SY0-401 try out your chance to seeds the particular technical undertaking ends the following. Distant relative excess fat number of each main area of interest is within the SY0-401 quiz. CompTIA SY0-401 quiz testing you skill to recognise approaches to arrange and use cleverness are different. CompTIA world-wide-web asset worth throughout CompTIA Security+ Certification, the particular money along with business cleverness details on the effectiveness of the particular product individuals. Basically down load Actualtests SY0-401 learning materials along with Actualtests SY0-401 practice questions.

2021 Mar SY0-401 study guide

Q11. Pete, a network administrator, is implementing IPv6 in the DMZ. Which of the following protocols must he allow through the firewall to ensure the web servers can be reached via IPv6 from an IPv6 enabled Internet host? 

A. TCP port 443 and IP protocol 46 

B. TCP port 80 and TCP port 443 

C. TCP port 80 and ICMP 

D. TCP port 443 and SNMP 

Answer: B 

Explanation: 

HTTP and HTTPS, which uses TCP port 80 and TCP port 443 respectively, is necessary for Communicating with Web servers. It should therefore be allowed through the firewall. 


Q12. A new intern was assigned to the system engineering department, which consists of the system architect and system software developer’s teams. These two teams have separate privileges. The intern requires privileges to view the system architectural drawings and comment on some software development projects. Which of the following methods should the system administrator implement? 

A. Group based privileges 

B. Generic account prohibition 

C. User access review 

D. Credential management 

Answer: A 

Explanation: 

You can assign permissions to access resources either to a user or a group. The most efficient way is to assign permissions to a group (group based privileges). By assigning the intern’s user account to both groups, the intern will inherit the permissions assigned to those groups. 


Q13. All of the following are valid cryptographic hash functions EXCEPT: 

A. RIPEMD. 

B. RC4. 

C. SHA-512. 

D. MD4. 

Answer: B 

Explanation: 

RC4 is not a hash function. RC4 is popular with wireless and WEP/WPA encryption. 


Q14. Which of the following provides the BEST application availability and is easily expanded as demand grows? 

A. Server virtualization 

B. Load balancing 

C. Active-Passive Cluster 

D. RAID 6 

Answer: B 

Explanation: 

Load balancing is a way of providing high availability by splitting the workload across multiple computers. 


Q15. Pete, a security administrator, is informed that people from the HR department should not have access to the accounting department’s server, and the accounting department should not have access to the HR department’s server. The network is separated by switches. Which of the following is designed to keep the HR department users from accessing the accounting department’s server and vice-versa? 

A. ACLs 

B. VLANs 

C. DMZs 

D. NATS 

Answer: B 

Explanation: 

A virtual local area network (VLAN) is a hardware-imposed network segmentation created by switches. VLANs are used for traffic management. Communications between ports within the same VLAN occur without hindrance, but communications between VLANs require a routing function. 


Up to date SY0-401 download:

Q16. A security engineer is reviewing log data and sees the output below: 

POST: /payload.php HTTP/1.1 HOST: localhost Accept: */* Referrer: http://localhost/ ******* HTTP/1.1 403 Forbidden Connection: close 

Log: Access denied with 403. Pattern matches form bypass Which of the following technologies was MOST likely being used to generate this log? 

A. Host-based Intrusion Detection System 

B. Web application firewall 

C. Network-based Intrusion Detection System 

D. Stateful Inspection Firewall 

E. URL Content Filter 

Answer: B 

Explanation: 

A web application firewall is a device, server add-on, virtual service, or system filter that defines a strict set of communication rules for a website and all visitors. It’s intended to be an application-specific firewall to prevent cross-site scripting, SQL injection, and other web application attacks. 


Q17. Which of the following is a hardware-based security technology included in a computer? 

A. Symmetric key 

B. Asymmetric key 

C. Whole disk encryption 

D. Trusted platform module 

Answer: D 

Explanation: 

Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the system’s motherboard and is enabled or disable in BIOS. It helps with hash key generation and stores cryptographic keys, passwords, or certificates. 


Q18. Which of the following is a requirement when implementing PKI if data loss is unacceptable? 

A. Web of trust 

B. Non-repudiation 

C. Key escrow 

D. Certificate revocation list 

Answer: C 

Explanation: 

Key escrow is a database of stored keys that later can be retrieved. Key escrow addresses the possibility that a third party may need to access keys. Under the conditions of key escrow, the keys needed to encrypt/decrypt data are held in an escrow account (think of the term as it relates to home mortgages) and made available if that third party requests them. The third party in question is generally the government, but it could also be an employer if an employee’s private messages have been called into question. 


Q19. Which of the following is used to verify data integrity? 

A. SHA 

B. 3DES 

C. AES 

D. RSA 

Answer: A 

Explanation: 

SHA stands for "secure hash algorithm". SHA-1 is the most widely used of the existing SHA hash 

functions, and is employed in several widely used applications and protocols including TLS and 

SSL, PGP, SSH, S/MIME, and IPsec. It is used to ensure data integrity. 

Note: 

A hash value (or simply hash), also called a message digest, is a number generated from a string 

of text. The hash is substantially smaller than the text itself, and is generated by a formula in such 

a way that it is extremely unlikely that some other text will produce the same hash value. 

Hashes play a role in security systems where they're used to ensure that transmitted messages 

have not been tampered with. The sender generates a hash of the message, encrypts it, and sends it with the message itself. The recipient then decrypts both the message and the hash, produces another hash from the received message, and compares the two hashes. If they're the same, there is a very high probability that the message was transmitted intact. This is how hashing is used to ensure data integrity. 


Q20. A large bank has moved back office operations offshore to another country with lower wage costs in an attempt to improve profit and productivity. Which of the following would be a customer concern if the offshore staff had direct access to their data? 

A. Service level agreements 

B. Interoperability agreements 

C. Privacy considerations 

D. Data ownership 

Answer: C 

Explanation: