CompTIA CompTIA Security+ JK0-022 Questions & Answers

• Question 411:

  Visitors entering a building are required to close the back door before the front door of the same entry room is open. Which of the following is being described?

  A. Tailgating

  B. Fencing

  C. Screening

  D. Mantrap

  Correct Answer: D

  Mantraps are designed to contain an unauthorized, potentially hostile person/individual physically until authorities arrive. Mantraps are typically manufactured with bulletproof glass, high-strength doors, and locks and to allow the minimal

  amount of individuals depending on its size. Some mantraps even include scales that will weigh the person. The doors are designed in such a way as to open only when the mantrap is occupied or empty and not in-between. This means that

  the backdoor must first close before the front door will open; exactly what is required in this scenario.

  Incorrect Answers:

  A: Tailgating is the term used for someone being so close to you when you enter a building that they are able to come in right behind you without needing to use a key, a card, or any other security device.

  B: Fencing is perimeter security to keep unauthorized people off your premises.

  C: Screening does not necessitate people to close or open doors.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 371

• Question 412:

  Pete, an IT Administrator, needs to secure his server room. Which of the following mitigation methods would provide the MOST physical protection?

  A. Sign in and sign out logs

  B. Mantrap

  C. Video surveillance

  D. HVAC

  Correct Answer: B

  Mantraps are designed to contain an unauthorized, potentially hostile person/individual physically until authorities arrive. Mantraps are typically manufactured with bulletproof glass, high-strength doors, and locks and to allow the minimal amount of individuals depending on its size. Some mantraps even include scales that will weigh the person. The doors are designed in such a way as to open only when the mantrap is occupied or empty and not in-between. This means that

  the backdoor must first close before the front door will open. Mantraps are in most cases also combined with guards. This is the most physical protection any one measure will provide.

  Incorrect Answers:

  A: Sign in and sign out logs is not the most physical of access control measures to be employed.

  C: Video surveillance includes the use of a camera and implies the recording of events to gather as evidence - not a physical method.

  D: HVAC is used to control the physical environment factors such as heating, ventilation and air conditioning.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 371

• Question 413:

  A company is trying to implement physical deterrent controls to improve the overall security posture of their data center. Which of the following BEST meets their goal?

  A. Visitor logs

  B. Firewall

  C. Hardware locks

  D. Environmental monitoring

  Correct Answer: C

  Hardware security involves applying physical security modifications to secure the system(s) and preventing them from leaving the facility. Don't spend all of your time worrying about intruders coming through the network wire while overlooking the obvious need for physical security. Hardware security involves the use of locks to prevent someone from picking up and carrying out your equipment.

  Incorrect Answers:

  A: Visitor logs will only allow you to check access to the premises and not safeguard against those visitors that may carry equipment off the premises.

  B: A firewall will only safeguard your network from intruders over the network/wired or wireless.

  D: Environmental monitoring concerns safeguarding against events such as ware and flood damage, temperature and humidity control, fire warnings, etc.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 369-370

• Question 414:

  A malicious person gained access to a datacenter by ripping the proximity badge reader off the wall near the datacenter entrance. This caused the electronic locks on the datacenter door to release because the:

  A. badge reader was improperly installed.

  B. system was designed to fail open for life-safety.

  C. system was installed in a fail closed configuration.

  D. system used magnetic locks and the locks became demagnetized.

  Correct Answer: B

  It describes a design the lock to fail open for life safety, causing the door to stay open when power is lost - in this case the proximity badge reader was ripped off the wall.

  Incorrect Answers:

  A: Upon use of the proximity reader and granting access to the room it can be assumed that installation was correct.

  C: A fail-close design will keep the lock engaged.

  D: The question mentions that the proximity reader was ripped off the entrance wall and not magnetic locks that became demagnetized.

  References:

  http://www.nortechcontrol.com/access-control/what-is-access-control/access-control-in- education/what-are-proximity-readers.aspx Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis,

  2014, p 367 http://en.wikipedia.org/wiki/Fail-safe

• Question 415:

  A technician is investigating intermittent switch degradation. The issue only seems to occur when the building's roof air conditioning system runs. Which of the following would reduce the connectivity issues?

  A. Adding a heat deflector

  B. Redundant HVAC systems

  C. Shielding

  D. Add a wireless network

  Correct Answer: C

  EMI can cause circuit overload, spikes, or even electrical component failure. In the question it is mentioned that switch degradation occurs when the building's roof air-conditioning system is also running. All electromechanical systems emanate EMI. Thus you could alleviate the problem using EMI shielding.

  Incorrect Answers:

  A: A heat deflector will add to more EMI emanation since it is also an electromechanical system.

  B: Redundant HVAC systems will not reduce the connectivity issues.

  D: Adding a wireless network means more work for the switch and not really addressing the issue of the switch that requires EMI shielding.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 380

• Question 416:

  The datacenter manager is reviewing a problem with a humidity factor that is too low. Which of the following environmental problems may occur?

