CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 71:

  A systems engineer has been presented with storage performance and redundancy requirements for a new system to be built for the company. The storage solution must be designed to support the highest performance and must also be able to support more than one drive failure. Which of the following should the engineer choose to meet these requirements?

  A. A mirrored striped array with parity
  B. A mirrored mirror array
  C. A striped array
  D. A striped array with parity
  B. A mirrored mirror array

  ---

  Mirroring means the data written to one drive is exactly duplicated to a second drive in real time. Disk mirroring is also known as RAID 1 and the data is intact in a RAID 1 array if either one of the two drives fails. After the failed drive is replaced with a new drive, you remirror the data from the good drive to the new drive to re-create the array.

• Question 72:

  Which of the following BEST describes part of the PKI process?

  A. User1 decrypts data with User2's private key
  B. User1 hashes data with User2's public key
  C. User1 hashes data with User2's private key
  D. User1 encrypts data with User2's public key
  D. User1 encrypts data with User2's public key

  ---

  In a PKI the sender encrypts the data using the receiver's public key. The receiver decrypts the data using his own private key.

  PKI is a two-key, asymmetric system with four main components: certificate authority (CA), registration authority (RA), RSA (the encryption algorithm), and digital certificates. Messages are encrypted with a public key and decrypted with a

  private key.

  A PKI example:

  You want to send an encrypted message to Jordan, so you request his public key.

  Jordan responds by sending you that key.

  You use the public key he sends you to encrypt the message.

  You send the message to him.

  Jordan uses his private key to decrypt the message.

• Question 73:

  Which of the following application security principles involves inputting random data into a program?

  A. Brute force attack
  B. Sniffing
  C. Fuzzing
  D. Buffer overflow
  C. Fuzzing

  ---

  Fuzzing is a software testing technique that involves providing invalid, unexpected, or random data to as inputs to a computer program. The program is then monitored for exceptions such as crashes, or failed validation, or memory leaks.

• Question 74:

  A security administrator has been asked to implement a VPN that will support remote access over IPSEC. Which of the following is an encryption algorithm that would meet this requirement?

  A. MD5
  B. AES
  C. UDP
  D. PKI
  B. AES

• Question 75:

  The security administrator is implementing a malware storage system to archive all malware seen by the company into a central database. The malware must be categorized and stored based on similarities in the code. Which of the following should the security administrator use to identify similar malware?

  A. TwoFish
  B. SHA-512
  C. Fuzzy hashes
  D. HMAC
  C. Fuzzy hashes

  ---

  Hashing is used to ensure that a message has not been altered. It can be useful for positively identifying malware when a suspected file has the same hash value as a known piece of malware. However, modifying a single bit of a malicious file will alter its hash value. To counter this, a continuous stream of hash values is generated for rolling block of code. This can be used to determine the similarity between a suspected file and known pieces of malware.

• Question 76:

  A penetration tester was able to obtain elevated privileges on a client workstation and multiple servers using the credentials of an employee. Which of the following controls would mitigate these issues? (Select TWO)

  A. Separation of duties
  B. Least privilege
  C. Time of day restrictions
  D. Account expiration
  E. Discretionary access control
  F. Password history
  B. Least privilege
  D. Account expiration

• Question 77:

  Which of the following common access control models is commonly used on systems to ensure a "need to know" based on classification levels?

  A. Role Based Access Controls
  B. Mandatory Access Controls
  C. Discretionary Access Controls
  D. Access Control List
  B. Mandatory Access Controls

  ---

  Mandatory Access Control allows access to be granted or restricted based on the rules of classification. MAC also includes the use of need to know. Need to know is a security restriction where some objects are restricted unless the subject has a need to know them.

• Question 78:

  A security administrator would like to ensure that some members of the building's maintenance staff are only allowed access to the facility during weekend hours. Access to the facility is controlled by badge swipe and a man trap. Which of the following options will BEST accomplish this goal?

  A. CCTV
  B. Security Guard
  C. Time of day restrictions
  D. Job rotation
  C. Time of day restrictions

• Question 79:

  Joe, a user, wants to send an encrypted email to Ann. Which of the following will Ann need to use to verify that the email came from Joe and decrypt it? (Select TWO).

  A. The CA's public key
  B. Ann's public key
  C. Joe's private key
  D. Ann's private key
  E. The CA's private key
  F. Joe's public key
  D. Ann's private key
  F. Joe's public key

  ---

  Joe wants to send a message to Ann. It's important that this message not be altered. Joe will use the private key to create a digital signature. The message is, in effect, signed with the private key. Joe then sends the message to Ann. Ann will use the public key attached to the message to validate the digital signature. If the values match, Ann knows the message is authentic and came from Joe. Ann will use a key provided by Joe--the public key--to decrypt the message. Most digital signature implementations also use a hash to verify that the message has not been altered, intentionally or accidently, in transit. Thus Ann would compare the signature area referred to as a message in the message with the calculated value digest (her private key in this case). If the values match, the message hasn't been tampered with and the originator is verified as the person they claim to be.

• Question 80:

  The security administrator runs an rpm verify command which records the MD5 sum, permissions, and timestamp of each file on the system. The administrator saves this information to a separate server. Which of the following describes the procedure the administrator has performed?

  A. Host software base-lining
  B. File snapshot collection
  C. TPM D. ROMDB verification
  D