CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 761:

  Which of the following access control methodologies provides an individual with the most restrictive access rights to successfully perform their authorized duties?

  A. Mandatory Access Control
  B. Rule Based Access Control
  C. Least Privilege
  D. Implicit Deny
  E. Separation of Duties
  C. Least Privilege

• Question 762:

  Pete, a security administrator, has observed repeated attempts to break into the network. Which of the following is designed to stop an intrusion on the network?

  A. NIPS
  B. HIDS
  C. HIPS
  D. NIDS
  A. NIPS

  ---

  Network-based intrusion prevention system (NIPS) monitors the entire network for suspicious traffic by analyzing protocol activity. The main functions of intrusion prevention systems are to identify malicious activity, log information about this activity, attempt to block/stop it, and report it

• Question 763:

  Which of the following can hide confidential or malicious data in the whitespace of other files (e.g. JPEGs)?

  A. Hashing
  B. Transport encryption
  C. Digital signatures
  D. Steganography
  D. Steganography

  ---

  Steganography is the process of concealing a file, message, image, or video within another file, message, image, or video.

  Note: The advantage of steganography over cryptography alone is that the intended secret message does not attract attention to itself as an object of scrutiny. Plainly visible encrypted messages, no matter how unbreakable will arouse

  interest, and may in themselves be incriminating in countries where encryption is illegal. Thus, whereas cryptography is the practice of protecting the contents of a message alone, steganography is concerned with concealing the fact that a

  secret message is being sent, as well as concealing the contents of the message.

• Question 764:

  A fiber company has acquired permission to bury a fiber cable through a famer's land. Which of the following should be in the agreement with the farmer to protect the availability of the network?

  A. No farm animals will graze near the burial site of the cable
  B. No digging will occur near the burial site of the cable
  C. No buildings or structures will be placed on top of the cable
  D. No crops will be planted on top of the cable
  B. No digging will occur near the burial site of the cable

• Question 765:

  A technician is deploying virtual machines for multiple customers on a single physical host to reduce power consumption in a data center. Which of the following should be recommended to isolate the VMs from one another?

  A. Implement a virtual firewall
  B. Install HIPS on each VM
  C. Virtual switches with VLANs
  D. Develop a patch management guide
  C. Virtual switches with VLANs

  ---

  A virtual local area network (VLAN) is a hardware-imposed network segmentation created by switches. VLANs are used for traffic management. VLANs can be used to isolate traffic between network segments.

• Question 766:

  Which of the following is an authentication and accounting service that uses TCP for connecting to routers and switches?

  A. DIAMETER
  B. RADIUS
  C. TACACS+
  D. Kerberos
  C. TACACS+

  ---

  TACACS+ is an authentication, authorization, and accounting (AAA) service that makes us of TCP only.

• Question 767:

  Jane, a security administrator, has observed repeated attempts to break into a server. Which of the following is designed to stop an intrusion on a specific server?

  A. HIPS
  B. NIDS
  C. HIDS
  D. NIPS
  A. HIPS

  ---

  This question is asking which of the following is designed to stop an intrusion on a specific server. To stop an intrusion on a specific server, you would use a HIPS (Host Intrusion Prevention System). The difference between a HIPS and other intrusion prevention systems is that a HIPS is a software intrusion prevention systems that is installed on a `specific server'.

  Intrusion prevention systems (IPS), also known as intrusion detection and prevention systems (IDPS), are network security appliances that monitor network and/or system activities for malicious activity. The main functions of intrusion prevention systems are to identify malicious activity, log information about this activity, attempt to block/stop it, and report it.

  A HIPS (Host Intrusion Prevention System) is software installed on a host which monitors the host for suspicious activity by analyzing events occurring within that host with the aim of detecting and preventing intrusion.

• Question 768:

  The security manager reports that the process of revoking certificates authority is too slow and should be automated. Which of the following should be used to automate this process?

  A. CRL
  B. GPG
  C. OCSP
  D. Key escrow
  C. OCSP

• Question 769:

  Joe, the information security manager, is tasked with calculating risk and selecting controls to protect a new system. He has identified people, environmental conditions, and events that could affect the new system. Which of the following does he need to estimate NEXT in order to complete his risk calculations?

  A. Vulnerabilities
  B. Risk
  C. Likelihood
  D. Threats
  A. Vulnerabilities

  ---

  In this question, the security administrator has identified people, environmental conditions, and events that could affect the new system. The next step of the risk assessment is to determine the vulnerabilities of the system itself.

  Risk assessment deals with the threats, vulnerabilities, and impacts of a loss of information-processing capabilities or a loss of information itself. A vulnerability is a weakness that could be exploited by a threat. Each risk that can be identified

  should be outlined, described, and evaluated for the likelihood of it occurring. The key here is to think outside the box. Conventional threats and risks are often too limited when considering risk assessment.

  The key components of a risk-assessment process are outlined here:

  Risks to Which the Organization Is Exposed: This component allows you to develop scenarios that can help you evaluate how to deal with these risks if they occur. An operating system, server, or application may have known risks in certain

  environments. You should create a plan for how your organization will best deal with these risks and the best way to respond.

  Risks That Need Addressing: The risk-assessment component also allows an organization to provide a reality check on which risks are real and which are unlikely. This process helps an organization focus on its resources as well as on the

  risks that are most likely to occur. For example, industrial espionage and theft are likely, but the risk of a hurricane damaging the server room in Indiana is very low. Therefore, more resources should be allocated to prevent espionage or theft

  as opposed to the latter possibility.

• Question 770:

  Which of the following can be used to ensure that sensitive records stored on a backend server can only be accessed by a front end server with the appropriate record key?

  A. File encryption
  B. Storage encryption
  C. Database encryption
  D. Full disk encryption
  A. File encryption