Quiz
SY0-401 Part 1 (50 questions)
Questions in this quiz (50)
1An achievement in providing worldwide Internet security was the signing of certificates associated with which of the following protocols?
- ATCP/IP
- BSSL
- CSCP
- DSSH
2A Chief Information Security Officer (CISO) wants to implement two-factor authentication within the company. Which of the following would fulfill the CISO’s requirements?
- AUsername and password
- BRetina scan and fingerprint scan
- CUSB token and PIN
- DProximity badge and token
3Which of the following can a security administrator implement on mobile devices that will help prevent unwanted people from viewing the data if the device is left unattended?
- AScreen lock
- BVoice encryption
- CGPS tracking
- DDevice encryption
4Which of the following would a security administrator implement in order to identify a problem between two systems that are not communicating properly?
- AProtocol analyzer
- BBaseline report
- CRisk assessment
- DVulnerability scan
5Which of the following can result in significant administrative overhead from incorrect reporting?
- AJob rotation
- BAcceptable usage policies
- CFalse positives
- DMandatory vacations
6A security administrator wants to perform routine tests on the network during working hours when certain applications are being accessed by the most people. Which of the following would allow the security administrator to test the lack of security controls for those applications with the least impact to the system?
- APenetration test
- BVulnerability scan
- CLoad testing
- DPort scanner
7Which of the following risk concepts requires an organization to determine the number of failures
per year?- ASLE
- BALE
- CMTBF
- DQuantitative analysis
8A system security analyst using an enterprise monitoring tool notices an unknown internal host exfiltrating files to several foreign IP addresses. Which of the following would be an appropriate mitigation technique?
- ADisabling unnecessary accounts
- BRogue machine detection
- CEncrypting sensitive files
- DImplementing antivirus
9Three of the primary security control types that can be implemented are.
- ASupervisory, subordinate, and peer
- BPersonal, procedural, and legal
- COperational, technical, and mamagement
- DMandatory, discretionary, and permanent
10The helpdesk reports increased calls from clients reporting spikes in malware infections on their systems. Which of the following phases of incident response is MOST appropriate as a FIRST response?
- ARecovery
- BFollow-up
- CValidation
- DIdentification
- EEradication
- FContainment
11Which of the following protocols operates at the HIGHEST level of the OSI model?
- AICMP
- BIPSec
- CSCP
- DTCP
12Joe, the system administrator, has been asked to calculate the Annual Loss Expectancy (ALE) for a $5,000 server, which often crashes. In the past year, the server has crashed 10 times, requiring a system reboot to recover with only 10% loss of data or function. Which of the following is the ALE of this server?
- A$500
- B$5,000
- C$25,000
- D$50,000
13Which of the following should an administrator implement to research current attack methodologies?
- ADesign reviews
- BHoneypot
- CVulnerability scanner
- DCode reviews
14Which of the following can be implemented in hardware or software to protect a web server from cross-site scripting attacks?
- AIntrusion Detection System
- BFlood Guard Protection
- CWeb Application Firewall
- DURL Content Filter
15Which of the following means of wireless authentication is easily vulnerable to spoofing?
- AMAC Filtering
- BWPA - LEAP
- CWPA - PEAP
- DEnabled SSID
16The BEST methods for a web developer to prevent the website application code from being vulnerable to cross-site request forgery (XSRF) are to: (Select TWO).
- Apermit redirection to Internet-facing web URLs
- Bensure all HTML tags are enclosed in angle brackets, e.g. "<" and ">"
- Cvalidate and filter input on the server side and client side
- Duse a web proxy to pass website requests between the user and the application
- Erestrict and sanitize use of special characters in input and URLs
17Jane, a security administrator, needs to implement a secure wireless authentication method that uses a remote RADIUS server for authentication. Which of the following is an authentication method Jane should use?
