Ensurepass

 

QUESTION 91

An administrator has a network subnet dedicated to a group of users. Due to concerns regarding data and network security, the administrator desires to provide network access for this group only. Which of the following would BEST address this desire?

 

A.

Install a proxy server between the users’ computers and the switch to filter inbound network traffic.

B.

Block commonly used ports and forward them to higher and unused port numbers.

C.

Configure the switch to allow only traffic from computers based upon their physical address.

D.

Install host-based intrusion detection software to monitor incoming DHCP Discover requests.

 

Correct Answer: C

QUESTION 92

Which o
f the following is a security concern regarding users bringing personally-owned devices that they connect to the corporate network?

 

A.

Cross-platform compatibility issues between personal devices and server-based applications

B.

Lack of controls in place to ensure that the devices have the latest system patches and signature files

C.

Non-corporate devices are more difficult to locate when a user is terminated

D.

Non-purchased or leased equipment may cause failure during the audits of company-owned assets

 

Correct Answer: B

 

 

QUESTION 93

Due to issues with building keys being duplicated and distributed, a security administrator wishes to change to a different security control regarding a restricted area. The goal is to provide access based upon facial recognition. Which of the following will address this requirement?

 

A.

Set up mantraps to avoid tailgating of approved users.

B.

Place a guard at the entrance to approve access.

C.

Install a fingerprint scanner at the entrance.

D.

Implement proximity readers to scan users’ badges.

 

Correct Answer: B

 

 

QUESTION 94

A security administrator has concerns regarding employees saving data on company provided mobile devices. Which of the following would BEST address the administrator’s concerns?

 

A.

Install a mobile application that tracks read and write functions on the device.

B.

Create a company policy prohibiting the use of mobile devices for personal use.

C.

Enable GPS functionality to track the location of the mobile devices.

D.

Configure the devices so that removable media use is disabled.

 

Correct Answer: D

 

 

QUESTION 95

Identifying residual risk is MOST important to which of the following concepts?

 

A.

Risk deterrence

B.

Risk acceptance

C.

Risk mitigation

D.

Risk avoidance

 

Correct Answer: B

 

 

 

 

 

QUESTION 96

The information security technician wants to ensure security controls are deployed and functioning as intended to be able to maintain an appropriate security posture. Which of the following security techniques is MOST appropriate to do this?

 

A.

Log audits

B.

System hardening

C.

Use IPS/IDS

D.

Continuous security monitoring

 

Correct Answer: D

 

 

QUESTION 97

A small company can only afford to buy an all-in-one wireless router/switch. The company has 3 wireless BYOD users and 2 web servers without wireless access. Which of the following should the company configure to protect the servers from the user devices? (Select TWO).

 

A.

Deny incoming connections to the outside router interface.

B.

Change the default HTTP port

C.

Implement EAP-TLS to establish mutual authentication

D.

Disable the physical switch ports

E.

Create a server VLAN

F.

Create an ACL to access the server

 

Correct Answer: EF

 

 

QUESTION 98

Users can authenticate to a company’s web applications using their credentials from a p
opular social media site. Which of the following poses the greatest risk with this integration?

 

A.

Malicious users can exploit local corporate credentials with their social media credentials

B.

Changes to passwords on the social media site can be delayed from replicating to the company

C.

Data loss from the corporate servers can create legal liabilities with the social media site

D.

Password breaches to the social media site affect the company application as well

 

Correct Answer: D

 

 

QUESTION 99

A security team has established a security awareness program. Which of the following would BEST prove the success of the program?

 

A.

Policies

B.

Procedures

C.

Metrics

D.

Standards

 

Correct Answer: C

 

 

 

QUESTION 100

A company needs to receive data that contains personally identifiable information. The company requires both the transmission and data at rest to be encrypted. Which of the following achieves this goal? (Select TWO).

 

A.

SSH

B.

TFTP

C.

NTLM

D.

TKIP

E.

SMTP

F.

PGP/GPG

 

Correct Answer: AF

Free VCE & PDF File for CompTIA SY0-401 Real Exam

Instant Access to Free VCE Files: CompTIA | VMware | SAP …
Instant Access to Free PDF Files: CompTIA | VMware | SAP …

Comments are closed.