CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 881:

  Which of the following can a security administrator implement on mobile devices that will help prevent unwanted people from viewing the data if the device is left unattended?

  A. Screen lock
  B. Voice encryption
  C. GPS tracking
  D. Device encryption
  A. Screen lock

  ---

  Screen-lock is a security feature that requires the user to enter a PIN or a password after a short period of inactivity before they can access the system again. This feature ensures that if your device is left unattended or is lost or stolen, it will be difficult for anyone else to access your data or applications.

• Question 882:

  Joe a system architect wants to implement appropriate solutions to secure the company's distributed database. Which of the following concepts should be considered to help ensure data security? (Select TWO)

  A. Data at rest
  B. Data in use
  C. Replication
  D. Wiping
  E. Retention
  F. Cloud Storage
  A. Data at rest
  E. Retention

• Question 883:

  A security director has contracted an outside testing company to evaluate the security of a newly developed application. None of the parameters or internal workings of the application have been provided to the testing company prior to the start of testing. The testing company will be using:

  A. Gray box testing
  B. Active control testing
  C. White box testing
  D. Black box testing
  D. Black box testing

• Question 884:

  If you don't know the MAC address of a Linux-based machine, what command-line utility can you use to ascertain it?

  A. macconfig
  B. ifconfig
  C. ipconfig
  D. config
  B. ifconfig

  ---

  To find MAC address of a Unix/Linux workstation, use ifconfig or ip a.

• Question 885:

  A recent vulnerability scan found that Telnet is enabled on all network devices. Which of the following protocols should be used instead of Telnet?

  A. SCP
  B. SSH
  C. SFTP
  D. SSL
  B. SSH

  ---

  SSH transmits both authentication traffic and data in a secured encrypted form, whereas Telnet transmits both authentication credentials and data in clear text.

• Question 886:

  Which of the following is an authentication method that can be secured by using SSL?

  A. RADIUS
  B. LDAP
  C. TACACS+
  D. Kerberos
  B. LDAP

  ---

  With secure LDAP (LDAPS), all LDAP communications are encrypted with SSL/TLS

• Question 887:

  A server is configured to communicate on both VLAN 1 and VLAN 12. VLAN 1 communication works fine, but VLAN 12 does not. Which of the following MUST happen before the server can communicate on VLAN 12?

  A. The server's network switch port must be enabled for 802.11x on VLAN 12.
  B. The server's network switch port must use VLAN Q-in-Q for VLAN 12.
  C. The server's network switch port must be 802.1q untagged for VLAN 12.
  D. The server's network switch port must be 802.1q tagged for VLAN 12.
  D. The server's network switch port must be 802.1q tagged for VLAN 12.

  ---

  802.1q is a standard that defines a system of VLAN tagging for Ethernet frames. The purpose of a tagged port is to pass traffic for multiple VLAN's. Incorrect Options:

  A: 802.11x provides an authentication mechanism to devices wishing to attach to a LAN or WLAN.

  B: VLAN Q-in-Q allows multiple VLAN tags to be inserted into a single frame.

  C: The purpose an untagged port is to accept traffic for a single VLAN only. Reference: https://en.wikipedia.org/wiki/IEEE_802.1Q https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Fu ndamentals_of_802.1Q_VLAN_Tagging https://en.wikipedia.org/wiki/IEEE_802.1X

  https://en.wikipedia.org/wiki/IEEE_802.1ad

• Question 888:

  During a disaster recovery planning session, a security administrator has been tasked with determining which threats and vulnerabilities pose a risk to the organization. Which of the following should the administrator rate as having the HIGHEST frequency of risk to the organization?

  A. Hostile takeovers
  B. Large scale natural disasters
  C. Malware and viruses
  D. Corporate espionage
  C. Malware and viruses

  ---

  The most common threat to an organization is computer viruses or malware. A computer can become infected with a virus through day-to-day activities such as browsing web sites or emails. As browsing and opening emails are the most common activities performed by all users, computer viruses represent the most likely risk to a business. Common examples of malware include viruses, worms, trojan horses, and spyware. Viruses, for example, can cause havoc on a computer's hard drive by deleting files or directory information. Spyware can gather data from a user's system without the user knowing it. This can include anything from the Web pages a user visits to personal information, such as credit card numbers.

• Question 889:

  A security administrator must implement a system to allow clients to securely negotiate encryption keys with the company's server over a public unencrypted communication channel. Which of the following implements the required secure key negotiation? (Select TWO).

  A. PBKDF2
  B. Symmetric encryption
  C. Steganography
  D. ECDHE
  E. Diffie-Hellman
  D. ECDHE
  E. Diffie-Hellman

  ---

  Elliptic curve Diffie璈ellman (ECDH) is an anonymous key agreement protocol that allows two parties, each having an elliptic curve public-private key pair, to establish a shared secret over an insecure channel. This shared secret may be directly used as a key, or better yet, to derive another key which can then be used to encrypt subsequent communications using a symmetric key cipher. It is a variant of the Diffie璈ellman protocol using elliptic curve cryptography. Note: Adding an ephemeral key to Diffie-Hellman turns it into DHE (which, despite the order of the acronym, stands for Ephemeral Diffie-Hellman). Adding an ephemeral key to Elliptic Curve Diffie-Hellman turns it into ECDHE (again, overlook the order of the acronym letters; it is called Ephemeral Elliptic Curve Diffie- Hellman). It is the ephemeral component of each of these that provides the perfect forward secrecy.

• Question 890:

  A bank requires tellers to get manager approval when a customer wants to open a new account. A recent audit shows that there have been four cases in the previous year where tellers opened accounts without management approval. The bank president thought separation of duties would prevent this from happening. In order to implement a true separation of duties approach the bank could:

  A. Require the use of two different passwords held by two different individuals to open an account
  B. Administer account creation on a role based access control approach
  C. Require all new accounts to be handled by someone else other than a teller since they have different duties
  D. Administer account creation on a rule based access control approach
  C. Require all new accounts to be handled by someone else other than a teller since they have different duties