CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 701:

  An administrator is building a development environment and requests that three virtual servers are cloned and placed in a new virtual network isolated from the production network. Which of the following describes the environment the administrator is building?

  A. Cloud
  B. Trusted
  C. Sandbox
  D. Snapshot
  C. Sandbox

  ---

  Sandboxing is the process of isolating a system before installing new applications on it so as to restrict any potential malware that may be embedded in the new application from being able to cause harm to production systems.

• Question 702:

  Due to issues with building keys being duplicated and distributed, a security administrator wishes to change to a different security control regarding a restricted area. The goal is to provide access based upon facial recognition. Which of the following will address this requirement?

  A. Set up mantraps to avoid tailgating of approved users.
  B. Place a guard at the entrance to approve access.
  C. Install a fingerprint scanner at the entrance.
  D. Implement proximity readers to scan users' badges.
  B. Place a guard at the entrance to approve access.

  ---

  A guard can be instructed to deny access until authentication has occurred will address the situation adequately.

• Question 703:

  A recent audit of a company's identity management system shows that 30% of active accounts belong to people no longer with the firm. Which of the following should be performed to help avoid this scenario? (Select TWO).

  A. Automatically disable accounts that have not been utilized for at least 10 days.
  B. Utilize automated provisioning and de-provisioning processes where possible.
  C. Request that employees provide a list of systems that they have access to prior to leaving the firm.
  D. Perform regular user account review / revalidation process.
  E. Implement a process where new account creations require management approval.
  B. Utilize automated provisioning and de-provisioning processes where possible.
  D. Perform regular user account review / revalidation process.

  ---

  Provisioning and de-provisioning processes can occur manually or automatically. Since the manual processes are so time consuming, the automated option should be used as it is more efficient. Revalidating user accounts would determine which users are no longer active.

• Question 704:

  A web application is configured to target browsers and allow access to bank accounts to siphon money to a foreign account. This is an example of which of the following attacks?

  A. SQL injection
  B. Header manipulation
  C. Cross-site scripting
  D. Flash cookie exploitation
  C. Cross-site scripting

• Question 705:

  Developers currently have access to update production servers without going through an approval process. Which of the following strategies would BEST mitigate this risk?

  A. Incident management
  B. Clean desk policy
  C. Routine audits
  D. Change management
  D. Change management

  ---

  Change Management is a risk mitigation approach and refers to the structured approach that is followed to secure a company's assets. This structured approach involves policies that should be in place and technological controls that should be enforced.

• Question 706:

  A security program manager wants to actively test the security posture of a system. The system is not yet in production and has no uptime requirement or active user base. Which of the following methods will produce a report which shows vulnerabilities that were actually exploited?

  A. Peer review
  B. Component testing
  C. Penetration testing
  D. Vulnerability testing
  D. Vulnerability testing

• Question 707:

  Which of the following is primarily used to provide fault tolerance at the application level? (Select TWO)

  A. Load balancing
  B. RAID array
  C. RAID 6
  D. Server clustering
  E. JBOD array
  B. RAID array
  D. Server clustering

• Question 708:

  A network administrator has a separate user account with rights to the domain administrator group. However, they cannot remember the password to this account and are not able to login to the server when needed. Which of the following is MOST accurate in describing the type of issue the administrator is experiencing?

  A. Single sign-on
  B. Authorization
  C. Access control
  D. Authentication
  D. Authentication

  ---

  Authentication generally requires one or more of the following:

  Something you know: a password, code, PIN, combination, or secret phrase. Something you have: a smart card, token device, or key. Something you are: a fingerprint, a retina scan, or voice recognition; often referred to as biometrics,

  discussed later in this chapter.

  Somewhere you are: a physical or logical location. Something you do: typing rhythm, a secret handshake, or a private knock.

• Question 709:

  A bank has a fleet of aging payment terminals used by merchants for transactional processing. The terminals currently support single DES but require an upgrade in order to be compliant with security standards. Which of the following is likely to be the simplest upgrade to the aging terminals which will improve in-transit protection of transactional data?

  A. AES
  B. 3DES
  C. RC4
  D. WPA2
  B. 3DES

  ---

  3DES (Triple DES) is based on DES.

  In cryptography, Triple DES (3DES) is the common name for the Triple Data Encryption Algorithm symmetric-key block cipher, which applies the Data Encryption Standard (DES) cipher algorithm three times to each data block. The electronic payment industry uses Triple DES and continues to develop and promulgate standards based upon it (e.g. EMV). Microsoft OneNote, Microsoft Outlook 2007, and Microsoft System Center Configuration Manager 2012, use Triple DES to password protect user content and system data.

• Question 710:

  Matt, the Chief Information Security Officer (CISO), tells the network administrator that a security company has been hired to perform a penetration test against his network. The security company asks Matt which type of testing would be most beneficial for him. Which of the following BEST describes what the security company might do during a black box test?

  A. The security company is provided with all network ranges, security devices in place, and logical maps of the network.
  B. The security company is provided with no information about the corporate network or physical locations.
  C. The security company is provided with limited information on the network, including all network diagrams.
  D. The security company is provided with limited information on the network, including some subnet ranges and logical network diagrams.
  B. The security company is provided with no information about the corporate network or physical locations.

  ---

  The term black box testing is generally associated with application testing. However, in this question the term is used for network testing. Black box testing means testing something when you have no knowledge of the inner workings.

  Black-box testing is a method of software testing that examines the functionality of an application without peering into its internal structures or workings. This method of test can be applied to virtually every level of software testing: unit,

  integration, system and acceptance. It typically comprises most if not all higher level testing, but can also dominate unit testing as well.

  Specific knowledge of the application's code/internal structure and programming knowledge in general is not required. The tester is aware of what the software is supposed to do but is not aware of how it does it. For instance, the tester is

  aware that a particular input returns a certain, invariable output but is not aware of how the software produces the output in the first place.