CompTIA CompTIA Security+ JK0-022 Questions & Answers

• Question 71:

  Jane, an IT security technician, needs to create a way to secure company mobile devices. Which of the following BEST meets this need?

  A. Implement voice encryption, pop-up blockers, and host-based firewalls.

  B. Implement firewalls, network access control, and strong passwords.

  C. Implement screen locks, device encryption, and remote wipe capabilities.

  D. Implement application patch management, antivirus, and locking cabinets.

  Correct Answer: C

  Screen-lock is a security feature that requires the user to enter a password after a short period of inactivity before they can access the system again. This feature ensures that if your device is left unattended or is lost or stolen, it will be difficult for anyone else to access your data or applications. Device encryption encrypts the data on the device. This feature ensures that the data on the device cannot be accessed in a useable form should the device be stolen. Remote wipe is the process of deleting data on a device in the event that the device is stolen. This is performed over remote connections such as the mobile phone service or the internet connection and helps ensure that sensitive data is not accessed by unauthorized people.

  Incorrect Answers:

  A: Voice encryption is used to protect audio (voice) transmission. It cannot secure data stored on a mobile device. Pop-up blockers prevent websites from opening new browser windows without the users consent. These are often used for

  advertisements but can also be used to distribute malicious code.

  A host-based firewall is installed on a client system and is used to protect the client system from the activities of the user as well as from communication from the network or Internet by filtering the type of network traffic that can sent or

  received by the systems.

  B: Firewalls, network access control, and strong passwords would secure the network rather than the mobile device. Firewalls protect systems from network attacks by filtering the type of network traffic that can sent or received by the

  systems. Strong passwords are likely to mitigate risk of the user account being used to access the network. A strong password would be more difficult to crack. It does not secure the mobile device.

  D: Patch management is the process of maintaining the latest source code for applications and operating systems by applying the latest vendor updates. This helps protect a systems from newly discovered attacks and vulnerabilities.

  Antivirus software is used to protect systems against viruses, which are a form of malicious code designed to spread from one system to another, consuming network resources. Locking cabinets would secure mobile device when they have

  not been issued to users.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 161-162, 220, 418-419 Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 231- 232,

  236, 237, 246

• Question 72:

  Which of the following technical controls helps to prevent Smartphones from connecting to a corporate network?

  A. Application white listing

  B. Remote wiping

  C. Acceptable use policy

  D. Mobile device management

  Correct Answer: D

  Mobile device management (MDM) is allows for managing the mobile devices that employees use to access company resources. MDM is intended to improve security, provide monitoring, enable remote management, and support troubleshooting. It can be used to push or remove applications, manage data, and enforce configuration settings on these devices.

  Incorrect Answers:

  A: Application whitelisting is a form of application security which prevents any software from running on a system unless it is included on a preapproved exception list. It does not prevent Smartphones from connecting to a corporate network.

  B: Remote wipe is the process of deleting data on a device in the event that the device is stolen. This is performed over remote connections such as the mobile phone service or the internet connection and helps ensure that sensitive data is not accessed by unauthorized people.

  C: An acceptable use policy is a document that defines the acceptable activity, practice, or use for equipment and resources. However, the policy must still be enforced.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 24, 340 Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 79, 236, 238

• Question 73:

  The chief Risk officer is concerned about the new employee BYOD device policy and has requested the security department implement mobile security controls to protect corporate data in the event that a device is lost or stolen. The level of protection must not be compromised even if the communication SIM is removed from the device. Which of the following BEST meets the requirements? (Select TWO)

  A. Asset tracking

  B. Screen-locks

  C. GEO-Tracking

  D. Device encryption

  Correct Answer: A

  A: Asset tracking is the process of maintaining oversight over inventory, and ensuring that a device is still in the possession of the assigned authorized user.

  D: Device encryption encrypts the data on the device. This feature ensures that the data on the device cannot be accessed in a useable form should the device be stolen.

