CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 811:

  A user ID and password together provide which of the following?

  A. Authorization
  B. Auditing
  C. Authentication
  D. Identification
  C. Authentication

  ---

  Authentication generally requires one or more of the following:

  Something you know: a password, code, PIN, combination, or secret phrase. Something you have: a smart card, token device, or key. Something you are: a fingerprint, a retina scan, or voice recognition; often referred to as biometrics,

  discussed later in this chapter.

  Somewhere you are: a physical or logical location. Something you do: typing rhythm, a secret handshake, or a private knock.

• Question 812:

  Which of the following protocols uses an asymmetric key to open a session and then establishes a symmetric key for the remainder of the session?

  A. SFTP
  B. HTTPS
  C. TFTP
  D. TLS
  D. TLS

  ---

  SSL establishes a session using asymmetric encryption and maintains the session using symmetric encryption.

• Question 813:

  Concurrent use of a firewall, content filtering, antivirus software and an IDS system would be considered components of:

  A. Redundant systems.
  B. Separation of duties.
  C. Layered security.
  D. Application control.
  C. Layered security.

  ---

  Layered security is the practice of combining multiple mitigating security controls to protect resources and data.

• Question 814:

  Which of the following ciphers would be BEST used to encrypt streaming video?

  A. RSA
  B. RC4
  C. SHA1
  D. 3DES
  B. RC4

  ---

  In cryptography, RC4 is the most widely used software stream cipher and is used in popular Internet protocols such as Transport Layer Security (TLS). While remarkable for its simplicity and speed in software, RC4 has weaknesses that argue against its use in new systems. It is especially vulnerable when the beginning of the output keystream is not discarded, or when nonrandom or related keys are used; some ways of using RC4 can lead to very insecure protocols such as WEP.

  Because RC4 is a stream cipher, it is more malleable than common block ciphers. If not used together with a strong message authentication code (MAC), then encryption is vulnerable to a bit-flipping attack. The cipher is also vulnerable to a stream cipher attack if not implemented correctly. Furthermore, inadvertent double encryption of a message with the same key may accidentally output plaintext rather than ciphertext because the involutory nature of the XOR function would result in the second operation reversing the first. It is noteworthy, however, that RC4, being a stream cipher, was for a period of time the only common cipher that was immune to the 2011 BEAST attack on TLS 1.0. The attack exploits a known weakness in the way cipher block chaining mode is used with all of the other ciphers supported by TLS 1.0, which are all block ciphers.

• Question 815:

  A penetration testing is preparing for a client engagement in which the tester must provide data that proves and validates the scanning tools' results. Which of the following is the best method for collecting this information?

  A. Set up the scanning system's firewall to permit and log all outbound connections
  B. Use a protocol analyzer to log all pertinent network traffic
  C. Configure network flow data logging on all scanning system
  D. Enable debug level logging on the scanning system and all scanning tools used.
  A. Set up the scanning system's firewall to permit and log all outbound connections

• Question 816:

  Ann is traveling for business and is attempting to use the hotel's wireless network to check for new messages. She selects the hotel's wireless SSID from a list of networks and successfully connects. After opening her email client and waiting a few minutes, the connection times out. Which of the following should Ann do to retrieve her email messages?

  A. Change the authentication method for her laptop's wireless card from WEP to WPA2
  B. Open a web browser and authenticate using the captive portal for the hotel's wireless network
  C. Contact the front desk and have the MAC address of her laptop added to the MAC filter on the hotel's wireless network
  D. Change the incoming email protocol from IMAP to POP3
  B. Open a web browser and authenticate using the captive portal for the hotel's wireless network

• Question 817:

  Log file analysis on a router reveals several unsuccessful telnet attempts to the virtual terminal (VTY) lines. Which of the following represents the BEST configuration used in order to prevent unauthorized remote access while maintaining secure availability for legitimate users?

  A. Disable telnet access to the VTY lines, enable SHH access to the VTY lines with RSA encryption
  B. Disable both telnet and SSH access to the VTY lines, requiring users to log in using HTTP
  C. Disable telnet access to the VTY lines, enable SHH access to the VTY lines with PSK encryption
  D. Disable telnet access to the VTY lines, enable SSL access to the VTY lines with RSA encryption
  C. Disable telnet access to the VTY lines, enable SHH access to the VTY lines with PSK encryption

• Question 818:

  A website administrator has received an alert from an application designed to check the integrity of the company's website. The alert indicated that the hash value for a particular MPEG file has changed. Upon further investigation, the media appears to be the same as it was before the alert. Which of the following methods has MOST likely been used?

  A. Cryptography
  B. Time of check/time of use
  C. Man in the middle
  D. Covert timing
  E. Steganography
  E. Steganography

• Question 819:

  Which of the following is where an unauthorized device is found allowing access to a network?

  A. Bluesnarfing
  B. Rogue access point
  C. Honeypot
  D. IV attack
  B. Rogue access point

  ---

  A rogue access point is a wireless access point that has either been installed on a secure company network without explicit authorization from a local network administrator, or has been created to allow a hacker to conduct a man-in-themiddle attack. Rogue access points of the first kind can pose a security threat to large organizations with many employees, because anyone with access to the premises can install (maliciously or non- maliciously) an inexpensive wireless router that can potentially allow access to a secure network to unauthorized parties. Rogue access points of the second kind target networks that do not employ mutual authentication (client-server server-client) and may be used in conjunction with a rogue RADIUS server, depending on security configuration of the target network. To prevent the installation of rogue access points, organizations can install wireless intrusion prevention systems to monitor the radio spectrum for unauthorized access points.

• Question 820:

  Which of the following encrypts data a single bit at a time?

  A. Stream cipher
  B. Steganography
  C. 3DES
  D. Hashing
  A. Stream cipher