CompTIA SY0-401 Prüfung Übungen und Antworten

The CompTIA Security+ Certification is aimed at an IT security professional who has:
> A minimum of 2 years experience in IT administration with a focus on security
> Day to day technical information security experience
> Broad knowledge of security concerns and implementation including the topics in the domain list below

SY0-401 Domain | % of Examination
1.0 Network Security 20%
2.0 Compliance and Operational Security 18%
3.0 Threats and Vulnerabilities 20%
4.0 Application, Data and Host Security 15%
5.0 Access Control and Identity Management 15%
6.0 Cryptography 12%
SY0-401 Fragenpool : http://www.it-pruefungen.biz/sy0-401-pr%c3%bcfungsunterlagen%2c-sy0-401-echte-fragen-2580.html
NO.1 Which of the following should a security technician implement to identify untrusted
certificates?
A. CA
B. PKI
C. CRL
D. Recovery agent
Answer: C

CompTIA Fragenpool SY0-401 SY0-401 PDF Testsoftware
Explanation:
Untrusted certificates and keys are revoked and put into the CRL. Note: The CRL (Certificate
revocation list) is exactly what its name implies: a list of subscribers paired with digital certificate
status. The list enumerates revoked certificates along with the reason(s) for revocation. The dates of
certificate issue, and the entities that issued them, are also included.

NO.2 Which of the following firewall rules only denies DNS zone transfers?
A. deny udp any any port 53
B. deny ip any any
C. deny tcp any any port 53
D. deny all dns packets
Answer: C

CompTIA prüfungsvorbereitung SY0-401 prüfungsvorbereitung SY0-401 SY0-401 fragen und antworten SY0-401 Zertifizierungsprüfung SY0-401 zertifizierungsantworten
Explanation:
DNS operates over TCP and UDP port 53. TCP port 53 is used for zone transfers.

NO.3 One of the most consistently reported software security vulnerabilities that leads to major
exploits is:
A. Lack of malware detection.
B. Attack surface decrease.
C. Inadequate network hardening.
D. Poor input validation.
Answer: D

CompTIA zertifizierungsantworten SY0-401 Fragenpool SY0-401 online prüfungen
Explanation:
D: With coding there are standards that should be observed. Of these standards the most
fundamental is input validation. Attacks such as SQL injection depend on unfiltered input being sent
through a web application. This makes for a software vulnerability that can be exploited. There are
two primary ways to do input validation: client-side validation and server-side validation. Thus with
poor input validation you increase your risk with regard to exposure to major software exploits.

NO.4 Which of the following is a programming interface that allows a remote computer to run
programs on a local machine?
A. RPC
B. RSH
C. SSH
D. SSL
Answer: A

CompTIA testantworten SY0-401 Antworten SY0-401 prüfungsunterlagen SY0-401 prüfung
Explanation:
Remote Procedure Call (RPC) is a programming interface that allows a remote computer to run
programs on a local machine.

NO.5 RADIUS provides which of the following?
A. Authentication, Authorization, Availability
B. Authentication, Authorization, Auditing
C. Authentication, Accounting, Auditing
D. Authentication, Authorization, Accounting
Answer: D

CompTIA Prüfungsfragen SY0-401 SY0-401 testking SY0-401 zertifizierung
Explanation:
The Remote Authentication Dial In User Service (RADIUS) networking protocol offers centralized
Authentication, Authorization, and Accounting (AAA) management for users who make use of a
network service. It is for this reason that A, B, and C: are incorrect.
References: http://en.wikipedia.org/wiki/RADIUS

NO.6 Pete, a security auditor, has detected clear text passwords between the RADIUS server and the
authenticator. Which of the following is configured in the RADIUS server and what technologies
should the authentication protocol be changed to?
A. PAP, MSCHAPv2
B. CHAP, PAP
C. MSCHAPv2, NTLMv2
D. NTLM, NTLMv2
Answer: A

CompTIA SY0-401 SY0-401
Explanation:
PAP transmits the username and password to the authentication server in plain text. MSCHAPv2 is
utilized as an authentication option for RADIUS servers that are used for Wi-Fi security using the
WPA-Enterprise protocol.

