CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 751:

  Identifying residual is MOST important to which of the following concepts?

  A. Risk deterrence
  B. Risk acceptance
  C. Risk mitigation
  D. Risk avoidance
  C. Risk mitigation

• Question 752:

  A way to assure data at-rest is secure even in the event of loss or theft is to use:

  A. Full device encryption.
  B. Special permissions on the file system.
  C. Trusted Platform Module integration.
  D. Access Control Lists.
  A. Full device encryption.

  ---

  Device encryption encrypts the data on the device. This feature ensures that the data on the device cannot be accessed in a useable form should the device be stolen.

• Question 753:

  A security engineer is faced with competing requirements from the networking group and database administrators. The database administrators would like ten application servers on the same subnet for ease of administration, whereas the networking group would like to segment all applications from one another. Which of the following should the security administrator do to rectify this issue?

  A. Recommend performing a security assessment on each application, and only segment the applications with the most vulnerability
  B. Recommend classifying each application into like security groups and segmenting the groups from one another
  C. Recommend segmenting each application, as it is the most secure approach
  D. Recommend that only applications with minimal security features should be segmented to protect them
  B. Recommend classifying each application into like security groups and segmenting the groups from one another

• Question 754:

  A system requires administrators to be logged in as the "root" in order to make administrator changes. Which of the following controls BEST mitigates the risk associated with this scenario?

  A. Require that all administrators keep a log book of times and justification for accessing root
  B. Encrypt all users home directories using file-level encryption
  C. Implement a more restrictive password rotation policy for the shared root account
  D. Force administrator to log in with individual accounts and switch to root
  E. Add the administrator to the local group
  D. Force administrator to log in with individual accounts and switch to root

• Question 755:

  Which of the following is best practice to put at the end of an ACL?

  A. Implicit deny
  B. Time of day restrictions
  C. Implicit allow
  D. SNMP string
  A. Implicit deny

  ---

  An implicit deny clause is implied at the end of each ACL. This implies that if you aren't specifically granted access or privileges for a resource, you're denied access by default. The implicit deny clause is set by the system.

• Question 756:

  Which of the following attacks targets high level executives to gain company information?

  A. Phishing
  B. Whaling
  C. Vishing
  D. Spoofing
  B. Whaling

  ---

  Whaling is a specific kind of malicious hacking within the more general category of phishing, which involves hunting for data that can be used by the hacker. In general, phishing efforts are focused on collecting personal data about users. In whaling, the targets are high-ranking bankers, executives or others in powerful positions or job titles. Hackers who engage in whaling often describe these efforts as "reeling in a big fish," applying a familiar metaphor to the process of scouring technologies for loopholes and opportunities for data theft. Those who are engaged in whaling may, for example, hack into specific networks where these powerful individuals work or store sensitive data. They may also set up keylogging or other malware on a work station associated with one of these executives. There are many ways that hackers can pursue whaling, leading C-level or top- level executives in business and government to stay vigilant about the possibility of cyber threats.

• Question 757:

  A security technician is implementing PKI on a Network. The technician wishes to reduce the amount of bandwidth used when verifying the validity of a certificate. Which of the following should the technician implement?

  A. CSR
  B. Key escrow
  C. OSCR
  D. CRL
  D. CRL

• Question 758:

  Which of the following should a company deploy to prevent the execution of some types of malicious code?

  A. Least privilege accounts
  B. Host-based firewalls
  C. Intrusion Detection systems
  D. Application white listing
  B. Host-based firewalls

• Question 759:

  Fuzzing is a security assessment technique that allows testers to analyze the behavior of software applications under which of the following conditions?

  A. Unexpected input
  B. Invalid output
  C. Parameterized input
  D. Valid output
  A. Unexpected input

  ---

  Fuzzing is a software testing technique that involves providing invalid, unexpected, or random data to as inputs to a computer program. The program is then monitored for exceptions such as crashes, or failed validation, or memory leaks.

• Question 760:

  Which of the following is a document that contains detailed information about actions that include how something will be done, when the actions will be performed, and penalties for failure?

  A. MOU
  B. ISA
  C. BPA
  D. SLA
  D. SLA