address

• Question 686:

  Several departments in a corporation have a critical need for routinely moving data from one system to another using removable storage devices. Senior management is concerned with data loss and the introduction of malware on the network. Which of the following choices BEST mitigates the range of risks associated with the continued use of removable storage devices?

  A. Remote wiping enabled for all removable storage devices
  B. Full-disk encryption enabled for all removable storage devices
  C. A well defined acceptable use policy
  D. A policy which details controls on removable storage use
  D. A policy which details controls on removable storage use

  ---

  Removable storage is both a benefit and a risk and since not all mobile devices support removable storage, the company has to has a comprehensive policy which details the controls of the use of removable s to mitigate the range of risks that are associated with the use of these devices.

• Question 687:

  Which of the following should Jane, a security administrator, perform before a hard drive is analyzed with forensics tools?

  A. Identify user habits
  B. Disconnect system from network
  C. Capture system image
  D. Interview witnesses
  C. Capture system image

  ---

  Capturing an image of the operating system in its exploited state can be helpful in revisiting the issue after the fact to learn more about it. Very much as helpful in same way that a virus sample is kept in laboratories to study later after a breakout. Also you should act in the order of volatility which states that the system image capture is first on the list of a forensic analysis.

• Question 688:

  When information is shared between two separate organizations, which of the following documents would describe the sensitivity as well as the type and flow of the information?

  A. SLA
  B. ISA
  C. BPA
  D. MOA
  D. MOA

• Question 689:

  Matt, the network engineer, has been tasked with separating network traffic between virtual machines on a single hypervisor. Which of the following would he implement to BEST address this requirement? (Select TWO).

  A. Virtual switch
  B. NAT
  C. System partitioning
  D. Access-list
  E. Disable spanning tree
  F. VLAN
  A. Virtual switch
  F. VLAN

  ---

  A virtual local area network (VLAN) is a hardware-imposed network segmentation created by switches. A virtual switch is a software application that allows communication between virtual machines. A combination of the two would best satisfy the question.

• Question 690:

  A cafe provides laptops for Internet access to their customers. The cafe is located in the center corridor of a busy shopping mall. The company has experienced several laptop thefts from the cafe during peak shopping hours of the day. Corporate has asked that the IT department provide a solution to eliminate laptop theft. Which of the following would provide the IT department with the BEST solution?

  A. Attach cable locks to each laptop
  B. Require each customer to sign an AUP
  C. Install a GPS tracking device onto each laptop
  D. Install security cameras within the perimeter of the caf?
  A. Attach cable locks to each laptop

  ---

  All laptop cases include a built-in security slot in which a cable lock can be inserted to prevent it from easily being removed from the premises.