- AWPA2-PSK
- BWEP-PSK
- CCCMP
- DLEAP
18Computer evidence at a crime scene is documented with a tag stating who had possession of the evidence at a given time. Which of the following does this illustrate?
- ASystem image capture
- BRecord time offset
- COrder of volatitility
- DChain of custody
19A network administrator is configuring access control for the sales department which has high employee turnover. Which of the following is BEST suited when assigning user rights to individuals in the sales department?
- ATime of day restrictions
- BGroup based privileges
- CUser assigned privileges
- DDomain admin restrictions
20Which of the following is being tested when a company’s payroll server is powered off for eight hours?
- ASuccession plan
- BBusiness impact document
- CContinuity of operations plan
- DRisk assessment plan
21A security analyst, Ann, is reviewing an IRC channel and notices that a malicious exploit has been created for a frequently used application. She notifies the software vendor and asks them for remediation steps, but is alarmed to find that no patches are available to mitigate this vulnerability. Which of the following BEST describes this exploit?
- AMalicious insider threat
- BZero-day
- CClient-side attack
- DMalicious add-on
22A security administrator has concerns about new types of media which allow for the mass distribution of personal comments to a select group of people. To mitigate the risks involved with this media, employees should receive training on which of the following?
- APeer to Peer
- BMobile devices
- CSocial Networking
- DPersonally owned devices
23A network administrator is responsible for securing applications against external attacks. Every month, the underlying operating system is updated. There is no process in place for other software updates. Which of the following processes could MOST effectively mitigate these risks?
- AApplication hardening
- BApplication change management
- CApplication patch management
- DApplication firewall review
24A software developer is responsible for writing the code on an accounting application. Another software developer is responsible for developing code on a system in human resources. Once a year they have to switch roles for several weeks. Which of the following practices is being implemented?
- AMandatory vacations
- BJob roation
- CLeast privilege
- DSeparation of duties
25A network engineer is designing a secure tunneled VPN. Which of the following protocols would be the MOST secure?
- AIPSec
- BSFTP
- CBGP
- DPPTP
26Which of the following implementation steps would be appropriate for a public wireless hot-spot?
- AReduce power level
- BDisable SSID broadcast
- COpen system authentication
- DMAC filter
27Which of the following is a step in deploying a WPA2-Enterprise wireless network?
- AInstall a token on the authentication server
- BInstall a DHCP server on the authentication server
- CInstall an encryption key on the authentication server
- DInstall a digital certificate on the authentication server
28Which of the following controls would allow a company to reduce the exposure of sensitive systems from unmanaged devices on internal networks?
- A802.1x
- BData encryption
- CPassword strength
- DBGP
29Which of the following preventative controls would be appropriate for responding to a directive to reduce the attack surface of a specific host?
- AInstalling anti-malware
- BImplementing an IDS
- CTaking a baseline configuration
- DDisabling unnecessary services
30A security manager must remain aware of the security posture of each system. Which of the following supports this requirement?
- ATraining staff on security policies
- BEstablishing baseline reporting
- CInstalling anti-malware software
- DDisabling unnecessary accounts/services
31Deploying a wildcard certificate is one strategy to:
- ASecure the certificates's private key
- BIncrease the certificate's encryption key length
- CExtend the renewal date of the certificate
- DReduce the certificate management burden
32The security administrator needs to manage traffic on a layer 3 device to support FTP from a new remote site. Which of the following would need to be implemented?
- AImplicit deny
- BVLAN management
- CPort security
- DAccess control lists
33Which of the following ports is used for SSH, by default?
- A23
- B32
- C12
- D22
34A network administrator has been tasked with securing the WLAN. Which of the following cryptographic products would be used to provide the MOST secure environment for the WLAN?
- AWPA2 CCMP
- BWPA
- CWPA with MAC filtering
- DWPA2 TKIP
35A server with the IP address of 10.10.2.4 has been having intermittent connection issues. The logs show repeated connection attempts from the following IPs: 10.10.3.16, 10.10.3.23, 212.178.24.26, 212.178.24.26, 217.24.94.83. These attempts are overloading the server to the point that it cannot respond to traffic. Which of the following attacks is occurring?
