CompTIA CompTIA Certifications DS0-001 Questions & Answers

• Question 41:

  Which of the following is a result of an on-path attack on a system?

  A. A Wi-Fi networkthat redirects to clones of legitimate websites

  B. A website that has crashed and is no longer accessible

  C. An email from an unknown source requesting bank account details

  D. A web application that returns the addresses of its customers

  Correct Answer: A

  A result of an on-path attack on a system is a Wi-Fi network that redirects to clones of legitimate websites. An on-path attack is a type of attack that intercepts and modifies the traffic between two parties without their knowledge or consent. An attacker can use an on-path attack to create a rogue Wi-Fi network that mimics a legitimate one, and then redirect the users to fake websites that look like the ones they intended to visit. The attacker can then steal the users' personal or financial information, such as usernames, passwords, credit card numbers, or bank account details. The other options are either results of different types of attacks or not related to attacks at all. For example, a website that has crashed and is no longer accessible may be a result of a denial-of-service attack, an email from an unknown source requesting bank account details may be a result of a phishing attack, and a web application that returns the addresses of its customers may be a result of a poor design or a data breach. References: CompTIA DataSys+ Course Outline, Domain 4.0 Data and Database Security, Objective 4.4 Given a scenario, identify common types of attacks against databases.

• Question 42:

  A programmer wants to configure a database to only allow read or write access when requests are coming from specific IP addresses. Which of the following can be used to configure IP addresses to allow access to the database?

  A. Static IP address

  B. Firewall

  C. Dynamic IP address

  D. IDNS

  Correct Answer: B

  The best option to configure IP addresses to allow access to the database is a firewall. A firewall is a network device or software that controls the incoming and outgoing traffic based on a set of rules or policies. A firewall can be used to filter the traffic by IP addresses, ports, protocols, or other criteria, and allow or deny access to the database accordingly. The other options are either not relevant or not sufficient for this task. For example, a static IP address is an IP address that does not change over time, but it does not determine the access to the database; a dynamic IP address is an IP address that changes periodically, but it does not control the traffic to the database; an IDNS is an Internet Domain Name System, which translates domain names into IP addresses, but it does not regulate the access to the database. References: CompTIA DataSys+ Course Outline, Domain 4.0 Data and Database Security, Objective 4.2 Given a scenario, implement security controls for databases.

• Question 43:

  Which of the following is thebestway to migrate a large data load from one table to another, considering total time and blocking?

  A. Split the load size into many transactions.

  B. Split the load size in half and run simultaneously.

  C. Batch into small loads and run in parallel.

  D. Batch large loads into one transaction.

  Correct Answer: C

  The best way to migrate a large data load from one table to another, considering total time and blocking, is to batch into small loads and run in parallel. This means that the large data load is divided into smaller chunks that can be processed simultaneously by multiple threads or processes. This reduces the total time required for the migration and also minimizes the blocking of other operations on the tables involved. The other options are either less efficient or more prone to blocking. For example, splitting the load size into many transactions may increase the overhead and latency of each transaction; splitting the load size in half and running simultaneously may still cause blocking or contention; batching large loads into one transaction may take longer and lock the tables for longer periods. References: CompTIA DataSys+ Course Outline, Domain 3.0 Database Management and Maintenance, Objective 3.3 Given a scenario, migrate data between databases.

• Question 44:

  Which of the following is a potential issue raised by enterprise database users?

  A. The need for multiple views or windows into the same database

  B. The need to manage long transactions

  C. The need for concurrent access and multiuser updates

  D. The need to manually transfer records to paper

  Correct Answer: C

  A potential issue raised by enterprise database users is the need for concurrent access and multiuser updates. Concurrent access means that multiple users can access the same data at the same time, while multiuser updates mean that multiple users can modify the same data at the same time. These features are essential for enterprise database users who need to share and collaborate on data in real time. However, they also pose challenges such as maintaining data consistency, preventing conflicts or errors, and ensuring transaction isolation and durability. The other options are either not issues or not specific to enterprise database users.For example, the need for multiple views or windows into the same database may be a preference or a convenience, but not an issue; the need to manage long transactions may be a challenge for any database user, not just enterprise ones; the need to manually transfer records to paper may be an outdated or inefficient practice, but not an issue. References: CompTIA DataSys+ Course Outline, Domain 1.0 Database Fundamentals, Objective 1.3 Given a scenario, identify common database issues.

• Question 45:

  Which of the following firewall types allows an administrator to control traffic and make decisions based on factors such as connection information and data flow communications?

  A. Circuit-level

  B. Stateful

  C. Proxy

  D. Packet

  Correct Answer: B

  The firewall type that allows an administrator to control traffic and make decisions based on factors such as connection information and data flow communications is stateful. A stateful firewall is a type of firewall that tracks the state of each connection and packet that passes through it, and applies rules or policies based on the context and content of the traffic. A stateful firewall can control traffic and make decisions based on factors such as source and destination IP addresses, ports, protocols, session status, application layer data, etc. The other options are either different types of firewalls or not related to firewalls at all. For example, a circuit-level firewall is a type of firewall that monitors and validates the establishment of TCP or UDP connections; a proxy firewall is a type of firewall that acts as an intermediary between the source and destination of the traffic; a packet firewall is a type of firewall that filters packets based on their header information. References: CompTIA DataSys+ Course Outline, Domain 4.0 Data and Database Security, Objective 4.2 Given a scenario, implement security controls for databases.

