[2021-New] CompTIA SY0-401 Dumps With Update Exam Questions (181-190)

SY0-401 Dumps

SY0-401 Exam Questions - Online Test

SY0-401 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Q1. An overseas branch office within a company has many more technical and non-technical security incidents than other parts of the company. Which of the following management controls should be introduced to the branch office to improve their state of security?

A. Initial baseline configuration snapshots

B. Firewall, IPS and network segmentation

C. Event log analysis and incident response

D. Continuous security monitoring processes

Answer: D

Explanation:

Q2. Allowing unauthorized removable devices to connect to computers increases the risk of which of the following?

A. Data leakage prevention

B. Data exfiltration

C. Data classification

D. Data deduplication

Answer: B

Explanation: Data exfiltration is the unauthorized copying, transfer or retrieval of data from a system.

Q3. An email client says a digital signature is invalid and the sender cannot be verified. The recipient is concerned with which of the following concepts?

A. Integrity

B. Availability

C. Confidentiality

D. Remediation

Answer: A

Explanation:

A digital signature is similar in function to a standard signature on a document. It validates the integrity of the message and the sender. The message is encrypted using the encryption system, and a second piece of information, the digital signature, is added to the message. Digital Signatures is used to validate the integrity of the message and the sender. Integrity means the message can’t be altered without detection.

Q4. Which of the following is an effective way to ensure the BEST temperature for all equipment within a datacenter?

A. Fire suppression

B. Raised floor implementation

C. EMI shielding

D. Hot or cool aisle containment

Answer: D

Explanation:

There are often multiple rows of servers located in racks in server rooms. The rows of servers are known as aisles, and they can be cooled as hot aisles and cold aisles. With a hot aisle, hot air outlets are used to cool the equipment, whereas with cold aisles, cold air intake is used to cool the equipment. Combining the two, you have cold air intake from below the aisle and hot air outtake above it, providing constant circulation. This is a more effective way of controlling temperature to safeguard your equipment in a data center.

Q5. Which of the following can result in significant administrative overhead from incorrect reporting?

A. Job rotation

B. Acceptable usage policies

C. False positives

D. Mandatory vacations

Answer: C

Explanation:

False positives are essentially events that are mistakenly flagged and are not really events to be concerned about. This causes a significant administrative overhead because the reporting is what results in the false positives.

Q6. Which of the following is used to verify data integrity?

A. SHA

B. 3DES

C. AES

D. RSA

Answer: A

Explanation:

SHA stands for "secure hash algorithm". SHA-1 is the most widely used of the existing SHA hash

functions, and is employed in several widely used applications and protocols including TLS and

SSL, PGP, SSH, S/MIME, and IPsec. It is used to ensure data integrity.

Note:

A hash value (or simply hash), also called a message digest, is a number generated from a string

of text. The hash is substantially smaller than the text itself, and is generated by a formula in such

a way that it is extremely unlikely that some other text will produce the same hash value.

Hashes play a role in security systems where they're used to ensure that transmitted messages

have not been tampered with. The sender generates a hash of the message, encrypts it, and sends it with the message itself. The recipient then decrypts both the message and the hash, produces another hash from the received message, and compares the two hashes. If they're the same, there is a very high probability that the message was transmitted intact. This is how hashing is used to ensure data integrity.

Q7. A company has implemented PPTP as a VPN solution. Which of the following ports would need to be opened on the firewall in order for this VPN to function properly? (Select TWO).

A. UDP 1723

B. TCP 500

C. TCP 1723

D. UDP 47

E. TCP 47

Answer: C,D

Explanation:

A PPTP tunnel is instantiated by communication to the peer on TCP port 1723. This TCP connection is then used to initiate and manage a second GRE tunnel to the same peer. The PPTP GRE packet format is non-standard, including an additional acknowledgement field replacing the typical routing field in the GRE header. However, as in a normal GRE connection, those modified GRE packets are directly encapsulated into IP packets, and seen as IP protocol number 47.

Q8. Company XYZ recently salvaged company laptops and removed all hard drives, but the Chief Information Officer (CIO) is concerned about disclosure of confidential information. Which of the following is the MOST secure method to dispose of these hard drives?

A. Degaussing

B. Physical Destruction

C. Lock up hard drives in a secure safe

D. Wipe

Answer: B

Explanation:

The physical description of hard drives is the only secure means of disposing hard drives. This can include incineration, an acid bath, and crushing.

Q9. The system administrator has been notified that many users are having difficulty connecting to the company’s wireless network. They take a new laptop and physically go to the access point and connect with no problems. Which of the following would be the MOST likely cause?

A. The certificate used to authenticate users has been compromised and revoked.

B. Multiple war drivers in the parking lot have exhausted all available IPs from the pool to deny access.

C. An attacker has gained access to the access point and has changed the encryption keys.

D. An unauthorized access point has been configured to operate on the same channel.

Answer: D

Explanation:

Wireless Access Points can be configured to use a channel. If you have multiple access points within range of each other, you should configure the access points to use different channels. Different channels use different frequencies. If you have two access points using the same channel, their wifi signals will interfere with each other. The question states that that many users are having difficulty connecting to the company’s wireless network. This is probably due to the signal being weakened by interference from another access point using the same channel. When the administrator takes a new laptop and physically goes to the access point and connects with no problems, he is able to connect because he is near the access point and therefore has a strong signal.

Q10. Jane, a VPN administrator, was asked to implement an encryption cipher with a MINIMUM effective security of 128-bits. Which of the following should Jane select for the tunnel encryption?

A. Blowfish

B. DES

C. SHA256

D. HMAC

Answer: A

Explanation:

Blowfish is an encryption system that performs a 64-bit block cipher at very fast speeds. It is a symmetric block cipher that can use variable-length keys (from 32 bits to 448 bits). Among the alternatives listed above, it is the only cipher that can use a 128-bit key and which does provide additional security through a symmetric key.