SY0-401

sy0-401

Exit

Question 1 of 1

Time Left

122332

block

Which one of the following is a holding area between two entry points that gives security personnel time to view a person before allowing him into the internal building?

Select the correct answer(s).

(0/0)

122333

none

The new biometric authentication system has been identified as having a high FAR. What does this mean?

Select the correct answer(s).

(0/0)

122334

none

Which one of the following best identifies the system of digital certificates and certification authorities used in public key technology?

Select the correct answer(s).

(0/0)

122335

none

Which of the following is not an example of the principles of influence used in social engineering attacks?

Select the correct answer(s).

(0/0)

122336

none

Your organization provides a secure Web portal. You discover another portal that mimics your organization's portal look and feel. This portal has a similar URL, but is different by one letter. Which of the following are most likely true? (Select two correct answers.)

Select the correct answer(s).

(0/0)

122337

none

Your organization is exploring data-loss prevention (DLP) solutions. The proposed solution is an endpoint solution. This solution is targeting which of the following data states?

Select the correct answer(s).

(0/0)

Explanation

Protection of data in-use is considered to be an endpoint solution and the application is run on end-user workstations or servers in the organization. In-Transit is incorrect because protection of data in-transit is considered to be a network solution an

122338

none

Which of the following types of attacks can be done by either convincing the users to click on an HTML page the attacker has constructed or insert arbitrary HTML in a target website that the users visit?

Select the correct answer(s).

(0/0)

Explanation

The key element to understand XSRF is that attackers are betting that users have a validated login cookie for the website already stored in their browsers. All they need to do is get the browsers to make a request to the website on their behalf. This ca

122339

none

Security Guards are a form of which specific type of control?

Select the correct answer(s).

(0/0)

122340

none

Which is the best rule-based control constraint to protect against unauthorized access when admins are off-duty?

Select the correct answer(s).

(0/0)

122341

none

Several organizational users are experiencing network and Internet connectivity issues. Which of the following would be most helpful in troubleshooting where the connectivity problems might exist?

Select the correct answer(s).

(0/0)

122342

none

The process of making an operating system more secure by closing known vulnerabilities and addressing security issues is known as which of the following?

Select the correct answer(s).

(0/0)

Explanation

Hardening refers to the process of securing an operating system. Handshaking relates the agreement process before communication takes place. A hotfix is just a security patch that gets applied to an operating system.

122343

none

Which of the following is not a certificate trust model for arranging of certificate authorities?

Select the correct answer(s).

(0/0)

Explanation

Sub-CA architecture does not represent a valid trust model. All the other ones represent legitimate trust models. Another common model also exists, called cross-certification; however, it usually makes more sense to implement a bridge architecture over

122344

none

Which of the follow describes a network of systems designed to lure an attacker away from another critical system?

Select the correct answer(s).

(0/0)

Explanation

Honeynets are collection of honeypot systems interconnected to create networks that appear to be functional and that can be used to study an attacker's behavior within the network. A bastion host is the first line of security that a company allows to be

122345

none

Which of the following standards ensures privacy between communicating applications and clients on the web has been designed to replace SSL?

Select the correct answer(s).

(0/0)

122346

none

A new switch has been implemented in areas where there is very little physical access control. Which of the following would the organization implement as a method for additional checks to prevent unauthorized access?

Select the correct answer(s).

(0/0)

Explanation

Port security is a Layer 2 traffic control feature on Cisco Catalyst switches. It enables individual switch ports to be configured to allow only a specified number of source MAC addresses coming in through the port. Loop protection is incorrect because

SY0-401

Question 1 of 1

Time Left

Which one of the following is a holding area between two entry points that gives security personnel time to view a person before allowing him into the internal building?

Select the correct answer(s).

(0/0)

The new biometric authentication system has been identified as having a high FAR. What does this mean?

Select the correct answer(s).

(0/0)

Which one of the following best identifies the system of digital certificates and certification authorities used in public key technology?

Select the correct answer(s).

(0/0)

Which of the following is not an example of the principles of influence used in social engineering attacks?

Select the correct answer(s).

(0/0)

Your organization provides a secure Web portal. You discover another portal that mimics your organization's portal look and feel. This portal has a similar URL, but is different by one letter. Which of the following are most likely true? (Select two correct answers.)

Select the correct answer(s).

(0/0)

Your organization is exploring data-loss prevention (DLP) solutions. The proposed solution is an endpoint solution. This solution is targeting which of the following data states?

Select the correct answer(s).

(0/0)

Explanation

Which of the following types of attacks can be done by either convincing the users to click on an HTML page the attacker has constructed or insert arbitrary HTML in a target website that the users visit?

Select the correct answer(s).

(0/0)

Explanation

Security Guards are a form of which specific type of control?

Select the correct answer(s).

(0/0)

Which is the best rule-based control constraint to protect against unauthorized access when admins are off-duty?

Select the correct answer(s).

(0/0)

Several organizational users are experiencing network and Internet connectivity issues. Which of the following would be most helpful in troubleshooting where the connectivity problems might exist?

Select the correct answer(s).

(0/0)

The process of making an operating system more secure by closing known vulnerabilities and addressing security issues is known as which of the following?

Select the correct answer(s).

(0/0)

Explanation

Which of the following is not a certificate trust model for arranging of certificate authorities?

Select the correct answer(s).

(0/0)

Explanation

Which of the follow describes a network of systems designed to lure an attacker away from another critical system?

Select the correct answer(s).

(0/0)

Explanation

Which of the following standards ensures privacy between communicating applications and clients on the web has been designed to replace SSL?

Select the correct answer(s).

(0/0)

A new switch has been implemented in areas where there is very little physical access control. Which of the following would the organization implement as a method for additional checks to prevent unauthorized access?

Select the correct answer(s).

(0/0)

Explanation

Results

Correct

0

Incorrect

0

Skipped

0

Overall Percentage

0%

Rate Quiz