CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 841:

  An administrator would like users to authenticate to the network using only UDP protocols. Which of the following would meet this goal?

  A. RADIUS
  B. TACACS+
  C. Kerberos
  D. 802.1x
  A. RADIUS

• Question 842:

  Which of the following assessments would Pete, the security administrator, use to actively test that an application's security controls are in place?

  A. Code review
  B. Penetration test
  C. Protocol analyzer
  D. Vulnerability scan
  B. Penetration test

  ---

  Penetration testing (also called pen testing) is the practice of testing a computer system, network or Web application to find vulnerabilities that an attacker could exploit. Pen tests can be automated with software applications or they can be

  performed manually. Either way, the process includes gathering information about the target before the test (reconnaissance), identifying possible entry points, attempting to break in (either virtually or for real) and reporting back the findings.

  The main objective of penetration testing is to determine security weaknesses. A pen test can also be used to test an organization's security policy compliance, its employees' security awareness and the organization's ability to identify and

  respond to security incidents.

  Penetration tests are sometimes called white hat attacks because in a pen test, the good guys are attempting to break in.

  Pen test strategies include:

  Targeted testing

  Targeted testing is performed by the organization's IT team and the penetration testing team working together. It's sometimes referred to as a "lights-turned-on" approach because everyone can see the test being carried out.

  External testing

  This type of pen test targets a company's externally visible servers or devices including domain name servers (DNS), e-mail servers, Web servers or firewalls. The objective is to find out if an outside attacker can get in and how far they can

  get in once they've gained access.

  Internal testing

  This test mimics an inside attack behind the firewall by an authorized user with standard access privileges. This kind of test is useful for estimating how much damage a disgruntled employee could cause.

  Blind testing

  A blind test strategy simulates the actions and procedures of a real attacker by severely limiting the information given to the person or team that's performing the test beforehand. Typically, they may only be given the name of the company.

  Because this type of test can require a considerable amount of time for reconnaissance, it can be expensive.

  Double blind testing

  Double blind testing takes the blind test and carries it a step further. In this type of pen test, only one or two people within the organization might be aware a test is being conducted. Double-blind tests can be useful for testing an organization's

  security monitoring and incident identification as well as its response procedures.

• Question 843:

  An audit has revealed that database administrators are also responsible for auditing database changes and backup logs. Which of the following access control methodologies would BEST mitigate this concern?

  A. Time of day restrictions
  B. Principle of least privilege
  C. Role-based access control
  D. Separation of duties
  D. Separation of duties

• Question 844:

  A company is planning to encrypt the files in several sensitive directories of a file server with a symmetric key. Which of the following could be used?

  A. RSA
  B. TwoFish
  C. Diffie-Helman
  D. NTLMv2
  E. RIPEMD
  B. TwoFish

• Question 845:

  A company needs to provide web-based access to shared data sets to mobile users, while maintaining a standardized set of security controls. Which of the following technologies is the MOST appropriate storage?

  A. Encrypted external hard drives
  B. Cloud storage
  C. Encrypted mobile devices
  D. Storage Area Network
  B. Cloud storage

• Question 846:

  If an organization wants to implement a BYOD policy, which of the following administrative control policy considerations MUST be addressed? (Select two)

  A. Data archiving
  B. Data ownership
  C. Geo-tagging
  D. Acceptable use
  E. Remote wipe
  B. Data ownership
  C. Geo-tagging

• Question 847:

  A new security analyst is given the task of determining whether any of the company's servers are vulnerable to a recently discovered attack on an old version of SSH. Which of the following is the quickest FIRST step toward determining the version of SSH running on these servers?

  A. Passive scanning
  B. Banner grabbing
  C. Protocol analysis
  D. Penetration testing
  B. Banner grabbing

  ---

  B: Banner grabbing looks at the banner, or header information messages sent with data to find out about the system(s). Banners often identify the host, the operating system running on it, and other information that can be useful if you are going to attempt to later breach the security of it. Banners can be snagged with Telnet as well as tools like netcat or Nmap. In other words Banner grabbing looks at the banner, or header, information messages sent with data to find out about the system(s). Thus a quick way to check which version of SSH is running on your server.

• Question 848:

  Which of the following types of malware is designed to provide access to a system when normal authentication fails?

  A. Rootkit
  B. Botnet
  C. Backdoor
  D. Adware
  C. Backdoor

• Question 849:

  The information security team does a presentation on social media and advises the participants not to provide too much personal information on social media web sites. This advice would BEST protect people from which of the following?

  A. Rainbow tables attacks
  B. Brute force attacks
  C. Birthday attacks
  D. Cognitive passwords attacks
  D. Cognitive passwords attacks

  ---

  Social Networking Dangers are `amplified' in that social media networks are designed to mass distribute personal messages. If an employee reveals too much personal information it would be easy for miscreants to use the messages containing the personal information to work out possible passwords.

• Question 850:

  A small company wants to employ PKI. The company wants a cost effective solution that must be simple and trusted. They are considering two options: X.509 and PGP. Which of the following would be the BEST option?

  A. PGP, because it employs a web-of-trust that is the most trusted form of PKI.
  B. PGP, because it is simple to incorporate into a small environment.
  C. X.509, because it uses a hierarchical design that is the most trusted form of PKI.
  D. X.509, because it is simple to incorporate into a small environment.
  B. PGP, because it is simple to incorporate into a small environment.

  ---

  PGP easier to use and setup than the corporate PKI model, but it is also less robust when it comes to issues like authentication and trust. However, the full benefits of public key cryptography are used.