20:00Min. left

PDF|

Guide for SY0-401: CompTIA Security+

Quiz SY0-401: CompTIA Security+

Updated on 2026/09/08

PDF|

Guide for SY0-401: CompTIA Security+

Updated on 2026/09/08

Randomized | 10 Questions per Test | 20 Minutes | 70% to pass

Learning Mode

Free Test

Question: / 10

20:00Min. left

Question: / 10

4.8

Quiz

Question 1/101/10

Sara, the security administrator, must configure the corporate firewall to allow all public IP addresses on
the internal interface of the firewall to be translated to one public IP address on the external interface of the
same firewall. Which of the following should Sara configure?

Select the answer:Select the answer

1 correct answer

PAT

NAP

DNAT

NAC

Explanation:
Port Address Translation (PAT), is an extension to network address translation (NAT) that permits multiple
devices on a local area network (LAN) to be mapped to a single public IP address. The goal of PAT is to
conserve IP addresses.
Most home networks use PAT. In such a scenario, the Internet Service Provider (ISP) assigns a single IP
address to the home network's router. When Computer X logs on the Internet, the router assigns the client
a port number, which is appended to the internal IP address. This, in effect, gives Computer X a unique
address. If Computer Z logs on the Internet at the same time, the router assigns it the same local IP
address with a different port number. Although both computers are sharing the same public IP address and
accessing the Internet at the same time, the router knows exactly which computer to send specific packets
to because each computer has a unique internal address.
Incorrect Answers:
B: NAP is a Microsoft technology for controlling network access of a computer host based on system
health of the host.
C: Destination network address translation (DNAT) is a technique for transparently changing the
destination IP address of an end route packet and performing the inverse function for any replies. Any
router situated between two endpoints can perform this transformation of the packet. DNAT is commonly
used to publish a service located in a private network on a publicly accessible IP address. This use of
DNAT is also called port forwarding. DNAT does not allow for many internal devices to share one public IP
address.
D: NAC is an approach to computer network security that attempts to unify endpoint security technology
(such as antivirus, host intrusion prevention, and vulnerability assessment), user or system authentication
and network security enforcement.
References:
http://searchnetworking.techtarget.com/definition/Port-Address-Translation-PAT
http://en.wikipedia.org/wiki/Network_Access_Protection
http://en.wikipedia.org/wiki/Network_address_translation#DNAT
http://en.wikipedia.org/wiki/Network_Access_Control

Right Answer: A

Quiz

Question 2/102/10

Which of the following devices is MOST likely being used when processing the following?
1 PERMIT IP ANY ANY EQ 80
2 DENY IP ANY ANY

Select the answer:Select the answer

1 correct answer

Firewall

NIPS

Load balancer

URL filter

Quiz

Question 3/103/10

The security administrator at ABC company received the following log information from an external party:
10:45:01 EST, SRC 10.4.3.7:3056, DST 8.4.2.1:80, ALERT, Directory traversal
10:45:02 EST, SRC 10.4.3.7:3057, DST 8.4.2.1:80, ALERT, Account brute force
10:45:03 EST, SRC 10.4.3.7:3058, DST 8.4.2.1:80, ALERT, Port scan
The external party is reporting attacks coming from abc-company.com. Which of the following is the reason
the ABC company’s security administrator is unable to determine the origin of the attack?

Select the answer:Select the answer

1 correct answer

A NIDS was used in place of a NIPS.

The log is not in UTC.

The external party uses a firewall.

ABC company uses PAT.

Quiz

Question 4/104/10

Which of the following security devices can be replicated on a Linux based computer using IP tables to
inspect and properly handle network based traffic?

Select the answer:Select the answer

1 correct answer

Sniffer

Router

Firewall

Switch

Quiz

Question 5/105/10

Which of the following firewall types inspects Ethernet traffic at the MOST levels of the OSI model?

Select the answer:Select the answer

1 correct answer

Packet Filter Firewall

Stateful Firewall

Proxy Firewall

Application Firewall

Quiz

Question 6/106/10

The Chief Information Security Officer (CISO) has mandated that all IT systems with credit card data
should be segregated from the main corporate network to prevent unauthorized access and that access to
the IT systems should be logged.
Which of the following would BEST meet the CISO’s requirements?

Select the answer:Select the answer

1 correct answer

Sniffers

NIDS

Firewalls

Web proxies

Layer 2 switches

Quiz

Question 7/107/10

Which of the following network design elements allows for many internal devices to share one public IP
address?

