CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 971:

  When confidentiality is the primary concern which of the following types of encryption should be chosen?

  A. Digital Signature
  B. Symmetric
  C. Asymmetri
  D. Hashing
  D. Hashing

• Question 972:

  The systems administrator notices that many employees are using passwords that can be easily guessed or are susceptible to brute force attacks. Which of the following would BEST mitigate this risk?

  A. Enforce password rules requiring complexity.
  B. Shorten the maximum life of account passwords.
  C. Increase the minimum password length.
  D. Enforce account lockout policies.
  A. Enforce password rules requiring complexity.

  ---

  Password complexity often requires the use of a minimum of three out of four standard character types for a password. The more characters in a password that includes some character complexity, the more resistant it is to brute force attacks.

• Question 973:

  Which of the following is an example of a false positive?

  A. Anti-virus identifies a benign application as malware.
  B. A biometric iris scanner rejects an authorized user wearing a new contact lens.
  C. A user account is locked out after the user mistypes the password too many times.
  D. The IDS does not identify a buffer overflow.
  A. Anti-virus identifies a benign application as malware.

  ---

  A false positive is an error in some evaluation process in which a condition tested for is mistakenly found to have been detected.

  In spam filters, for example, a false positive is a legitimate message mistakenly marked as UBE --unsolicited bulk email, as junk email is more formally known. Messages that are determined to be spam -- whether correctly or incorrectly -- may

  be rejected by a server or client-side spam filter and returned to the sender as bounce e-mail. One problem with many spam filtering tools is that if they are configured stringently enough to be effective, there is a fairly high chance of getting

  false positives. The risk of accidentally blocking an important message has been enough to deter many companies from implementing any anti-spam measures at all.

  False positives are also common in security systems. A host intrusion prevention system (HIPS), for example, looks for anomalies, such as deviations in bandwidth, protocols and ports. When activity varies outside of an acceptable range ?for

  example, a remote application attempting to open a normally closed port -- an intrusion may be in progress. However, an anomaly, such as a sudden spike in bandwidth use, does not guarantee an actual attack, so this approach amounts to

  an educated guess and the chance for false positives can be high.

  False positives contrast with false negatives, which are results indicating mistakenly that some condition tested for is absent.

• Question 974:

  An employee needs to connect to a server using a secure protocol on the default port. Which of the following ports should be used?

  A. 21
  B. 22
  C. 80
  D. 110
  B. 22

• Question 975:

  The process of applying a salt and cryptographic hash to a password then repeating the process many times is known as which of the following?

  A. Collision resistance
  B. Rainbow table
  C. Key stretching
  D. Brute force attack
  C. Key stretching

• Question 976:

  A security administrator is designing an access control system, with an unlimited budget, to allow authenticated users access to network resources. Given that a multifactor authentication solution is more secure, which of the following is the BEST combination of factors?

  A. Retina scanner, thumbprint scanner, and password
  B. Username and password combo, voice recognition scanner, and retina scanner
  C. Password, retina scanner, and proximity reader
  D. One-time password pad, palm-print scanner, and proximity photo badges
  B. Username and password combo, voice recognition scanner, and retina scanner

• Question 977:

  A chief privacy officer, Joe, is concerned that employees are sending emails to addresses outside of the company that contain PII. He asks that the security technician to implement technology that will mitigate this risk. Which of the following would be the best option?

  A. DLP
  B. HIDS
  C. Firewall
  D. Web content filtering
  A. DLP

• Question 978:

  Which of the following wireless security measures can an attacker defeat by spoofing certain properties of their network interface card?

  A. WEP
  B. MAC filtering
  C. Disabled SSID broadcast
  D. TKIP
  B. MAC filtering

  ---

  MAC filtering is typically used in wireless networks. In computer networking, MAC Filtering (or GUI filtering, or layer 2 address filtering) refers to a security access control method whereby the 48-bit address assigned to each network card is

  used to determine access to the network.

  MAC addresses are uniquely assigned to each card, so using MAC filtering on a network permits and denies network access to specific devices through the use of blacklists and whitelists. While the restriction of network access through the

  use of lists is straightforward, an individual person is not identified by a MAC address, rather a device only, so an authorized person will need to have a whitelist entry for each device that he or she would use to access the network.

  While giving a wireless network some additional protection, MAC filtering can be circumvented by scanning a valid MAC (via airodumping) and then spoofing one's own MAC into a validated one.

• Question 979:

  A security administrator is investigating a recent server breach. The breach occurred as a result of a zero-day attack against a user program running on the server. Which of the following logs should the administrator search for information regarding the breach?

  A. Application log
  B. Setup log
  C. Authentication log
  D. System log
  A. Application log

• Question 980:

  How often, at a MINIMUM, should Sara, an administrator, review the accesses and rights of the users on her system?

  A. Annually
  B. Immediately after an employee is terminated
  C. Every five years
  D. Every time they patch the server
  A. Annually

  ---

  Reviewing the accesses and rights of the users on a system at least annually is acceptable practice. More frequently would be desirable but too frequently would be a waste of administrative time.