CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 831:

  A company is trying to limit the risk associated with the use of unapproved USB devices to copy documents. Which of the following would be the BEST technology control to use in this scenario?

  A. Content filtering
  B. IDS
  C. Audit logs
  D. DLP
  D. DLP

  ---

  Data loss prevention (DLP) is a strategy for making sure that end users do not send sensitive or critical information outside the corporate network. The term is also used to describe software products that help a network administrator control what data end users can transfer.

• Question 832:

  Joe noticed that there is a larger than normal account of network on the printer VLAN of his organization, causing users to have to wait a long time for a print job. Upon investigation Joe discovers that printers were ordered and added to the network without his knowledge. Which of the following will reduce the risk of this occurring again in the future?

  A. Log analysis
  B. Loop protection
  C. Access control list
  D. Rule-based management
  D. Rule-based management

• Question 833:

  Several employees have been printing files that include personally identifiable information of customers. Auditors have raised concerns about the destruction of these hard copies after they are created, and management has decided the best way to address this concern is by preventing these files from being printed.

  Which of the following would be the BEST control to implement?

  A. File encryption
  B. Printer hardening
  C. Clean desk policies
  D. Data loss prevention
  D. Data loss prevention

  ---

  Data loss prevention (DLP) systems monitor the contents of systems (workstations, servers, and networks) to make sure that key content is not deleted or removed. They also monitor who is using the data (looking for unauthorized access)

  and transmitting the data.

  This would address the concerns of the auditors.

• Question 834:

  Which of the following types of attacks is based on coordinating small slices of a task across multiple systems?

  A. DDos
  B. Spam
  C. Spoofing
  D. Dos
  B. Spam

• Question 835:

  Which of the following can be used to mitigate risk if a mobile device is lost?

  A. Cable lock
  B. Transport encryption
  C. Voice encryption
  D. Strong passwords
  D. Strong passwords

  ---

  Passwords are the most likely mechanism that can be used to mitigate risk when a mobile device is lost. A strong password would be more difficult to crack.

• Question 836:

  Which of the following is true about the recovery agent?

  A. It can decrypt messages of users who lost their private key.
  B. It can recover both the private and public key of federated users.
  C. It can recover and provide users with their lost or private key.
  D. It can recover and provide users with their lost public key.
  A. It can decrypt messages of users who lost their private key.

  ---

  A key recovery agent is an entity that has the ability to recover a private key, key components, or plaintext messages as needed. Using the recovered key the recovery agent can decrypt encrypted data.

• Question 837:

  Use of group accounts should be minimized to ensure which of the following?

  A. Password security
  B. Regular auditing
  C. Baseline management
  D. Individual accountability
  D. Individual accountability

  ---

  Holding users accountable for their actions is part of security, and can only be achieved by users having their own user accounts. To adequately provide accountability, the use of shared or group accounts should be discouraged.

• Question 838:

  Which of the following identifies certificates that have been compromised or suspected of being compromised?

  A. Certificate revocation list
  B. Access control list
  C. Key escrow registry
  D. Certificate authority
  A. Certificate revocation list

  ---

  Certificates that have been compromised or are suspected of being compromised are revoked. A CRL is a locally stored record containing revoked certificates and revoked keys.

• Question 839:

  Which of the following is a security risk regarding the use of public P2P as a method of collaboration?

  A. Data integrity is susceptible to being compromised.
  B. Monitoring data changes induces a higher cost.
  C. Users are not responsible for data usage tracking.
  D. Limiting the amount of necessary space for data storage.
  A. Data integrity is susceptible to being compromised.

  ---

  Peer-to-peer (P2P) networking is commonly used to share files such as movies and music, but you must not allow users to bring in devices and create their own little networks. All networking must be done through administrators and not on a P2P basis. Data integrity can easily be compromised when using public P2P networking.

• Question 840:

  A systems administrator has implemented PKI on a classified government network. In the event that a disconnect occurs from the primary CA, which of the following should be accessible locally from every site to ensure users with bad certificates cannot gain access to the network?

  A. A CRL
  B. Make the RA available
  C. A verification authority
  D. A redundant CA
  A. A CRL

  ---

  A certificate revocation list (CRL) is created and distributed to all CAs to revoke a certificate or key. By checking the CRL you can check if a particular certificate has been revoked.