  Incorrect Answers:

  B: Screen-lock is a security feature that requires the user to enter a password after a short period of inactivity before they can access the system again. This feature ensures that if your device is left unattended or is lost or stolen, it will be difficult for anyone else to access your data or applications.

  C: GEO tracking and GPS tracking can be used to identify its location of a stolen device and can allow authorities to recover the device. However, for GPS tracking to work, the device must have an Internet connection or a wireless phone service over which to send its location information.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 418-419 Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 236, 237, 238

• Question 74:

  After a security incident involving a physical asset, which of the following should be done at the beginning?

  A. Record every person who was in possession of assets, continuing post-incident.

  B. Create working images of data in the following order: hard drive then RAM.

  C. Back up storage devices so work can be performed on the devices immediately.

  D. Write a report detailing the incident and mitigation suggestions.

  Correct Answer: A

  Asset tracking is the process of maintaining oversight over inventory, and ensuring that a device is still in the possession of the assigned authorized user.

  Incorrect Answers:

  B: Creating images of the data on the hard drive and RAM addresses concerns about digital assets, not physical assets.

  C: Creating a backup of the storage device addresses concerns about digital assets, not physical assets.

  D: The writing of a report detailing the incident and mitigation suggestions occurs after an incident has been contained.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 95, 106-108, 238

• Question 75:

  Pete, the system administrator, has concerns regarding users losing their company provided smartphones. Pete's focus is on equipment recovery. Which of the following BEST addresses his concerns?

  A. Enforce device passwords.

  B. Use remote sanitation.

  C. Enable GPS tracking.

  D. Encrypt stored data.

  Correct Answer: C

  Global Positioning System (GPS) tracking can be used to identify its location of a stolen device and can allow authorities to recover the device. However, for GPS tracking to work, the device must have an Internet connection or a wireless phone service over which to send its location information.

  Incorrect Answers:

  A: Enforcing device passwords may make it difficult for a thief to access the applications and data on the device but it does not assist in recovering the stolen device.

  B: Remote wipe or remote sanitation is the process of deleting data on a device in the event that the device is stolen. This is performed over remote connections such as the mobile phone service or the internet connection and helps ensure that sensitive data is not accessed by unauthorized people.

  D: Encrypting the stored data may make it difficult for a thief to access the data on the device but it does not assist in recovering the stolen device.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 236,

• Question 76:

  A small company has recently purchased cell phones for managers to use while working outside if the office.

  The company does not currently have a budget for mobile device management and is primarily concerned with deterring leaks if sensitive information obtained by unauthorized access to unattended phones. Which of the following would provide the solution BEST meets the company's requirements?

  A. Screen-lock

  B. Disable removable storage

  C. Full device encryption

  D. Remote wiping

  Correct Answer: A

  Screen-lock is a security feature that requires the user to enter a password after a short period of inactivity before they can access the system again. This feature ensures that if your device is left unattended or is lost or stolen, it will be difficult for anyone else to access your data or applications.

  Incorrect Answers:

  B: Merely disabling removable storage will not prevent sensitive information from being accessed by unauthorized people when the phone is left unattended.

  C: Device encryption encrypts the data on the device. This feature ensures that the data on the device cannot be accessed in a useable form should the device be stolen.

  D: Remote wipe is the process of deleting data on a device in the event that the device is stolen. This is performed over remote connections such as the mobile phone service or the internet connection and helps ensure that sensitive data is not accessed by unauthorized people.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 418-419 Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 236,

• Question 77:

  A bank has recently deployed mobile tablets to all loan officers for use at customer sites. Which of the following would BEST prevent the disclosure of customer data in the event that a tablet is lost or stolen?

  A. Application control

  B. Remote wiping

  C. GPS

  D. Screen-locks

  Correct Answer: B

  Remote wipe is the process of deleting data on a device in the event that the device is stolen. This is performed over remote connections such as the mobile phone service or the internet connection and helps ensure that sensitive data is not

  accessed by unauthorized people.

