CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 921:

  A news and weather toolbar was accidently installed into a web browser. The toolbar tracks users online activities and sends them to a central logging server. Which of the following attacks took place?

  A. Man-in-the-browser
  B. Flash cookies
  C. Session hijacking
  D. Remote code execution
  E. Malicious add-on
  E. Malicious add-on

• Question 922:

  A security administrator is segregating all web-facing server traffic from the internal network and restricting it to a single interface on a firewall. Which of the following BEST describes this new network?

  A. VLAN
  B. Subnet
  C. VPN
  D. DMZ
  D. DMZ

  ---

  A DMZ or demilitarized zone (sometimes referred to as a perimeter network) is a physical or logical subnetwork that contains and exposes an organization's external-facing services to a larger and untrusted network, usually the Internet. The purpose of a DMZ is to add an additional layer of security to an organization's local area network (LAN); an external network node only has direct access to equipment in the DMZ, rather than any other part of the network. The name is derived from the term "demilitarized zone", an area between nation states in which military operation is not permitted.

• Question 923:

  Which of the following is true about an email that was signed by User A and sent to User B?

  A. User A signed with User B's private key and User B verified with their own public key.
  B. User A signed with their own private key and User B verified with User A's public key.
  C. User A signed with User B's public key and User B verified with their own private key.
  D. User A signed with their own public key and User B verified with User A's private key.
  B. User A signed with their own private key and User B verified with User A's public key.

  ---

  The sender uses his private key, in this case User A's private key, to create a digital signature. The message is, in effect, signed with the private key. The sender then sends the message to the receiver. The receiver (User B) uses the public

  key attached to the message to validate the digital signature. If the values match, the receiver knows the message is authentic.

  The receiver uses a key provided by the sender--the public key--to decrypt the message.

• Question 924:

  A security administrator is tasked with conducting an assessment made to establish the baseline security posture of the corporate IT infrastructure. The assessment must report actual flaws and weaknesses in the infrastructure. Due to the expense of hiring outside consultant, the testing must be performed using in-house or cheaply available resources. There cannot be a possibility of equipment being damaged in the test. Which of the following has the administrator been tasked to perform?

  A. Risk transference
  B. Penetration tes
  C. Threat assessment
  D. Vulnerability assessment
  A. Risk transference

• Question 925:

  Which of the following allows Pete, a security technician, to provide the MOST secure wireless implementation?

  A. Implement WPA
  B. Disable SSID
  C. Adjust antenna placement
  D. Implement WEP
  A. Implement WPA

  ---

  Explanation: Of the options supplied, WiFi Protected Access (WPA) is the most secure and is the replacement for WEP.

• Question 926:

  An administrator has configured a new Linux server with the FTP service. Upon verifying that the service was configured correctly, the administrator has several users test the FTP service. Users report that they are able to connect to the FTP service and download their personal files, however, they cannot transfer new files to the server. Which of the following will most likely fix the uploading issue for the users?

  A. Create an ACL to allow the FTP service write access to user directories
  B. Set the Boolean selinux value to allow FTP home directory uploads
  C. Reconfigure the ftp daemon to operate without utilizing the PSAV mode
  D. Configure the FTP daemon to utilize PAM authentication pass through user permissions
  A. Create an ACL to allow the FTP service write access to user directories

• Question 927:

  A system adminitrator is configuring a site-to-site VPN tunnel. Which of the following should be configured on the VPN concentrator during the IKE phase?

  A. RIPEMD
  B. ECDHE
  C. Diffie-Hellman
  D. HTTPS
  C. Diffie-Hellman

• Question 928:

  Company A submitted a bid on a contract to do work for Company B via email. Company B was insistent that the bid did not come from Company A. Which of the following would have assured that the bid was submitted by Company A?

  A. Steganography
  B. Hashing
  C. Encryption
  D. Digital Signatures
  D. Digital Signatures

  ---

  A digital signature is similar in function to a standard signature on a document. It validates the integrity of the message and the sender. The message is encrypted using the encryption system, and a second piece of information, the digital signature, is added to the message.

• Question 929:

  Joe a company's new security specialist is assigned a role to conduct monthly vulnerability scans across the network. He notices that the scanner is returning a large amount of false positives or failed audits. Which of the following should Joe recommend to remediate these issues?

  A. Ensure the vulnerability scanner is located in a segmented VLAN that has access to the company's servers
  B. Ensure the vulnerability scanner is configured to authenticate with a privileged account
  C. Ensure the vulnerability scanner is attempting to exploit the weaknesses it discovers
  D. Ensure the vulnerability scanner is conducting antivirus scanning
  A. Ensure the vulnerability scanner is located in a segmented VLAN that has access to the company's servers

  ---

  The vulnerability scanner is returning false positives because it is trying to scan servers that it doesn't have access to; for example, servers on the Internet. We need to ensure that the local network servers only are scanned. We can do this by

  locating the vulnerability scanner in a segmented VLAN that has access to the company's servers.

  A false positive is an error in some evaluation process in which a condition tested for is mistakenly found to have been detected.

  In spam filters, for example, a false positive is a legitimate message mistakenly marked as UBE --unsolicited bulk email, as junk email is more formally known. Messages that are determined to be spam -- whether correctly or incorrectly -- may

  be rejected by a server or client-side spam filter and returned to the sender as bounce e-mail. One problem with many spam filtering tools is that if they are configured stringently enough to be effective, there is a fairly high chance of getting

  false positives. The risk of accidentally blocking an important message has been enough to deter many companies from implementing any anti-spam measures at all.

  False positives are also common in security systems. A host intrusion prevention system (HIPS), for example, looks for anomalies, such as deviations in bandwidth, protocols and ports. When activity varies outside of an acceptable range ?for

  example, a remote application attempting to open a normally closed port -- an intrusion may be in progress. However, an anomaly, such as a sudden spike in bandwidth use, does not guarantee an actual attack, so this approach amounts to

  an educated guess and the chance for false positives can be high.

  False positives contrast with false negatives, which are results indicating mistakenly that some condition tested for is absent.

• Question 930:

  Technicians working with servers hosted at the company's datacenter are increasingly complaining of electric shocks when touching metal items which have been linked to hard drive failures. Which of the following should be implemented to correct this issue?

  A. Decrease the room temperature
  B. Increase humidity in the room
  C. Utilize better hot/cold aisle configurations
  D. Implement EMI shielding
  D. Implement EMI shielding