CompTIA SY0-401 - CompTIA Security+ Certification Exam
Page: 3 / 356
Total 1776 questions
Question #11 (Topic: Topic 1)
Which of the following network design elements allows for many internal devices to share
one public IP address?
one public IP address?
A. DNAT
B. PAT
C. DNS
D. DMZ
Answer: B
Question #12 (Topic: Topic 1)
A security administrator wishes to increase the security of the wireless network. Which of
the following BEST addresses this concern?
the following BEST addresses this concern?
A. Change the encryption from TKIP-based to CCMP-based.
B. Set all nearby access points to operate on the same channel.
C. Configure the access point to use WEP instead of WPA2.
D. Enable all access points to broadcast their SSIDs.
Answer: A
Question #13 (Topic: Topic 1)
Jane, the security administrator, sets up a new AP but realizes too many outsiders are able
to connect to that AP and gain unauthorized access. Which of the following would be the
BEST way to mitigate this issue and still provide coverage where needed? (Select TWO).
to connect to that AP and gain unauthorized access. Which of the following would be the
BEST way to mitigate this issue and still provide coverage where needed? (Select TWO).
A. Disable the wired ports
B. Use channels 1, 4 and 7 only
C. Enable MAC filtering
D. Disable SSID broadcast
E. Switch from 802.11a to 802.11b
Answer: C,D
Question #14 (Topic: Topic 1)
Which of the following is a best practice when securing a switch from physical access?
A. Disable unnecessary accounts
B. Print baseline configuration
C. Enable access lists
D. Disable unused ports
Answer: D
Question #15 (Topic: Topic 1)
Which of the following devices would MOST likely have a DMZ interface?
A. Firewall
B. Switch
C. Load balancer
D. Proxy
Answer: A
