CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 731:

  A Chief Executive Officer (CEO) is steering company towards cloud computing. The CEO is requesting a federated sign-on method to have users sign into the sales application. Which of the following methods will be effective for this purpose?

  A. SAML
  B. RADIUS
  C. Kerberos
  D. LDAP
  A. SAML

• Question 732:

  A security administrator is selecting an MDM solution for an organization, which has strict security requirements for the confidentiality of its data on end user devices. The organization decides to allow BYOD, but requires that users wishing to participate agree to the following specific device configurations; camera disablement, password enforcement, and application whitelisting. The organization must be able to support a device portfolio of differing mobile operating systems. Which of the following represents the MOST relevant technical security criteria for the MDM?

  A. Breadth of support for device manufacturers' security configuration APIS
  B. Ability to extend the enterprise password polices to the chosen MDM
  C. Features to support the backup and recovery of the stored corporate data
  D. Capability to require the users to accept an AUP prior to device onboarding
  B. Ability to extend the enterprise password polices to the chosen MDM

• Question 733:

  A computer security officer has investigated a possible data breach and has found it credible. The officer notifies the data center manager and the Chief Information Security Officer (CISO). This is an example of:

  A. escalation and notification.
  B. first responder.
  C. incident identification.
  D. incident mitigation.
  A. escalation and notification.

  ---

  Escalation and notification is a response strategy that outlines a staged procedure of escalation and notification that is to be followed in the event of a security incident. Only those in specific positions of authority or responsibility must receive notification of the security breach.

• Question 734:

  An employee attempts to go to a well-known bank site using the company-standard web browser by correctly typing in the address of the site into the web browser. The employee is directed to a website that looks like the bank's site but is not the actual bank site. The employee's user name and password are subsequently stolen. This is an example of which of the following?

  A. Watering hole attack
  B. Cross-site scripting
  C. DNS poisoning
  D. Man-in-the-middle attack
  C. DNS poisoning

• Question 735:

  Encryption of data at rest is important for sensitive information because of which of the following?

  A. Facilitates tier 2 support, by preventing users from changing the OS
  B. Renders the recovery of data harder in the event of user password loss
  C. Allows the remote removal of data following eDiscovery requests
  D. Prevents data from being accessed following theft of physical equipment
  D. Prevents data from being accessed following theft of physical equipment

  ---

  Data encryption allows data that has been stolen to remain out of the eyes of the intruders who took it as long as they do not have the proper passwords.

• Question 736:

  Joe needs to track employees who log into a confidential database and edit files. In the past, critical files have been edited, and no one admits to making the edits. Which of the following does Joe need to implement in order to enforce accountability?

  A. Non-repudiation
  B. Fault tolerance
  C. Hashing
  D. Redundancy
  C. Hashing

• Question 737:

  Which of the following is a hardware-based security technology included in a computer?

  A. Symmetric key
  B. Asymmetric key
  C. Whole disk encryption
  D. Trusted platform module
  D. Trusted platform module

  ---

  Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the system's motherboard and is enabled or disable in BIOS. It helps with hash key generation and stores cryptographic keys, passwords, or certificates.

• Question 738:

  Based on information leaked to industry websites, business management is concerned that unauthorized employees are accessing critical project information for a major, well-known new product. To identify any such users, the security administrator could:

  A. Set up a honeypot and place false project documentation on an unsecure share.
  B. Block access to the project documentation using a firewall.
  C. Increase antivirus coverage of the project servers.
  D. Apply security updates and harden the OS on all project servers.
  A. Set up a honeypot and place false project documentation on an unsecure share.

  ---

  In this scenario, we would use a honeypot as a `trap' to catch unauthorized employees who are accessing critical project information.

  A honeypot is a system whose purpose it is to be attacked. An administrator can watch and study the attack to research current attack methodologies.

  According to the Wepopedia.com, a Honeypot luring a hacker into a system has several main purposes:

  The administrator can watch the hacker exploit the vulnerabilities of the system, thereby learning where the system has weaknesses that need to be redesigned. The hacker can be caught and stopped while trying to obtain root access to the

  system. By studying the activities of hackers, designers can better create more secure systems that are potentially invulnerable to future hackers.

  There are two main types of honeypots:

  Production - A production honeypot is one used within an organization's environment to help mitigate risk.

  Research ?A research honeypot add value to research in computer security by providing a platform to study the threat.

• Question 739:

  Sara, an application developer, implemented error and exception handling alongside input validation. Which of the following does this help prevent?

  A. Buffer overflow
  B. Pop-up blockers
  C. Cross-site scripting
  D. Fuzzing
  A. Buffer overflow

  ---

  Buffer overflow is an exploit at programming error, bugs and flaws. It occurs when an application is fed more input data than it is programmed to handle. This may cause the application to terminate or to write data beyond the end of the allocated space in memory. The termination of the application may cause the system to send the data with temporary access to privileged levels in the system, while overwriting can cause important data to be lost. Proper error and exception handling and input validation will help prevent Buffer overflow exploits.

• Question 740:

  A system administrator is configuring UNIX accounts to authenticate against an external server. The configuration file asks for the following information DC=ServerName and DC=COM. Which of the following authentication services is being used?

  A. RADIUS
  B. SAML
  C. TACACS+
  D. LDAP
  D. LDAP

  ---

  The Lightweight Directory Access Protocol is an open, vendor-neutral, industry standard application protocol for accessing and maintaining distributed directory information services over an Internet Protocol (IP) network. Directory services play an important role in developing intranet and Internet applications by allowing the sharing of information about users, systems, networks, services, and applications throughout the network. As examples, directory services may provide any organized set of records, often with a hierarchical structure, such as a corporate email directory. Similarly, a telephone directory is a list of subscribers with an address and a phone number. An entry can look like this when represented in LDAP Data Interchange Format (LDIF) (LDAP itself is a binary protocol): dn: cn=John Doe,dc=example,dc=com cn: John Doe givenName: John sn: Doe telephoneNumber: +1 888 555 6789 telephoneNumber: +1 888 555 1232 mail: [email protected] manager: cn=Barbara Doe,dc=example,dc=com objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: person objectClass: top

  "dn" is the distinguished name of the entry; it is neither an attribute nor a part of the entry. "cn=John Doe" is the entry's RDN (Relative Distinguished Name), and "dc=example,dc=com" is the DN of the parent entry, where "dc" denotes 'Domain Component'. The other lines show the attributes in the entry. Attribute names are typically mnemonic strings, like "cn" for common name, "dc" for domain component, "mail" for e-mail address, and "sn" for surname.