  Incorrect Answers:

  A: Application control is the process of controlling what applications are installed on a device. This may reduce exposure to malicious software by limiting the user's ability to install applications that come from unknown sources or have no work-related features.

  C: Global Positioning System (GPS) tracking can be used to identify its location of a stolen device and can allow authorities to recover the device. However, for GPS tracking to work, the device must have an Internet connection or a wireless phone service over which to send its location information.

  D: Screen lock is a security feature that requires the user to enter a PIN or a password after a short period of inactivity before they can access the system again. This feature ensures that if your device is left unattended or is lost or stolen, it will be difficult for anyone else to access your data or applications.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 418-419 Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 236, http://

  searchconsumerization.techtarget.com/definition/remote- wipe

• Question 78:

  Which of the following should Matt, a security administrator, include when encrypting smartphones? (Select TWO).

  A. Steganography images

  B. Internal memory

  C. Master boot records

  D. Removable memory cards

  E. Public keys

  Correct Answer: BD

  All useable data on the device should be encrypted. This data can be located on the hard drive, or removable drives, such as USB devices and memory cards, and on internal memory. Incorrect Answers:

  A: Steganography is a process of hiding one communication inside another communication. It can use passwords to prevent unauthorized extraction of the hidden communication and can also use encryption to mitigate against brute-force attempts at extraction. Steganography can also be used to detect theft, fraud, or modification when the hidden communication is a watermark.

  C: The master boot record (MBR) stores information on how the logical partitions on a hard drive are organized and contains loaders for the operating system. This is not data at risk and does not need to be encrypted.

  E: Public keys are used in asymmetrical cryptography. It is publicly available and is derived from the user's private key. It does not hold any useable data as the private key cannot be used to reverse engineer the user's private key.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 323,

• Question 79:

  A way to assure data at-rest is secure even in the event of loss or theft is to use:

  A. Full device encryption.

  B. Special permissions on the file system.

  C. Trusted Platform Module integration.

  D. Access Control Lists.

  Correct Answer: A

  Device encryption encrypts the data on the device. This feature ensures that the data on the device cannot be accessed in a useable form should the device be stolen.

  Incorrect Answers:

  B: Permissions on the file system define the level of access logged on users have to files and folders. However, should an unauthorized user gain access to an authorized user's user account, they would gain access to the files and folders.

  C: Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the system's motherboard. It helps with hash key generation and stores cryptographic keys, passwords, or certificates.

  D: Access Control Lists (ACLs) define the level of access logged on users have to resources. However, should an unauthorized user gain access to an authorized user's user account, they would gain access to the data.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 156, 237, 418-419 Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 236,

• Question 80:

  Which of the following controls can be implemented together to prevent data loss in the event of theft of a mobile device storing sensitive information? (Select TWO).

  A. Full device encryption

  B. Screen locks

  C. GPS

  D. Asset tracking

  E. Inventory control

  Correct Answer: AB

  A: Device encryption encrypts the data on the device. This feature ensures that the data on the device cannot be accessed in a useable form should the device be stolen.

  B: Screen locks are a security feature that requires the user to enter a PIN or a password after a short period of inactivity before they can access the system again. This feature ensures that if your device is left unattended or is lost or stolen, it will be difficult for anyone else to access your data or applications.

  Incorrect Answers:

  C: Global Positioning System (GPS) tracking can be used to identify its location of a stolen device and can allow authorities to locate the device. However, for GPS tracking to work, the device must have an Internet connection or a wireless phone service over which to send its location information.

  D: Asset tracking is the process of maintaining oversight over inventory, and ensuring that a device is still in the possession of the assigned authorized user.

  E: Inventory control is an aspect of asset tracking and the overseeing of inventory. It does not prevent data loss.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 418-419 Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 236, 237, 238