CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 791:

  Which of the following types of cryptography should be used when minimal overhead is necessary for a mobile device?

  A. Block cipher
  B. Elliptical curve cryptography
  C. Diffie-Hellman algorithm
  D. Stream cipher
  B. Elliptical curve cryptography

  ---

  Regarding the performance of ECC applications on various mobile devices, ECC is the most suitable PKC (Public-key cryptography) scheme for use in a constrained environment. Note: Elliptic curve cryptography (ECC) is an approach to public-key cryptography based on the algebraic structure of elliptic curves over finite fields. One of the main benefits in comparison with non-ECC cryptography (with plain Galois fields as a basis) is the same level of security provided by keys of smaller size. Using smaller key size would be faster.

• Question 792:

  A security administrator suspects that data on a server has been exhilarated as a result of un-authorized remote access. Which of the following would assist the administrator in con- firming the suspicions? (Select TWO)

  A. Networking access control
  B. DLP alerts
  C. Log analysis
  D. File integrity monitoring
  E. Host firewall rules
  B. DLP alerts
  C. Log analysis

• Question 793:

  Which of the following password attacks involves attempting all kinds of keystroke combinations on the keyboard with the intention to gain administrative access?

  A. Dictionary
  B. Hybrid
  C. Watering hole
  D. Brute Force
  A. Dictionary

• Question 794:

  For each of the given items, select the appropriate authentication category from the drop down choices. Select the appropriate authentication type for the following items:

  Hot Area:

  

  

  ---

  Biometrics refers to a collection of physical attributes of the human body that can be used as identification or an authentication factor. Fingerprints and retinas are physical attributes of the human body.

  Two types of tokens exist, Time-based one-time password (TOTP) tokens and HMACbased one-time password (HOTP). TOTP tokens generate passwords at fixed time intervals, whereas HOTP tokens generate passwords not based on fixed

  time intervals but instead based on a non-repeating one-way function, such as a hash or HMAC operation.

  Smart cards can have Multi-factor and proximity authentication embedded into it.

  PAP allows for two entities to share a password in advance and use the password as the basis of authentication. The same goes for PIN numbers.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp. 282, 285

  http://en.wikipedia.org/wiki/Password_authentication_protocol#Working_cycle

  http://en.wikipedia.org/wiki/Smart_card#Security

• Question 795:

  Company policy requires employees to change their passwords every 60 days. The security manager has verified all systems are configured to expire passwords after 60 days. Despite the policy and technical configuration, weekly password audits suggest that some employees have had the same weak passwords in place longer than 60 days. Which of the following password parameters is MOST likely misconfigured?

  A. Minimum lifetime
  B. Complexity
  C. Length
  D. Maximum lifetime
  B. Complexity

• Question 796:

  Why would a technician use a password cracker?

  A. To look for weak passwords on the network
  B. To change a user's passwords when they leave the company
  C. To enforce password complexity requirements
  D. To change users passwords if they have forgotten them
  A. To look for weak passwords on the network

  ---

  A password cracker will be able to expose weak passwords on a network.

• Question 797:

  An administrator intends to configure an IPSec solution that provides ESP with integrity protection, but not confidentiality protection. Which of the following AES modes of operation would meet this integrity-only requirement?

  A. GMAC
  B. PCBC
  C. CBC
  D. GCM
  E. CFB
  A. GMAC

• Question 798:

  Visitors entering a building are required to close the back door before the front door of the same entry room is open. Which of the following is being described?

  A. Tailgating
  B. Fencing
  C. Screening
  D. Mantrap
  D. Mantrap

  ---

  Mantraps are designed to contain an unauthorized, potentially hostile person/individual physically until authorities arrive. Mantraps are typically manufactured with bulletproof glass, high-strength doors, and locks and to allow the minimal amount of individuals depending on its size. Some mantraps even include scales that will weigh the person. The doors are designed in such a way as to open only when the mantrap is occupied or empty and not in-between. This means that the backdoor must first close before the front door will open; exactly what is required in this scenario.

• Question 799:

  A company has experienced problems with their ISP, which has failed to meet their informally agreed upon level of service. However the business has not negotiated any additional formal agreements beyond the standard customer terms. Which of the following is the BEST document that the company should prepare to negotiate with the ISP?

  A. ISA
  B. SLA
  C. MOU
  D. PBA
  B. SLA

• Question 800:

  Access mechanisms to data on encrypted USB hard drives must be implemented correctly otherwise:

  A. user accounts may be inadvertently locked out.
  B. data on the USB drive could be corrupted.
  C. data on the hard drive will be vulnerable to log analysis.
  D. the security controls on the USB drive can be bypassed.
  D. the security controls on the USB drive can be bypassed.

  ---

  A common access mechanism to data on encrypted USB hard drives is a password. If a weak password is used, someone could guess the password and bypass the security controls on the USB drive to access the data.