CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 901:

  An administrator is concerned that a company's web server has not been patched. Which of the following would be the BEST assessment for the administrator to perform?

  A. Vulnerability scan
  B. Risk assessment
  C. Virus scan
  D. Network sniffer
  A. Vulnerability scan

  ---

  A vulnerability scan is the process of scanning the network and/or I.T. infrastructure for threats and vulnerabilities. Vulnerabilities include computer systems that do not have the latest security patches installed.

  The threats and vulnerabilities are then evaluated in a risk assessment and the necessary actions taken to resolve and vulnerabilities.

  A vulnerability scan is the automated process of proactively identifying security vulnerabilities of computing systems in a network in order to determine if and where a system can be exploited and/or threatened. While public servers are

  important for communication and data transfer over the Internet, they open the door to potential security breaches by threat agents, such as malicious hackers. Vulnerability scanning employs software that seeks out security flaws based on a

  database of known flaws, testing systems for the occurrence of these flaws and generating a report of the findings that an individual or an enterprise can use to tighten the network's security. Vulnerability scanning typically refers to the

  scanning of systems that are connected to the Internet but can also refer to system audits on internal networks that are not connected to the Internet in order to assess the threat of rogue software or malicious employees in an enterprise.

• Question 902:

  A security administrator wants to perform routine tests on the network during working hours when certain applications are being accessed by the most people. Which of the following would allow the security administrator to test the lack of security controls for those applications with the least impact to the system?

  A. Penetration test
  B. Vulnerability scan
  C. Load testing
  D. Port scanner
  B. Vulnerability scan

  ---

  A vulnerability scan is the process of scanning the network and/or I.T. infrastructure for threats and vulnerabilities. The threats and vulnerabilities are then evaluated in a risk assessment and the necessary actions taken to resolve and vulnerabilities. A vulnerability scan scans for known weaknesses such as missing patches or security updates.

  A vulnerability scan is the automated process of proactively identifying security vulnerabilities of computing systems in a network in order to determine if and where a system can be exploited and/or threatened. While public servers are important for communication and data transfer over the Internet, they open the door to potential security breaches by threat agents, such as malicious hackers. Vulnerability scanning employs software that seeks out security flaws based on a database of known flaws, testing systems for the occurrence of these flaws and generating a report of the findings that an individual or an enterprise can use to tighten the network's security.

• Question 903:

  Elastic cloud computing environments often reuse the same physical hardware for multiple customers over time as virtual machines are instantiated and deleted. This has important implications for which of the following data security concerns?

  A. Hardware integrity
  B. Data confidentiality
  C. Availability of servers
  D. Integrity of data
  B. Data confidentiality

  ---

  Data that is not kept separate or segregated will impact on that data's confidentiality maybe being compromised. Be aware of the fact that your data is only as safe as the data with which it is integrated. For example, assume that your client database is hosted on a server that another company is also using to test an application that they are creating. If their application obtains root-level access at some point (such as to change passwords) and crashes at that point, then the user running the application could be left with root permissions and conceivably be to access data on the server for which they are not authorized, such as your client database. Data segregation is crucial; keep your data on secure servers.

• Question 904:

  An organization is trying to decide which type of access control is most appropriate for the network. The current access control approach is too complex and requires significant overhead. Management would like to simplify the access control and provide user with the ability to determine what permissions should be applied to files, document, and directories. The access control method that BEST satisfies these objectives is:

  A. Rule-based access control
  B. Role-based access control
  C. Mandatory access control
  D. Discretionary access control
  B. Role-based access control

• Question 905:

  Anne an employee receives the following email:

  From: Human Resources

  To: Employee

  Subject: Updated employee code of conduct

  Please click on the following link: http//external.site.com/codeofconduct.exe to review the updated code of conduct at your earliest convenience.

  After clicking the email link, her computer is compromised. Which of the following principles of social engineering was used to lure Anne into clicking the phishing link in the above email?

  A. Authority
  B. Familiarity
  C. Intimidation
  D. Urgency
  B. Familiarity

• Question 906:

  Which of the following is the process in which a law enforcement officer or a government agent encourages or induces a person to commit a crime when the potential criminal expresses a desire not to go ahead?

  A. Enticement
  B. Entrapment
  C. Deceit
  D. Sting
  B. Entrapment

  ---

  Entrapment is the process in which a law enforcement officer or a government agent encourages or induces a person to commit a crime when the potential criminal expresses a desire not to go ahead. Entrapment is a valid legal defense in a criminal prosecution.

• Question 907:

  A file on a Linux server has default permissions of rw-rw-r--. The system administrator has verified that Ann, a user, is not a member of the group owner of the file. Which of the following should be modified to assure that Ann has read access to the file?

  A. User ownership information for the file in question
  B. Directory permissions on the parent directory of the file in question
  C. Group memberships for the group owner of the file in question
  D. The file system access control list (FACL) for the file in question
  C. Group memberships for the group owner of the file in question

  ---

  The file permissions according to the file system access control list (FACL) are rw-rw-r--. The first `rw-` are the file owner permissions (read and write). The second `rw-` are the group permissions (read and write) for the group that has been

  assigned the file.

  The third `r--` is the All Users permissions; in this case read only. To enable Ann to access the file, we should add Ann to the group that has been assigned to the file.

• Question 908:

  During a company-wide initiative to harden network security, it is discovered that end users who have laptops cannot be removed from the local administrator group. Which of the following could be used to help mitigate the risk of these machines becoming compromised?

  A. Security log auditing
  B. Firewalls
  C. HIPS D. IDS
  B. Firewalls

• Question 909:

  The Chief Security Officer (CSO) is concerned about misuse of company assets and wishes to determine who may be responsible. Which of the following would be the BEST course of action?

  A. Create a single, shared user account for every system that is audited and logged based upon time of use.
  B. Implement a single sign-on application on equipment with sensitive data and high-profile shares.
  C. Enact a policy that employees must use their vacation time in a staggered schedule.
  D. Separate employees into teams led by a person who acts as a single point of contact for observation purposes.
  C. Enact a policy that employees must use their vacation time in a staggered schedule.

  ---

  A policy that states employees should use their vacation time in a staggered schedule is a way of employing mandatory vacations. A mandatory vacation policy requires all users to take time away from work while others step in and do the work of that employee on vacation. This will afford the CSO the opportunity to see who is using the company assets responsibly and who is abusing it.

• Question 910:

  An organization does not have adequate resources to administer its large infrastructure. A security administrator wishes to integrate the security controls of some of the network devices in the organization. Which of the following methods would BEST accomplish this goal?

  A. Unified Threat Management
  B. Virtual Private Network
  C. Single sign on
  D. Role-based management
  A. Unified Threat Management

  ---

  Unified Threat Management (UTM) is, basically, the combination of a firewall with other abilities. These abilities include intrusion prevention, antivirus, content filtering, etc.

  Advantages of combining everything into one:

  You only have one product to learn.

  You only have to deal with a single vendor.

  IT provides reduced complexity.