Select the answer:Select the answer

1 correct answer

DNAT

PAT

DNS

DMZ

Explanation:
Port Address Translation (PAT), is an extension to network address translation (NAT) that permits multiple
devices on a local area network (LAN) to be mapped to a single public IP address. The goal of PAT is to
conserve IP addresses.
Most home networks use PAT. In such a scenario, the Internet Service Provider (ISP) assigns a single IP
address to the home network's router. When Computer X logs on the Internet, the router assigns the client
a port number, which is appended to the internal IP address. This, in effect, gives Computer X a unique
address. If Computer Z logs on the Internet at the same time, the router assigns it the same local IP
address with a different port number. Although both computers are sharing the same public IP address and
accessing the Internet at the same time, the router knows exactly which computer to send specific packets
to because each computer has a unique internal address.
Incorrect Answers:
A: Destination network address translation (DNAT) is a technique for transparently changing the
destination IP address of an end route packet and performing the inverse function for any replies. Any
router situated between two endpoints can perform this transformation of the packet. DNAT is commonly
used to publish a service located in a private network on a publicly accessible IP address. This use of
DNAT is also called port forwarding. DNAT does not allow for many internal devices to share one public IP
address.
C: DNS (Domain Name System) is a service used to translate hostnames or URLs to IP addresses. DNS
does not allow for many internal devices to share one public IP address.
D: A DMZ or demilitarized zone is a physical or logical subnetwork that contains and exposes an
organization's external-facing services to a larger and untrusted network, usually the Internet. The purpose
of a DMZ is to add an additional layer of security to an organization's local area network (LAN); an external
network node only has direct access to equipment in the DMZ, rather than any other part of the network. A
DMZ does not allow for many internal devices to share one public IP address.
References:
http://searchnetworking.techtarget.com/definition/Port-Address-Translation-PAT
http://en.wikipedia.org/wiki/Network_address_translation#DNAT
http://en.wikipedia.org/wiki/Domain_Name_System
http://en.wikipedia.org/wiki/DMZ_(computing)

Right Answer: B

Quiz

Question 8/108/10

Which of the following is the best practice when securing a switch from physical access?

Select the answer:Select the answer

1 correct answer

Disable unnecessary accounts

Print baseline configuration

Enable access lists

Disable unused ports

Quiz

Question 9/109/10

Which of the following devices would be MOST useful to ensure availability when there are a large number
of requests to a certain website?

Select the answer:Select the answer

1 correct answer

Protocol analyzer

Load balancer

VPN concentrator

Web security gateway

Quiz

Question 10/1010/10

Pete, the system administrator, wishes to monitor and limit users’ access to external websites.
Which of the following would BEST address this?

Select the answer:Select the answer

1 correct answer

Block all traffic on port 80.

Implement NIDS.

Use server load balancers.

Install a proxy server.

Looking for more questions?Buy now

SY0-401: CompTIA Security+ Practice test unlocks all online simulator questions

Thank you for choosing the free version of the SY0-401: CompTIA Security+ practice test! Further deepen your knowledge on CompTIA Simulator; by unlocking the full version of our SY0-401: CompTIA Security+ Simulator you will be able to take tests with over 1778 constantly updated questions and easily pass your exam. 98% of people pass the exam in the first attempt after preparing with our 1778 questions.

BUY NOW

What to expect from our SY0-401: CompTIA Security+ practice tests and how to prepare for any exam?

The SY0-401: CompTIA Security+ Simulator Practice Tests are part of the CompTIA Database and are the best way to prepare for any SY0-401: CompTIA Security+ exam. The SY0-401: CompTIA Security+ practice tests consist of 1778 questions and are written by experts to help you and prepare you to pass the exam on the first attempt. The SY0-401: CompTIA Security+ database includes questions from previous and other exams, which means you will be able to practice simulating past and future questions. Preparation with SY0-401: CompTIA Security+ Simulator will also give you an idea of the time it will take to complete each section of the SY0-401: CompTIA Security+ practice test . It is important to note that the SY0-401: CompTIA Security+ Simulator does not replace the classic SY0-401: CompTIA Security+ study guides; however, the Simulator provides valuable insights into what to expect and how much work needs to be done to prepare for the SY0-401: CompTIA Security+ exam.

BUY NOW

SY0-401: CompTIA Security+ Practice test therefore represents an excellent tool to prepare for the actual exam together with our CompTIA practice test . Our SY0-401: CompTIA Security+ Simulator will help you assess your level of preparation and understand your strengths and weaknesses. Below you can read all the quizzes you will find in our SY0-401: CompTIA Security+ Simulator and how our unique SY0-401: CompTIA Security+ Database made up of real questions:

Info quiz:

Quiz name:SY0-401: CompTIA Security+
Total number of questions:1778
Number of questions for the test:50
Pass score:80%

You can prepare for the SY0-401: CompTIA Security+ exams with our mobile app. It is very easy to use and even works offline in case of network failure, with all the functions you need to study and practice with our SY0-401: CompTIA Security+ Simulator.

Use our Mobile App, available for both Android and iOS devices, with our SY0-401: CompTIA Security+ Simulator . You can use it anywhere and always remember that our mobile app is free and available on all stores.

Our Mobile App contains all SY0-401: CompTIA Security+ practice tests which consist of 1778 questions and also provide study material to pass the final SY0-401: CompTIA Security+ exam with guaranteed success. Our SY0-401: CompTIA Security+ database contain hundreds of questions and CompTIA Tests related to SY0-401: CompTIA Security+ Exam. This way you can practice anywhere you want, even offline without the internet.

BUY NOW

Quiz SY0-401: CompTIA Security+

Free Test - Simulator SY0-401: CompTIA Security+

SY0-401: CompTIA Security+ Practice test unlocks all online simulator questions

What to expect from our SY0-401: CompTIA Security+ practice tests and how to prepare for any exam?