  A. EMI emanations

  B. Static electricity

  C. Condensation

  D. Dry-pipe fire suppression

  Correct Answer: B

  Humidity control prevents the buildup of static electricity in the environment. If the humidity drops much below 50 percent, electronic components are extremely vulnerable to damage from electrostatic shock.

  Incorrect Answers:

  A: EMI emanations are a result of failed shielding not low humidity.

  C: Condensation is a result of a failed HVAC system

  D: Dry-pipe fire suppression refers to results when using either fire extinguishers or preventing fires.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 383

• Question 417:

  Which of the following results in datacenters with failed humidity controls? (Select TWO).

  A. Excessive EMI

  B. Electrostatic charge

  C. Improper ventilation

  D. Condensation

  E. Irregular temperature

  Correct Answer: BD

  Humidity control prevents the buildup of static electricity in the environment. If the humidity drops much below 50 percent, electronic components are extremely vulnerable to damage from electrostatic shock. Most environmental systems also regulate humidity; however, a malfunctioning system can cause the humidity to be almost entirely extracted from a room. Make sure that environmental systems are regularly serviced. Electrostatic damage can occur when humidity levels get too low. Condensation is a direct result from failed humidity levels.

  Incorrect Answers:

  A: Excessive EMI is resultant of failed EMI shielding.

  C: Improper ventilation would be the result of failed HVAC system.

  E: Irregular temperature would be resultant from failed temperature controls which is part of HVAC system.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 383

• Question 418:

  Which of the following is an effective way to ensure the BEST temperature for all equipment within a datacenter?

  A. Fire suppression

  B. Raised floor implementation

  C. EMI shielding

  D. Hot or cool aisle containment

  Correct Answer: D

  There are often multiple rows of servers located in racks in server rooms. The rows of servers are known as aisles, and they can be cooled as hot aisles and cold aisles. With a hot aisle, hot air outlets are used to cool the equipment, whereas with cold aisles, cold air intake is used to cool the equipment. Combining the two, you have cold air intake from below the aisle and hot air outtake above it, providing constant circulation. This is a more effective way of controlling temperature to safeguard your equipment in a data center.

  Incorrect Answers:

  A: Fire suppression, as part of computer center design, refers to the act of extinguishing fire vs preventing a fire.

  B: Raised floor implementation is done as part of a hot and cold aisle implementation where the cold air used by the air handles is obtained from beneath the raised floor.

  C: EMI shielding means that a computer system does not emit any significant amounts of EMI or RFI, or be susceptible to fall victim to EMI or RFI attacks.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 382

• Question 419:

  The datacenter design team is implementing a system, which requires all servers installed in racks to face in a predetermined direction. AN infrared camera will be used to verify that servers are properly racked. Which of the following datacenter elements is being designed?

  A. Hot and cold aisles

  B. Humidity control

  C. HVAC system

  D. EMI shielding

  Correct Answer: A

  There are often multiple rows of servers located in racks in server rooms. The rows of servers are known as aisles, and they can be cooled as hot aisles and cold aisles. With a hot aisle, hot air outlets are used to cool the equipment, whereas with cold aisles, cold air intake is used to cool the equipment. Combining the two, you have cold air intake from below the aisle and hot air outtake above it, providing constant circulation. Infrared cameras are heat detection measures thus it is hot and cold aisle design elements.

  Incorrect Answers:

  B: Humidity control is part of the HVAC system to provide reliable service that is required in a server room

  C: HVAC system is used to control heating, ventilation and air conditioning in the server room and not just the heat detection required for hot and cold aisle design elements.

  D: EMI shielding refers to the process of preventing electronic emissions from your computer systems from being used to gather intelligence and preventing outside electronic emissions from disrupting your information-processing abilities.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 380, 382

• Question 420:

  When a new network drop was installed, the cable was run across several fluorescent lights. The users of the new network drop experience intermittent connectivity. Which of the following environmental controls was MOST likely overlooked during installation?

  A. Humidity sensors

  B. EMI shielding

  C. Channel interference

  D. Cable kinking

  Correct Answer: B

  Shielding refers to the process of preventing electronic emissions from your computer systems from being used to gather intelligence and preventing outside electronic emissions from disrupting your information-processing abilities. In this case you are experiencing intermittent connectivity since Electro Magnetic Interference (EMI) was not taken into account when running the cables over fluorescent lighting.

  Incorrect Answers:

  A: Humidity sensors are used to control and monitor humidity. Humidity control prevents the buildup of static electricity in the environment and can result in electronic components being vulnerable to damage from electrical shock and not

  intermittent connectivity issues as is the case in this scenario.

  C: Channel interference is not applicable here, rather it is a matter of interference from electromagnetic nature.

  D: Cable Kinking is not the issue here because there is connectivity, the issue is with the cables being exposed to electromagnetic interference.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 380, 383