- AXSS
- BDDoS
- CDoS
- DXMAS
36Which of the following ciphers would be BEST used to encrypt streaming video?
- ARSA
- BRC4
- CSHA1
- D3DES
37A user attempting to log on to a workstation for the first time is prompted for the following information before being granted access: username, password, and a four-digit security pin that was mailed to him during account registration. This is an example of which of the following?
- ADual-factor authentication
- BMultifactor authentication
- CSingle factor authentication
- DBiometric authentication
38After analyzing and correlating activity from multiple sensors, the security administrator has determined that a group of very well organized individuals from an enemy country is responsible for various attempts to breach the company network, through the use of very sophisticated and
targeted attacks. Which of the following is this an example of?- APrivilege escalation
- BAdvanced persistent threat
- CMalicious insider threat
- DSpear phishing
39Which of the following is true about input validation in a client-server architecture, when data integrity is critical to the organization?
- AIt should be enforced on the client side only
- BIt must be protected by SSL encryption
- CIt must rely on the user's knowledge of the application
- DIt should be performed on the server side
40A merchant acquirer has the need to store credit card numbers in a transactional database in a high performance environment. Which of the following BEST protects the credit card data?
- ADatabase field encryption
- BFile-level encryption
- CData loss prevention system
- DFull disk encryption
41A bank has a fleet of aging payment terminals used by merchants for transactional processing. The terminals currently support single DES but require an upgrade in order to be compliant with security standards. Which of the following is likely to be the simplest upgrade to the aging terminals which will improve in-transit protection of transactional data?
- AAES
- B3DES
- CRC4
- DWPA2
42Which of the following is BEST at blocking attacks and providing security at layer 7 of the OSI model?
- AWAF
- BNIDS
- CRouters
- DSwitches
43Which of the following is BEST used to capture and analyze network traffic between hosts on the same network segment?
- AProtocol analyzer
- BRouter
- CFirewall
- DHIPS
44After a number of highly publicized and embarrassing customer data leaks as a result of social engineering attacks by phone, the Chief Information Officer (CIO) has decided user training will reduce the risk of another data leak. Which of the following would be MOST effective in reducing data leaks in this situation?
- AInformation Security Awareness
- BSocial Media and BYOD
- CData Handling and Disposal
- DAcceptable Use of IT Systems
45Which of the following functions provides an output which cannot be reversed and converts data into a string of characters?
- AHasing
- BStream ciphers
- CSteganography
- DBlock ciphers
46Which of the following encrypts data a single bit at a time?
- AStream cipher
- BSteganography
- C3DES
- DHasing
47Which of the following is used to verify data integrity?
- ASHA
- B3DES
- CAES
- DRSA
48By default, which of the following uses TCP port 22?
- AFTPS
- BSTELNET
- CTLS
- DSCP
- ESSL
- FHTTPS
- GSSH
- HSFTP
49Access mechanisms to data on encrypted USB hard drives must be implemented correctly otherwise:
- Auser accounts may be inadvertently locked out
- Bdata on the USB drive could be corrupted
- Cdata on the hard drive will be vulnerable to log analysis
- Dthe security controls on the USB drive can be bypassed
50Maintenance workers find an active network switch hidden above a dropped-ceiling tile in the CEO’s office with various connected cables from the office. Which of the following describes the type of attack that was occurring?
- ASpear phishing
- BPacket sniffing
- CImpersonation
- DMAC flooding
Information
- Description
- CompTIA SY0-401 100 question exam broken down into 2 parts, this is part 1.
- Author
- desideri
- Language
- English
- Views
- 169
- Tags
- Rating
- 4.0 out of 5 · 2 ratings Rate this quiz