CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 801:

  An administrator would like to review the effectiveness of existing security in the enterprise. Which of the following would be the BEST place to start?

  A. Review past security incidents and their resolution
  B. Rewrite the existing security policy
  C. Implement an intrusion prevention system
  D. Install honey pot systems
  C. Implement an intrusion prevention system

  ---

  The main functions of intrusion prevention systems are to identify malicious activity, log information about this activity, attempt to block/stop it, and report it

• Question 802:

  Which of the following protocols is vulnerable to man-in-the-middle attacks by NOT using end to end TLS encryption?

  A. HTTPS
  B. WEP
  C. WPA
  D. WPA 2
  B. WEP

  ---

  WEP offers no end-to-end TLS encryption.

  The WEP process consists of a series of steps as follows:

  The wireless client sends an authentication request. The Access Point (AP) sends an authentication response containing clear-text (uh-oh!) challenge text.

  The client takes the challenge text received and encrypts it using a static WEP key. The client sends the encrypted authentication packet to the AP. The AP encrypts the challenge text using its own static WEP key and compares the result to

  the authentication packet sent by the client. If the results match, the AP begins the association process for the wireless client.

  The big issue with WEP is the fact that it is very susceptible to a Man in the Middle attack. The attacker captures the clear-text challenge and then the authentication packet reply. The attacker then reverses the RC4 encryption in order to

  derive the static WEP key.

  Yikes!

  As you might guess, the designers attempted to strengthen WEP using the approach of key lengths. The native Windows client supported a 104-bit key as opposed to the initial 40-bit key. The fundamental weaknesses in the WEP process

  still remained however.

• Question 803:

  A single server hosts a sensitive SQL-based database and a web service containing static content. A few of the database fields need to encrypted due to regulatory requirements. Which of the following would provide the BEST encryption solution for this particular server?

  A. Individual file
  B. Database
  C. Full-disk
  D. Record based
  B. Database

• Question 804:

  Pete, the compliance manager, wants to meet regulations. Pete would like certain ports blocked only on all computers that do credit card transactions. Which of the following should Pete implement to BEST achieve this goal?

  A. A host-based intrusion prevention system
  B. A host-based firewall
  C. Antivirus update system
  D. A network-based intrusion detection system
  B. A host-based firewall

  ---

  A host-based firewall is installed on a client system and is used to protect the client system from the activities of the user as well as from communication from the network or Internet.

• Question 805:

  A security administrator has been assigned to review the security posture of the standard corporate system image for virtual machines. The security administrator conducts a thorough review of the system logs, installation procedures, and network configuration of the VM image. Upon reviewing the access logs and user accounts, the security administrator determines that several accounts will not be used in production. Which of the following would correct the deficiencies?

  A. Mandatory access controls
  B. Disable remote login
  C. Host hardening
  D. Disabling services
  C. Host hardening

• Question 806:

  Which of the following would be used when a higher level of security is desired for encryption key storage?

  A. TACACS+
  B. L2TP
  C. LDAP
  D. TPM
  D. TPM

  ---

  Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the system's motherboard and is enabled or disable in BIOS. It helps with hash key generation and stores cryptographic keys, passwords, or certificates.

• Question 807:

  Pete, the system administrator, is reviewing his disaster recovery plans. He wishes to limit the downtime in the event of a disaster, but does not have the budget approval to implement or maintain an offsite location that ensures 99.99% availability. Which of the following would be Pete's BEST option?

  A. Use hardware already at an offsite location and configure it to be quickly utilized.
  B. Move the servers and data to another part of the company's main campus from the server room.
  C. Retain data back-ups on the main campus and establish redundant servers in a virtual environment.
  D. Move the data back-ups to the offsite location, but retain the hardware on the main campus for redundancy.
  A. Use hardware already at an offsite location and configure it to be quickly utilized.

  ---

  A warm site provides some of the capabilities of a hot site, but it requires the customer to do more work to become operational. Warm sites provide computer systems and compatible media capabilities. If a warm site is used, administrators and other staff will need to install and configure systems to resume operations. For most organizations, a warm site could be a remote office, a leased facility, or another organization with which yours has a reciprocal agreement. Warm sites may be for your exclusive use, but they don't have to be. A warm site requires more advanced planning, testing, and access to media for system recovery. Warm sites represent a compromise between a hot site, which is very expensive, and a cold site, which isn't preconfigured.

• Question 808:

  Which of the following allows a network administrator to implement an access control policy based on individual user characteristics and NOT on job function?

  A. Attributes based
  B. Implicit deny
  C. Role based
  D. Rule based
  A. Attributes based

  ---

  Attribute-based access control allows access rights to be granted to users via policies, which combine attributes together. The policies can make use of any type of attributes, which includes user attributes, resource attributes and environment attributes.

• Question 809:

  A new security policy in an organization requires that all file transfers within the organization be completed using applications that provide secure transfer. Currently, the organization uses FTP and HTTP to transfer files. Which of the following should the organization implement in order to be compliant with the new policy?

  A. Replace FTP with SFTP and replace HTTP with TLS
  B. Replace FTP with FTPS and replaces HTTP with TFTP
  C. Replace FTP with SFTP and replace HTTP with Telnet
  D. Replace FTP with FTPS and replaces HTTP with IPSec
  B. Replace FTP with FTPS and replaces HTTP with TFTP

• Question 810:

  Which of the following BEST describes malware that tracks a user's web browsing habits and injects the attacker's advertisements into unrelated web pages? (Select TWO)

  A. Logic bomb
  B. Backdoor
  C. Ransomware
  D. Adware
  E. Botnet
  F. Spyware
  C. Ransomware
  D. Adware