100% Exam Passing Guarantee & Money Back Assurance Pass CompTIA SY0-401 - CompTIA Security+ Certification exam in just 24 HOURS! 100% REAL EXAM QUESTIONS ANSWERS CompTIA SY0-401 - CompTIA Security+ Certification Buy Complete Questions Answers File from http://www.certs4you.com/comptia/sy0-401- dumps.html 100% Exam Passing Guarantee & Money Back Assurance Sample Questions
Question No 1: Answer: D Question No 2: Answer: C Question No 3: The security administrator at ABC company received the following log information from an external party: 10:45:01 EST, SRC 10.4.3.7:3056, DST 8.4.2.1:80, ALERT, Directory traversal 10:45:02 EST, SRC 10.4.3.7:3057, DST 8.4.2.1:80, ALERT, Account brute force 10:45:03 EST, SRC 10.4.3.7:3058, DST 8.4.2.1:80, ALERT, Port scan The external party is reporting attacks coming from abc-company.com. Which of the following is the reason the ABC company’s security administrator is unable to determine the origin of the attack? A NIDS was used in place of a NIPS. The log is not in UTC. The external party uses a firewall. ABC company uses PAT. Answer: D Question No 2: Which of the following firewall rules only denies DNS zone transfers? Deny udp any any port 53 Deny ip any any Deny tcp any any port 53 Deny all dns packets Answer: C Question No 3: A corporation is looking to expand their data center but has run out of physical space in which to store hardware. Which of the following would offer the ability to expand while keeping their current data center operated by internal staff? Virtualization Subnetting IaaS SaaS Answer: A
Answer: A, D, E Question No 5: Which of the following uses port 22 by default? (Select THREE). SSH SSL TLS SFTP SCP FTPS SMTP SNMP Answer: A, D, E Question No 5: The security administrator is currently unaware of an incident that occurred a week ago. Which of the following will ensure the administrator is notified in a timely manner in the future? User permissions reviews Incident response team Change management Routine auditing Answer: D Question No 6: Matt, a security consultant, has been tasked with increasing server fault tolerance and has been given no budget to accomplish his task. Which of the following can Matt implement to ensure servers will withstand hardware failure? Hardware load balancing RAID A cold site A host standby Answer: B Question No 7:
Answer: B, C Question No 10: A security administrator wants to perform routine tests on the network during working hours when certain applications are being accessed by the most people. Which of the following would allow the security administrator to test the lack of security controls for those applications with the least impact to the system? Penetration test Vulnerability scan Load testing Port scanner Answer: B Question No 8: A system administrator is using a packet sniffer to troubleshoot remote authentication. The administrator detects a device trying to communicate to TCP port 49. Which of the following authentication methods is MOST likely being attempted? RADIUS TACACS+ Kerberos LDAP Answer: B Question No 9: Which of the following ports should be opened on a firewall to allow for NetBIOS communication? (Select TWO). A. 110 B. 137 C. 139 D. 143 E. 161 F. 443 Answer: B, C Question No 10: Which of the following are examples of detective controls? Biometrics, motion sensors and mantraps. Audit, firewall, anti-virus and biometrics. Motion sensors, intruder alarm and audit
Intruder alarm, mantraps and firewall. Answer: C Buy Complete Questions Answers File from 100% Exam Passing Guarantee & Money Back Assurance PDF Version + Test Engine Software Version 90 Days Free Updates Service Valid for All Countries http://www.certs4you.com/comptia/sy0-401-dumps.html