CompTIA CompTIA Security+ JK0-022 Questions & Answers

• Question 681:

  A customer has provided an email address and password to a website as part of the login process. Which of the following BEST describes the email address?

  A. Identification

  B. Authorization

  C. Access control

  D. Authentication

  Correct Answer: A

• Question 682:

  Which of the following is BEST used to capture and analyze network traffic between hosts on the same network segment?

  A. Protocol analyzer

  B. Router

  C. Firewall

  D. HIPS

  Correct Answer: A

• Question 683:

  Which of the following devices is MOST likely being used when processing the following?

  1 PERMIT IP ANY ANY EQ 80

  2 DENY IP ANY ANY

  A. Firewall

  B. NIPS

  C. Load balancer

  D. URL filter

  Correct Answer: A

• Question 684:

  Key cards at a bank are not tied to individuals, but rather to organizational roles. After a break in, it becomes apparent that extra efforts must be taken to successfully pinpoint who exactly enters secure areas. Which of the following security measures can be put in place to mitigate the issue until a new key card system can be installed?

  A. Bollards

  B. Video surveillance

  C. Proximity readers

  D. Fencing

  Correct Answer: B

• Question 685:

  A security analyst performs the following activities: monitors security logs, installs surveillance cameras and analyzes trend reports. Which of the following job responsibilities is the analyst performing? (Select TWO).

  A. Detect security incidents

  B. Reduce attack surface of systems

  C. Implement monitoring controls

  D. Hardening network devices

  E. Prevent unauthorized access

  Correct Answer: AC

• Question 686:

  The server administrator has noticed that most servers have a lot of free disk space and low memory utilization. Which of the following statements will be correct if the server administrator migrates to a virtual server environment?

  A. The administrator will need to deploy load balancing and clustering.

  B. The administrator may spend more on licensing but less on hardware and equipment.

  C. The administrator will not be able to add a test virtual environment in the data center.

  D. Servers will encounter latency and lowered throughput issues.

  Correct Answer: B

• Question 687:

  Which of the following devices would be the MOST efficient way to filter external websites for staff on an internal network?

  A. Protocol analyzer

  B. Switch

  C. Proxy

  D. Router

  Correct Answer: C

• Question 688:

  On a train, an individual is watching a proprietary video on Joe's laptop without his knowledge. Which of the following does this describe?

  A. Tailgating

  B. Shoulder surfing

  C. Interference

  D. Illegal downloading

  Correct Answer: B

• Question 689:

  Which of the following will help prevent smurf attacks?

  A. Allowing necessary UDP packets in and out of the network

  B. Disabling directed broadcast on border routers

  C. Disabling unused services on the gateway firewall

  D. Flash the BIOS with the latest firmware

  Correct Answer: B

• Question 690:

  A set of standardized system images with a pre-defined set of applications is used to build end-user workstations. The security administrator has scanned every workstation to create a current inventory of all applications that are installed on active workstations and is documenting which applications are out- of-date and could be exploited. The security administrator is determining the:

  A. attack surface.

  B. application hardening effectiveness.

  C. application baseline.

  D. OS hardening effectiveness.

  Correct Answer: A