NO.7 Jane, an IT security technician, needs to create a way to secure company mobile devices. Which
of the following BEST meets this need?
A. Implement voice encryption, pop-up blockers, and host-based firewalls.
B. Implement firewalls, network access control, and strong passwords.
C. Implement screen locks, device encryption, and remote wipe capabilities.
D. Implement application patch management, antivirus, and locking cabinets.
Answer: C

CompTIA Prüfungsunterlagen SY0-401 zertifizierung SY0-401 Fragenkatalog SY0-401 testking
Explanation:
Screen-lock is a security feature that requires the user to enter a password after a short period of
inactivity before they can access the system again. This feature ensures that if your device is left
unattended or is lost or stolen, it will be difficult for anyone else to access your data or applications.
Device encryption encrypts the data on the device. This feature ensures that the data on the device
cannot be accessed in a useable form should the device be stolen. Remote wipe is the process of
deleting data on a device in the event that the device is stolen. This is performed over remote
connections such as the mobile phone service or the internet connection and helps ensure that
sensitive data is not accessed by unauthorized people.

NO.8 Which of the following transportation encryption protocols should be used to ensure maximum
security between a web browser and a web server?
A. SSLv2
B. SSHv1
C. RSA
D. TLS
Answer: D

CompTIA originale Fragen SY0-401 prüfungsvorbereitung SY0-401 Prüfungsunterlagen SY0-401
Explanation:
HTTP Secure HTTP Secure (HTTPS) is the protocol used for "secure" web pages that users should see
when they must enter personal information such as credit card numbers, passwords, and other
identifiers. It combines HTTP with SSL/TLS to provide encrypted communication. Transport Layer
Security (TLS) is a security protocol that expands upon SSL. Many industry analysts predict that TLS
will replace SSL, and it is also referred to as SSL 3.1.

Es ist unnötig für Sie, zu viel Zeit eine Prüfung vorzubereiten. Kaufen Sie bitte CompTIA SY0-401 dumps von ZertPruefung. Mit diesen dumps können Sie wissen, wie dise Prüfung hocheffektiv vorzubereiten. Das ist ein seltenes Gerät, das Ihnen helfen, sehr einfach diese Prüfung zu bestehen. Sie werden bereuen, dass Sie diese Chance verlieren. So handeln Sie bitte schnell damit.
Die CompTIA SY0-401-Prüfung sind jedem IT-Fachmann sehr wichtig. Solange Sie das Zertifikat bekommen, werden Sie im Beruf sicher nicht aussondert. Die Schulungsunterlagen zur CompTIA SY0-401-Prüfung von ZertPruefung sind die Ressourcen zum Erfolg. Mit diesen Schulungsmaterialien werden Sie den Schritt zum Erfolg beschleunigen. Sie werden sicher mehr selbstbewusster.

Exam Code: SY0-401
Prüfungsname: CompTIA Security+ Certification
Aktulisiert: 16-08-2015, SY0-401 prüfungsfrage
Nummer: 1150 Q&As

SY0-401 Zertifizierungsfragen : SY0-401 prüfungsfrage

ZertPruefung bietet Ihnen die neusten PR000041 exam Unterlagen und M2070-644 pdf Fragen & Antworten mit hoher Qualität. Unser E20-545 zertifizierung und C2040-405 prüfung Lernführung können Ihnen hilfen, die aktuellen Prüfungen zu bestehen. Hochqualitative HP0-J62 dumps Training Unterlagen können Ihnen gewährleisten, leichter und schneller, diese Prüfung zu bestehen. Es ist sehr einfach für Sie, die Zertifizierung zu bekommen.

Artikel Link: http://www.zertpruefung.ch/SY0-401_exam.html