CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 861:

  A user attempts to install a new and relatively unknown software program recommended by a colleague. The user is unable to install the program, dispute having successfully installed other programs previously. Which of the following is MOST likely the cause for the user's inability to complete the installation?

  A. Application black listing
  B. Network Intrusion Prevention System
  C. Group Policy
  D. Application White Listing
  A. Application black listing

• Question 862:

  Joe must send Ann a message and provide Ann with assurance that he was the actual sender. Which of the following will Joe need to use to BEST accomplish the objective?

  A. A pre-shared private key
  B. His private key
  C. Ann's public key
  D. His public key
  B. His private key

  ---

  To achieve both authentication and confidentiality, Joe should include Ann's name in the message, sign it using his private key, and then encrypt both the message and the signature using Ann's public key.

• Question 863:

  Which device monitors network traffic in a passive manner?

  A. Sniffer
  B. IDS
  C. Firewall
  D. Web browser
  A. Sniffer

  ---

  A sniffer is another name for a protocol analyzer. A protocol analyzer performs its function in a passive manner. In other words, computers on the network do not know that their data packets have been captured.

  A Protocol Analyzer is a hardware device or more commonly a software program used to capture network data communications sent between devices on a network. Capturing packets sent from a computer system is known as packet sniffing.

  Well known software protocol analyzers include Message Analyzer (formerly Network Monitor) from Microsoft and Wireshark (formerly Ethereal).

  A sniffer (packet sniffer) is a tool that intercepts data flowing in a network. If computers are connected to a local area network that is not filtered or switched, the traffic can be broadcast to all computers contained in the same segment. This

  doesn't generally occur, since computers are generally told to ignore all the comings and goings of traffic from other computers. However, in the case of a sniffer, all traffic is shared when the sniffer software commands the Network Interface

  Card (NIC) to stop ignoring the traffic. The NIC is put into promiscuous mode, and it reads communications between computers within a particular segment. This allows the sniffer to seize everything that is flowing in the network, which can

  lead to the unauthorized access of sensitive data. A packet sniffer can take the form of either a hardware or software solution. A sniffer is also known as a packet analyzer.

• Question 864:

  An Information Systems Security Officer (ISSO) has been placed in charge of a classified peer-to-peer network that cannot connect to the Internet. The ISSO can update the antivirus definitions manually, but which of the following steps is MOST important?

  A. A full scan must be run on the network after the DAT file is installed.
  B. The signatures must have a hash value equal to what is displayed on the vendor site.
  C. The definition file must be updated within seven days.
  D. All users must be logged off of the network prior to the installation of the definition file.
  B. The signatures must have a hash value equal to what is displayed on the vendor site.

  ---

  A hash value can be used to uniquely identify secret information. This requires that the hash function is collision resistant, which means that it is very hard to find data that generate the same hash value and thus it means that in hashing two different inputs will not yield the same output. Thus the hash value must be equal to that displayed on the vendor site.

• Question 865:

  A security administrator implements a web server that utilizes an algorithm that requires other hashing standards to provide data integrity. Which of the following algorithms would meet the requirement?

  A. SHA
  B. MD5
  C. RIPEMD
  D. HMAC
  A. SHA

• Question 866:

  Three of the primary security control types that can be implemented are.

  A. Supervisory, subordinate, and peer.
  B. Personal, procedural, and legal.
  C. Operational, technical, and management.
  D. Mandatory, discretionary, and permanent.
  C. Operational, technical, and management.

  ---

  The National Institute of Standards and Technology (NIST) places controls into various types. The control types fall into three categories: Management, Operational, and Technical.

• Question 867:

  Ann wants to send a file to Joe using PKI. Which of the following should Ann use in order to sign the file?

  A. Joe's public key
  B. Joe's private key
  C. Ann's public key
  D. Ann's private key
  D. Ann's private key

  ---

  The sender uses his private key, in this case Ann's private key, to create a digital signature. The message is, in effect, signed with the private key. The sender then sends the message to the receiver. The receiver uses the public key attached to the message to validate the digital signature. If the values match, the receiver knows the message is authentic. The receiver uses a key provided by the sender--the public key--to decrypt the message. Most digital signature implementations also use a hash to verify that the message has not been altered, intentionally or accidently, in transit.

• Question 868:

  A Security Officer on a military base needs to encrypt several smart phones that will be going into

  the field. Which of the following encryption solutions should be deployed in this situation?

  A. Elliptic curve
  B. One-time pad
  C. 3DES
  D. AES-256
  D. AES-256

• Question 869:

  Which of the following may be used with a BNC connector?

  A. 10GBaseT
  B. 1000BaseSX
  C. 100BaseFX
  D. 10Base2
  D. 10Base2

• Question 870:

  Vendors typically ship software applications with security settings disabled by default to ensure a wide range of interoperability with other applications and devices. A security administrator should perform which of the following before deploying new software?

  A. Application white listing
  B. Network penetration testing
  C. Application hardening
  D. Input fuzzing testing
  C. Application hardening

  ---

  Hardening is the process of securing a system by reducing its surface of vulnerability. Reducing the surface of vulnerability typically includes removing unnecessary functions and features, removing unnecessary usernames or logins and disabling unnecessary services.