• Question 46:

  Which of the following concepts applies to situations that require court files to be scanned for permanent reference and original documents be stored for ten years before they can be discarded?

  A. Data loss prevention

  B. Data retention policies

  C. Data classification

  D. Global regulations

  Correct Answer: B

  The concept that applies to situations that require court files to be scanned for permanent reference and original documents be stored for ten years before they can be discarded is data retention policies. Data retention policies are rules or guidelines that specify how long data should be kept and when it should be deleted or archived. Data retention policies are often based on legal, regulatory, or business requirements, and help organizations manage their data lifecycle, storage, and compliance. The other options are either not related or not specific to this situation. For example, data loss prevention is a process that aims to prevent data from being leaked, stolen, or corrupted; data classification is a process that assigns labels or categories to data based on its sensitivity, value, or risk; global regulations are laws or standards that apply to data across different countries or regions. References: CompTIA DataSys+ Course Outline, Domain 4.0 Data and Database Security, Objective 4.1 Given a scenario, apply security principles and best practices for databases.

• Question 47:

  A company needs information about the performance of users in the sales department. Which of the following commands should a database administrator use for this task?

  A. DROP

  B. InPDATE

  C. [delete

  D. ISELECT

  Correct Answer: D

  The command that the database administrator should use for this task is SELECT. The SELECT command is a SQL statement that retrieves data from one or more tables or views in a database. The SELECT command can also use various clauses or options to filter, group, sort, or aggregate data according to specific criteria or conditions. By using the SELECT command, the database administrator can obtain information about the performance of users in the sales department, such as their sales volume, revenue, commission, etc. The other options are either not related or not suitable for this task. For example, DROP is a SQL command that deletes an existing table or object from a database; UPDATE is a SQL command that modifies existing data in one or more rows of a table; DELETE is a SQL command that removes existing data from one or more rows of a table. References: CompTIA DataSys+ Course Outline, Domain 1.0 Database

  Fundamentals, Objective 1.2 Given a scenario, execute database tasks using scripting and programming languages.

• Question 48:

  Which of the following database instances are created by default when SQL Server is installed? (Choose two.)

  A. Root

  B. Master

  C. Log

  D. Model

  E. View

  F. Index

  Correct Answer: BD

  The two database instances that are created by default when SQL Server is installed are master and model. Master is a system database that contains the information and settings of the SQL Server instance, such as the configuration, logins, endpoints, databases, etc. Master is essential for the operation and management of the SQL Server instance, and it should be backed up regularly. Model is a system database that serves as a template for creating new user databases. Model contains the default settings and objects, such as tables, views, procedures, etc., that will be inherited by the new user databases. Model can be modified to customize the new user databases according to specific needs or preferences. The other options are either not database instances or not created by default when SQL Server is installed. For example, root is not a database instance, but a term that refers to the highest level of access or privilege in a system; log is not a database instance, but a file that records the changes made by transactions on a database; view is not a database instance, but an object that represents a subset or a combination of data from one or more tables; index is not a database instance, but a data structure that stores the values of one or more columns of a table in a sorted order. References: CompTIA DataSys+ Course Outline, Domain 2.0 Database Deployment, Objective 2.3 Given a scenario, update database systems.

• Question 49:

  A database administrator has been asked to assign a user the ability to view a data set. Which of the following practices best describes this request?

  A. Access control

  B. Security audit

  C. Database audit

  D. Password policy implementation

  Correct Answer: A

  The practice that best describes this request is access control. Access control is a process that regulates who can access what data in a system based on predefined rules or policies. Access control helps protect data from unauthorized or inappropriate access or modification bygranting or denying permissions or privileges to users or groups based on their roles or identities. By applying access control, the database administrator can assign a user the ability to view a data set without allowing them to change or delete it. The other options are either different practices or not related to this request. For example, security audit is a process that evaluates the security level of a system by identifying vulnerabilities or risks; database audit is a process that monitors and records the activities or events that occur on a database; password policy implementation is a process that defines and enforces rules or standards for creating and managing passwords. References: CompTIA DataSys+ Course Outline, Domain 4.0 Data and Database Security, Objective 4.2 Given a scenario, implement security controls for databases.

• Question 50:

  A company wants to deploy a new application that will distribute the workload to five different database instances. The database administrator needs to ensure that, for each copy of the database, users are able to read and write data that will be synchronized across all of the instances.

  Which of the following should the administrator use to achieve this objective?

  A. [Peer-to-peer replication

  B. Failover clustering

  C. Log shipping

  D. Availability groups

  Correct Answer: A

  The administrator should use peer-to-peer replication to achieve this objective. Peer-to-peer replication is a type of replication that allows data to be distributed across multiple database instances that are equal partners, or peers. Each peer can read and write data that will be synchronized across all peers. This provides high availability, scalability, and load balancing for the application. The other options are either not suitable for this scenario or do not support bidirectional data synchronization. For example, failover clustering provides high availability but does not distribute the workload across multiple instances; log shipping provides disaster recovery but does not allow writing data to secondary instances; availability groups provide high availability and read-only access to secondary replicas but do not support peer-to-peer replication. References: CompTIA DataSys+ Course Outline, Domain 5.0 Business Continuity, Objective 5.3 Given a scenario, implement replication of database management systems.