CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 851:

  A security administrator has just finished creating a hot site for the company. This implementation relates to which of the following concepts?

  A. Confidentiality
  B. Availability
  C. Succession planning
  D. Integrity
  B. Availability

  ---

  Simply making sure that the data and systems are available for authorized users is what availability is all about. Data backups, redundant systems, and disaster recovery plans all support availability. And creating a hot site is about providing availability.

• Question 852:

  Which of the following is the primary security concern when deploying a mobile device on a network?

  A. Strong authentication
  B. Interoperability
  C. Data security
  D. Cloud storage technique
  C. Data security

  ---

  Mobile devices, such as laptops, tablet computers, and smartphones, provide security challenges above those of desktop workstations, servers, and such in that they leave the office and this increases the odds of their theft which makes data

  security a real concern. At a bare minimum, the following security measures should be in place on mobile devices:

  Screen lock, Strong password, Device encryption, Remote Wipe or Sanitation, voice encryption, GPS tracking, Application control, storage segmentation, asses tracking and device access control.

• Question 853:

  A company has identified a watering hole attack. Which of the following Best describes this type of attack?

  A. Emails are being spoofed to look like they are internal emails
  B. A cloud storage site is attempting to harvest user IDS and passwords
  C. An online news site is hosting ads in iframes from another site
  D. A local restaurant chains online menu is hosting malicious code
  C. An online news site is hosting ads in iframes from another site

• Question 854:

  Which of the following protocols is used to authenticate the client and server's digital certificate?

  A. PEAP
  B. DNS
  C. TLS
  D. ICMP
  C. TLS

  ---

  Transport Layer Security (TLS) is a cryptographic protocol designed to provide communications security over a computer network. It uses X.509 certificates and hence asymmetric cryptography to authenticate the counterparty with whom it is communicating, and to exchange a symmetric key.

• Question 855:

  A user was reissued a smart card after the previous smart card had expired. The user is able to log into the domain but is now unable to send digitally signed or encrypted email. Which of the following would the user need to perform?

  A. Remove all previous smart card certificates from the local certificate store.
  B. Publish the new certificates to the global address list.
  C. Make the certificates available to the operating system.
  D. Recover the previous smart card certificates.
  B. Publish the new certificates to the global address list.

  ---

  CAs can be either private or public, with VeriSign being one of the best known of the public variety. Many operating system providers allow their systems to be configured as CA systems. These CA systems can be used to generate internal certificates that are used within a business or in large external settings. The process provides certificates to the users. Since the user in question has been re-issued a smart card, the user must receive a new certificate by the CA to allow the user to send digitally signed email. This is achieved by publishing the new certificates to the global address list.

• Question 856:

  Which of the following techniques can be bypass a user or computer's web browser privacy settings? (Select Two)

  A. SQL injection
  B. Session hijacking
  C. Cross-site scripting
  D. Locally shared objects
  E. LDAP injection
  B. Session hijacking
  C. Cross-site scripting

• Question 857:

  A company has recently implemented a high density wireless system by having a junior technician install two new access points for every access point already deployed. Users are now reporting random wireless disconnections and slow network connectivity. Which of the following is the MOST likely cause?

  A. The old APs use 802.11a
  B. Users did not enter the MAC of the new APs
  C. The new APs use MIMO
  D. A site survey was not conducted
  D. A site survey was not conducted

  ---

  To test the wireless AP placement, a site survey should be performed.

• Question 858:

  While an Internet caf?a malicious user is causing all surrounding wireless connected devices to have intermittent and unstable connections to the access point. Which of the following is MOST likely being used?

  A. Evil Twin
  B. Interference
  C. Packet sniffer
  D. Rogue AP
  D. Rogue AP

• Question 859:

  The security administrator notices a user logging into a corporate Unix server remotely as root. Which of the following actions should the administrator take?

  A. Create a firewall rule to block SSH
  B. Delete the root account
  C. Disable remote root logins
  D. Ensure the root account has a strong password
  C. Disable remote root logins

  ---

  Remote users log in to Unix or Linux servers by using SSH. Although SSH is secure, allowing remote access as root is a security risk. One of the biggest security holes you could open on a Unix or Linux server is to allow directly logging in as

  root through SSH, because any cracker can attempt to brute force your root password and potentially get access to your system if they can figure out your password.

  It's much better to have a separate account that you regularly use and simply sudo to root when necessary.

  You should disable root ssh access by editing /etc/ssh/sshd_config to contain:

  PermitRootLogin no

• Question 860:

  A company's security administrator wants to manage PKI for internal systems to help reduce costs. Which of the following is the FIRST step the security administrator should take?

  A. Install a registration server.
  B. Generate shared public and private keys.
  C. Install a CA
  D. Establish a key escrow policy.
  C. Install a CA

  ---

  PKI is a two-key, asymmetric system with four main components: certificate authority (CA), registration authority (RA), RSA (the encryption algorithm), and digital certificates. When you implement a PKI you should start by installing a CA.