CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 61:

  When of the following technologies would be MOST appropriate to utilize when testing a new software patch before a company-wide deplyment?

  A. Cloud Computing
  B. Virtualization
  C. Redundancy
  D. Application control
  B. Virtualization

  ---

  Virtualization is used to host one or more operating systems in the memory of a single host computer and allows multiple operating systems to run simultaneously on the same hardware, reducing costs. Virtualization offers the flexibility of quickly and easily making backups of entire virtual systems, and quickly recovering the virtual system when errors occur. Furthermore, malicious code compromises of virtual systems rarely affect the host system, which allows for safer testing and experimentation.

• Question 62:

  Which of the following application attacks is used against a corporate directory service where there are unknown servers on the network?

  A. Rogue access point
  B. Zero day attack
  C. Packet sniffing
  D. LDAP injection
  D. LDAP injection

  ---

  Explanation: A directory service is accessed by using LDAP (Lightweight Directory Access Protocol). LDAP injection is an attack against a directory service. Just as SQL injection attacks take statements that are input by users and exploit

  weaknesses within, an LDAP injection attack exploits weaknesses in LDAP (Lightweight Directory Access Protocol) implementations. This can occur when the user's input is not properly filtered, and the result can be executed commands,

  modified content, or results returned to unauthorized queries. The best way to prevent LDAP injection attacks is to filter the user input and to use a validation scheme to make certain that queries do not contain exploits.

  One of the most common uses of LDAP is associated with user information. Numerous applications exist--such as employee directories--where users find other users by typing in a portion of their name. These queries are looking at the cn

  value or other fields (those defined for department, home directory, and so on). Someone attempting LDAP injection could feed unexpected values to the query to see what results are returned. All too often, finding employee information

  equates to finding usernames and values about those users that could be portions of their passwords.

• Question 63:

  A user has several random browser windows opening on their computer. Which of the following programs can be installed on his machine to help prevent this from happening?

  A. Antivirus
  B. Pop-up blocker
  C. Spyware blocker
  D. Anti-spam
  B. Pop-up blocker

  ---

  Pop-up blockers prevent websites from opening new browser windows without the users consent. These are often used for advertisements but can also be used to distribute malicious code.

• Question 64:

  A Chief Information Security Officer (CISO) is tasked with outsourcing the analysis of security logs. These will need to still be reviewed on a regular basis to ensure the security of the company has not been breached. Which of the following cloud service options would support this requirement?

  A. SaaS
  B. MaaS
  C. IaaS
  D. PaaS
  B. MaaS

  ---

  Monitoring-as-a-service (MaaS) is a cloud delivery model that falls under anything as a service (XaaS). MaaS allows for the deployment of monitoring functionalities for several other services and applications within the cloud.

• Question 65:

  A hacker has discovered a simple way to disrupt business for the day in a small company which relies on staff working remotely. In a matter of minutes the hacker was able to deny remotely working staff access to company systems with a script. Which of the following security controls is the hacker exploiting?

  A. DoS
  B. Account lockout
  C. Password recovery
  D. Password complexity
  B. Account lockout

  ---

  B: Account lockout automatically disables an account due to repeated failed log on attempts. The hacker must have executed a script to repeatedly try logging on to the remote accounts, forcing the account lockout policy to activate.

• Question 66:

  A major security risk with co-mingling of hosts with different security requirements is:

  A. Security policy violations.
  B. Zombie attacks.
  C. Password compromises.
  D. Privilege creep.
  A. Security policy violations.

  ---

  The entire network is only as strong as the weakest host. Thus with the co-mingling of hosts with different security requirements would be risking security policy violations.

• Question 67:

  Software developers at a company routinely make changes to production systems they maintain based on code deliveries that are only peer reviewed and are not rigorously tested by the test engineering group. These changes frequently result in a loss of service. Which of the following risk mitigation controls or strategies should be implemented to prevent these adhoc changes from accruing in the future?

  A. Threat modeling
  B. User rights reviews
  C. Change Management
  D. Trust modeling
  B. User rights reviews

• Question 68:

  A security administrator has deployed all laptops with Self Encrypting Drives (SED) and enforces key encryption. Which of the following represents the greatest threat to maintaining data confidentiality with these devices?

  A. Full data access can be obtained by connecting the drive to a SATA or USB adapter bypassing the SED hardware.
  B. A malicious employee can gain the SED encryption keys through software extraction allowing access to other laptops.
  C. If the laptop does not use a Secure Boot BIOS, the SED hardware is not enabled allowing full data access.
  D. Laptops that are placed in a sleep mode allow full data access when powered back on.
  D. Laptops that are placed in a sleep mode allow full data access when powered back on.

  ---

  Hardware-based encryption when built into the drive is transparent to the user. The drive except for bootup authentication operates just like any drive with no degradation in performance. When the computer is started up, the user is prompted to enter a password to allow the system to boot and allow access to the encrypted drive. When a laptop is placed into sleep mode (also known as standby mode), the computer is placed into a low power mode. In sleep mode, the computer is not fully shut down. The screen is turned off, the hard disks are turned off and the CPU is throttled down to its lowest power state. However, the computer state is maintained in memory (RAM). Most computers can be `woken' from sleep mode by pressing any key on the keyboard or pressing the power button. The computer can be configured to require a password on wake up, but if a password is not required, the computer will wake up and be logged in as it was at the time of going into sleep mode. This would enable full access to the data stored on the disks.

• Question 69:

  Jo an employee reports to the security manager that several files in a research and development folder that only JOE has access to have been improperly modified. The modified data on the files in recent and the modified by account is Joe's. The permissions on the folder have not been changed, and there is no evidence of malware on the server hosting the folder or on Joe's workstation. Several failed login attempts to Joe's account were discovered in the security log of the LDAP server. Given this scenario, which of the following should the security manager implement to prevent this in the future?

  A. Generic account prohibition
  B. Account lockout
  C. Password complexity
  D. User access reviews
  B. Account lockout

• Question 70:

  A network administrator needs to provide daily network usage reports on all layer 3 devices without compromising any data while gathering the information. Which of the following would be configured to provide these reports?

  A. SNMP
  B. SNMPv3
  C. ICMP
  D. SSH
  B. SNMPv3

  ---

  Currently, SNMP is predominantly used for monitoring and performance management. SNMPv3 defines a secure version of SNMP and also facilitates remote configuration of the SNMP entities.