CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 721:

  An information bank has been established to store contacts, phone numbers and other records.

  An application running on UNIX would like to connect to this index server using port 88. Which of the following authentication services would this use this port by default?

  A. Kerberos
  B. TACACS+
  C. Radius
  D. LDAP
  A. Kerberos

  ---

  Explanation: Kerberos makes use of port 88.

• Question 722:

  When implementing a Public Key Infrastructure, which of the following should the sender use to digitally sign a document?

  A. A CSR
  B. A private key
  C. A certificate authority
  D. A public key
  B. A private key

• Question 723:

  A security technician has removed the sample configuration files from a database server. Which of the following application security controls has the technician attempted?

  A. Application hardening
  B. Application baselines
  C. Application patch management
  D. Application input validation
  A. Application hardening

• Question 724:

  A security administrator discovered that all communication over the company's encrypted wireless network is being captured by savvy employees with a wireless sniffing tool and is then being decrypted in an attempt to steal other employee's credentials. Which of the following technology is MOST likely in use on the company's wireless?

  A. WPA with TKIP
  B. VPN over open wireless
  C. WEP128-PSK
  D. WPA2-Enterprise
  C. WEP128-PSK

  ---

  WEP's major weakness is its use of static encryption keys. When you set up a router with a WEP encryption key, that one key is used by every device on your network to encrypt every packet that's transmitted. But the fact that packets are encrypted doesn't prevent them from being intercepted, and due to some esoteric technical flaws it's entirely possible for an eavesdropper to intercept enough WEP-encrypted packets to eventually deduce what the key is. This problem used to be something you could mitigate by periodically changing the WEP key (which is why routers generally allow you to store up to four keys). But few bother to do this because changing WEP keys is inconvenient and time-consuming because it has to be done not just on the router, but on every device that connects to it. As a result, most people just set up a single key and then continue using it ad infinitum. Even worse, for those that do change the WEP key, new research and developments reinforce how even changing WEP keys frequently is no longer sufficient to protect a WLAN. The process of 'cracking' a WEP key used to require that a malicious hacker intercept millions of packets plus spend a fair amount of time and computing power. Researchers in the computer science department of a German university recently demonstrated the capability to compromise a WEP-protected network very quickly. After spending less than a minute intercepting data (fewer than 100,000 packets in all) they were able to compromise a WEP key in just three seconds.

• Question 725:

  An administrator is investigating a system that may potentially be compromised, and sees the following log entries on the router.

  *Jul 15 14:47:29.779:%Router1: list 101 permitted tcp 192.10.3.204(57222) (FastEthernet 0/3) -> 10.10.1.5 (6667), 3 packets.

  *Jul 15 14:47:38.779:%Router1: list 101 permitted tcp 192.10.3.204(57222) (FastEthernet 0/3) -> 10.10.1.5 (6667), 6 packets.

  *Jul 15 14:47:45.779:%Router1: list 101 permitted tcp 192.10.3.204(57222) (FastEthernet 0/3) -> 10.10.1.5 (6667), 8 packets.

  Which of the following BEST describes the compromised system?

  A. It is running a rogue web server
  B. It is being used in a man-in-the-middle attack
  C. It is participating in a botnet
  D. It is an ARP poisoning attack
  C. It is participating in a botnet

  ---

  In this question, we have a source computer (192.10.3.204) sending data to a single destination IP address 10.10.1.5. No data is being received back by source computer which suggests the data being sent is some kind of Denial-of-service

  attack. This is common practice for computers participating in a botnet. The port used is TCP 6667 which is IRC (Internet Relay Chat). This port is used by many Trojans and is commonly used for DoS attacks.

  Software running on infected computers called zombies is often known as a botnet. Bots, by themselves, are but a form of software that runs automatically and autonomously. (For example, Google uses the Googlebot to find web pages and

  bring back values for the index.)

  Botnet, however, has come to be the word used to describe malicious software running on a zombie and under the control of a bot-herder.

  Denial-of-service attacks--DoS and DDoS--can be launched by botnets, as can many forms of adware, spyware, and spam (via spambots). Most bots are written to run in the background with no visible evidence of their presence. Many

  malware kits can be used to create botnets and modify existing ones.

• Question 726:

  Which of the following BEST describes an attack where communications between two parties are intercepted and forwarded to each party with neither party being aware of the interception and potential modification to the communications?

  A. Spear phishing
  B. Main-in-the-middle
  C. URL hijacking
  D. Transitive access
  B. Main-in-the-middle

• Question 727:

  A new intern was assigned to the system engineering department, which consists of the system architect and system software developer's teams. These two teams have separate privileges. The intern requires privileges to view the system architectural drawings and comment on some software development projects. Which of the following methods should the system administrator implement?

  A. Group based privileges
  B. Generic account prohibition
  C. User access review
  D. Credential management
  A. Group based privileges

  ---

  You can assign permissions to access resources either to a user or a group. The most efficient way is to assign permissions to a group (group based privileges). By assigning the intern's user account to both groups, the intern will inherit the permissions assigned to those groups.

• Question 728:

  A small IT security form has an internal network composed of laptops, servers, and printers. The network has both wired and wireless segments and supports VPN access from remote sites. To protect the network from internal and external threats, including social engineering attacks, the company decides to implement stringent security controls. Which of the following lists is the BEST combination of security controls to implement?

  A. Disable SSID broadcast, require full disk encryption on servers, laptop, and personally owned electronic devices, enable MAC filtering on WAPs, require photographic ID to enter the building.
  B. Enable port security; divide the network into segments for servers, laptops, public and remote users; apply ACLs to all network equipment; enable MAC filtering on WAPs; and require two-factor authentication for network access.
  C. Divide the network into segments for servers, laptops, public and remote users; require the use of one time pads for network key exchange and access; enable MAC filtering ACLs on all servers.
  D. Enable SSID broadcast on a honeynet; install monitoring software on all corporate equipment' install CCTVs to deter social engineering; enable SE Linux in permissive mode.
  B. Enable port security; divide the network into segments for servers, laptops, public and remote users; apply ACLs to all network equipment; enable MAC filtering on WAPs; and require two-factor authentication for network access.

• Question 729:

  A company has a corporate infrastructure where end users manage their own certificate keys. Which of the following is considered the MOST secure way to handle master keys associated with these certificates?

  A. Key escrow with key recovery
  B. Trusted first party
  C. Personal Identity Verification
  D. Trusted third party
  A. Key escrow with key recovery

• Question 730:

  A security technician is concerned there4 is not enough security staff available the web servers and database server located in the DMZ around the clock. Which of the following technologies, when deployed, would provide the BEST round the clock automated protection?

  A. HIPS and SIEM
  B. NIPS and HIDS
  C. HIDSand SIEM
  D. NIPSandHIPS
  B. NIPS and HIDS