2018 Jan CompTIA Official New Released SY0-401
100% Free Download! 100% Pass Guaranteed!

CompTIA Security Certification

Question No: 701 – (Topic 3)

A security manager must remain aware of the security posture of each system. Which of the following supports this requirement?

  1. Training staff on security policies

  2. Establishing baseline reporting

  3. Installing anti-malware software

  4. Disabling unnecessary accounts/services

Answer: B Explanation:

The IT baseline protection approach is a methodology to identify and implement computer security measures in an organization. The aim is the achievement of an adequate and appropriate level of security for IT systems. This is known as a baseline.

A baseline report compares the current status of network systems in terms of security updates, performance or other metrics to a predefined set of standards (the baseline).

Question No: 702 – (Topic 3)

Ann, a security analyst, is preparing for an upcoming security audit. To ensure that she identifies unapplied security controls and patches without attacking or compromising the system, Ann would use which of the following?

  1. Vulnerability scanning

  2. SQL injection

  3. Penetration testing

  4. Antivirus update

Answer: A Explanation:

A vulnerability scan is the process of scanning the network and/or I.T. infrastructure for threats and vulnerabilities. The threats and vulnerabilities are then evaluated in a risk assessment and the necessary actions taken to resolve and vulnerabilities. A vulnerability scan scans for known weaknesses such as missing patches or security updates.



Question No: 703 – (Topic 3)

A security administrator looking through IDS logs notices the following entry: (where email=joe@joe.com and passwd= ‘or 1==1’)

Which of the following attacks had the administrator discovered?

  1. SQL injection

  2. XML injection

  3. Cross-site script

  4. Header manipulation

Answer: A Explanation:



the database contents to the attacker). SQL injection must exploit a security vulnerability in an application#39;s software, for example, when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly executed. SQL injection is mostly known as an attack vector for websites but can be used to attack any type of SQL database.

Question No: 704 – (Topic 3)

Which of the following is a penetration testing method?

  1. Searching the WHOIS database for administrator contact information

  2. Running a port scanner against the target#39;s network

  3. War driving from a target#39;s parking lot to footprint the wireless network

  4. Calling the target#39;s helpdesk, requesting a password reset

Answer: D Explanation:

A penetration test is a proactive and authorized attempt to evaluate the security of an IT infrastructure by safely attempting to exploit system vulnerabilities, including OS, service and application flaws, improper configurations, and even risky end-user behavior. Such assessments are also useful in validating the efficacy of defensive mechanisms, as well as end-users’ adherence to security policies.

Penetration testing evaluates an organization’s ability to protect its networks, applications, endpoints and users from external or internal attempts to circumvent its security controls to gain unauthorized or privileged access to protected assets. Test results validate the risk posed by specific security vulnerabilities or flawed processes, enabling IT management and security professionals to prioritize remediation efforts. By embracing more frequent and comprehensive penetration testing, organizations can more effectively anticipate emerging security risks and prevent unauthorized access to critical systems and valuable information. Penetration tests are not always technically clever attempts to access a network. By calling the target#39;s helpdesk and requesting a password reset, if they reset the password without requiring proof that you are authorized to request a password change, you can easily gain access to the network.

Question No: 705 – (Topic 3)

A malicious individual is attempting to write too much data to an application’s memory. Which of the following describes this type of attack?

  1. Zero-day

  2. SQL injection

  3. Buffer overflow

  4. XSRF

Answer: C Explanation:



Question No: 706 – (Topic 3)

Joe, an employee is taking a taxi through a busy city and starts to receive unsolicited files sent to his Smartphone. Which of the following is this an example of?

  1. Vishing

  2. Bluejacking

  3. War Driving

  4. SPIM

  5. Bluesnarfing

Answer: B Explanation:


Bluetooth has a very limited range, usually around 10 metres (32.8 ft) on mobile phones, but laptops can reach up to 100 metres (328 ft) with powerful (Class 1) transmitters.

Bluejacking is usually harmless, but because bluejacked people generally don#39;t know what has happened, they may think that their phone is malfunctioning. Usually, a bluejacker will only send a text message, but with modern phones it#39;s possible to send images or sounds as well. Bluejacking has been used in guerrilla marketing campaigns to promote advergames.

Question No: 707 – (Topic 3)

During an anonymous penetration test, Jane, a system administrator, was able to identify a shared print spool directory, and was able to download a document from the spool. Which statement BEST describes her privileges?

  1. All users have write access to the directory.

  2. Jane has read access to the file.

  3. All users have read access to the file.

  4. Jane has read access to the directory.

Answer: C Explanation:

The question states that Jane was able to download a document from the spool directory. To view and download the document, Jane must have at least Read access to the file. The fact that the document belonged to someone else suggests that all users have read access to the file.

Question No: 708 – (Topic 3)


  1. Product baseline report

  2. Input validation

  3. Patch regression testing

  4. Code review

Answer: D Explanation:



Question No: 709 – (Topic 3)


  1. HIPS

  2. Antivirus

  3. NIDS

  4. ACL

Answer: A Explanation:





Question No: 710 – (Topic 3)

An attacker crafts a message that appears to be from a trusted source, but in reality it redirects the recipient to a malicious site where information is harvested. The message is narrowly tailored so it is effective on only a small number of victims. This describes which of the following?

  1. Spear phishing

  2. Phishing

  3. Smurf attack

  4. Vishing

Answer: A Explanation:


100% Free Download!
Download Free Demo:SY0-401 Demo PDF
100% Pass Guaranteed!
Download 2018 EnsurePass SY0-401 Full Exam PDF and VCE

EnsurePass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2018 EnsurePass IT Certification PDF and VCE