CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 981:

  A corporate wireless guest network uses an open SSID with a captive portal to authenticate guest users. Guests can obtain their portal password at the service desk. A security consultant alerts the administrator that the captive portal is easily bypassed, as long as one other wireless guest user is on the network. Which of the following attacks did the security consultant use?

  A. ARP poisoning
  B. DNS cache poisoning
  C. MAC spoofing
  D. Rouge DHCP server
  C. MAC spoofing

• Question 982:

  A company requires that a user's credentials include providing something they know and something they are in order to gain access to the network. Which of the following types of authentication is being described?

  A. Biometrics
  B. Kerberos
  C. Token
  D. Two-factor
  D. Two-factor

  ---

  Explanation: Two-factor authentication is when two different authentication factors are provided for authentication purposes. In this case, "something they know and something they are".

• Question 983:

  The helpdesk is receiving numerous reports that a newly installed biometric reader at the entrance of the data center has a high of false negatives. Which of the following is the consequence of this reported problem?

  A. Unauthorized employees have access to sensitive systems
  B. All employees will have access to sensitive systems
  C. No employees will be able to access the datacenter
  D. Authorized employees cannot access sensitive systems
  C. No employees will be able to access the datacenter

• Question 984:

  Which of the following is a best practice when securing a switch from physical access?

  A. Disable unnecessary accounts
  B. Print baseline configuration
  C. Enable access lists
  D. Disable unused ports
  D. Disable unused ports

  ---

  Disabling unused switch ports a simple method many network administrators use to help secure their network from unauthorized access. All ports not in use should be disabled. Otherwise, they present an open door for an attacker to enter.

• Question 985:

  Which of the following transportation encryption protocols should be used to ensure maximum security between a web browser and a web server?

  A. SSLv2
  B. SSHv1
  C. RSA
  D. TLS
  D. TLS

  ---

  HTTP Secure HTTP Secure (HTTPS) is the protocol used for "secure" web pages that users should see when they must enter personal information such as credit card numbers, passwords, and other identifiers. It combines HTTP with SSL/

  TLS to provide encrypted communication.

  Transport Layer Security (TLS) is a security protocol that expands upon SSL. Many industry analysts predict that TLS will replace SSL, and it is also referred to as SSL 3.1.

• Question 986:

  In which of the following scenarios is PKI LEAST hardened?

  A. The CRL is posted to a publicly accessible location.
  B. The recorded time offsets are developed with symmetric keys.
  C. A malicious CA certificate is loaded on all the clients.
  D. All public keys are accessed by an unauthorized user.
  C. A malicious CA certificate is loaded on all the clients.

  ---

  A rogue Certification Authority (CA) certificate allows malicious users to impersonate any Web site on the Internet, including banking and e-commerce sites secured using the HTTPS protocol. A rogue CA certificate would be seen as trusted by Web browsers, and it is harmful because it can appear to be signed by one of the root CAs that browsers trust by default. A rogue Certification Authority (CA) certificate can be created using a vulnerability in the Internet Public Key Infrastructure (PKI) used to issue digital certificates for secure Web sites.

• Question 987:

  Digital Signatures provide which of the following?

  A. Confidentiality
  B. Authorization
  C. Integrity
  D. Authentication
  E. Availability
  C. Integrity

  ---

  A digital signature is similar in function to a standard signature on a document. It validates the integrity of the message and the sender.

• Question 988:

  A company is preparing to decommission an offline, non-networked root certificate server. Before sending the server's drives to be destroyed by a contracted company, the Chief Security Officer (CSO) wants to be certain that the data will not be accessed. Which of the following, if implemented, would BEST reassure the CSO? (Select TWO).

  A. Disk hashing procedures
  B. Full disk encryption
  C. Data retention policies
  D. Disk wiping procedures
  E. Removable media encryption
  B. Full disk encryption
  D. Disk wiping procedures

  ---

  B: Full disk encryption is when the entire volume is encrypted; the data is not accessible to someone who might boot another operating system in an attempt to bypass the computer's security. Full disk encryption is sometimes referred to as hard drive encryption.

  D: Disk wiping is the process of overwriting data on the repeatedly, or using a magnet to alter the magnetic structure of the disks. This renders the data unreadable.

• Question 989:

  Company policy requires the use if passphrases instead if passwords. Which of the following technical controls MUST be in place in order to promote the use of passphrases?

  A. Reuse
  B. Length
  C. History
  D. Complexity
  D. Complexity

• Question 990:

  Which of the following is a black box testing methodology?

  A. Code, function, and statement coverage review
  B. Architecture and design review
  C. Application hardening
  D. Penetration testing
  A. Code, function, and statement coverage review