CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 891:

  The administrator installs database software to encrypt each field as it is written to disk. Which of the following describes the encrypted data?

  A. In-transit
  B. In-use
  C. Embedded
  D. At-rest
  B. In-use

• Question 892:

  A security audit identifies a number of large email messages being sent by a specific user from their company email account to another address external to the company. These messages were sent prior to a company data breach, which prompted the security audit. The user was one of a few people who had access to the leaked data. Review of the suspect's emails show they consist mostly of pictures of the user at various locations during a recent vacation. No suspicious activities from other users who have access to the data were discovered.

  Which of the following is occurring?

  A. The user is encrypting the data in the outgoing messages.
  B. The user is using steganography.
  C. The user is spamming to obfuscate the activity.
  D. The user is using hashing to embed data in the emails.
  B. The user is using steganography.

  ---

  Steganography is the process of hiding one message in another. Steganography may also be referred to as electronic watermarking. It is also the process of hiding a message in a medium such as a digital image, audio fi le, or other fi le. In theory, doing this prevents analysts from detecting the real message. You could encode your message in another file or message and use that file to hide your message.

• Question 893:

  Which of the following concepts describes the use of a one way transformation in order to validate the integrity of a program?

  A. Hashing
  B. Key escrow
  C. Non-repudiation
  D. Steganography
  A. Hashing

  ---

  Hashing refers to the hash algorithms used in cryptography. It is used to store data, such as hash tables and its main characteristics are:

  It must be one-way ?it is not reversible.

  Variable-length input produces fixed-length output ?whether you have two characters or 2 million, the hash size is the same.

  The algorithm must have few or no collisions ?in hashing two different inputs does not give the same output.

• Question 894:

  A datacenter manager has been asked to prioritize critical system recovery priorities. Which of the following is the MOST critical for immediate recovery?

  A. Communications software
  B. Operating system software
  C. Weekly summary reports to management
  D. Financial and production software
  B. Operating system software

• Question 895:

  A large corporation has data centers geographically distributed across multiple continents. The company needs to securely transfer large amounts of data between the data center. The data transfer can be accomplished physically or electronically, but must prevent eavesdropping while the data is on transit. Which of the following represents the BEST cryptographic solution?

  A. Driving a van full of Micro SD cards from data center to data center to transfer data
  B. Exchanging VPN keys between each data center via an SSL connection and transferring the data in the VPN
  C. Using a courier to deliver symmetric VPN keys to each data center and transferring data in the VPN
  D. Using PKI to encrypt each file and transferring them via an Internet based FTP or cloud server
  B. Exchanging VPN keys between each data center via an SSL connection and transferring the data in the VPN

  ---

  A virtual private network (VPN) is an encrypted communication tunnel that connects two systems over an untrusted network, such as the Internet. They provide security for both authentication and data transmission through a process called encapsulation. Secure Sockets Layer (SSL) can be used to exchange the VPN keys securely. SSL is used to establish secure TCP communication between two machines by encrypting the communication.

• Question 896:

  Which of the following ports will be used for logging into secure websites?

  A. 80
  B. 110
  C. 142
  D. 443
  D. 443

• Question 897:

  Which of the following malware types typically allows an attacker to monitor a user's computer, is characterized by a drive-by download, and requires no user interaction?

  A. Virus
  B. Logic bomb
  C. Spyware
  D. Adware
  C. Spyware

  ---

  Explanation:

  Spyware is software that is used to gather information about a person or organization without their knowledge and sends that information to another entity.

• Question 898:

  A small company has a website that provides online customer support. The company requires an account recovery process so that customers who forget their passwords can regain access. Which of the following is the BEST approach to implement this process?

  A. Replace passwords with hardware tokens which provide two-factor authentication to the online customer support site.
  B. Require the customer to physically come into the company's main office so that the customer can be authenticated prior to their password being reset.
  C. Web-based form that identifies customer by another mechanism and then emails the customer their forgotten password.
  D. Web-based form that identifies customer by another mechanism, sets a temporary password and forces a password change upon first login.
  D. Web-based form that identifies customer by another mechanism, sets a temporary password and forces a password change upon first login.

  ---

  People tend to forget their passwords, thus you should have a password recovery system for them that will not increase risk exposure. Setting a temporary password will restrict the time that the password is valid and thus decrease risk; and in addition forcing the customer to change it upon first login will make the password more secure for the customer.

• Question 899:

  Establishing a method to erase or clear memory is an example of securing which of the following?

  A. Data in transit
  B. Data at rest
  C. Data in use
  D. Data in motion
  B. Data at rest

• Question 900:

  Which of the following protocols allows for secure transfer of files? (Select TWO).

  A. ICMP
  B. SNMP
  C. SFTP
  D. SCP
  E. TFTP
  C. SFTP
  D. SCP

  ---

  Standard FTP is a protocol often used to move files between one system and another either over the Internet or within private networks. SFTP is a secured alternative to standard FTP. Secure Copy Protocol (SCP) is a secure file-transfer facility based on SSH and Remote Copy Protocol (RCP).