CompTIA CompTIA Security+ JK0-022 Questions & Answers

• Question 841:

  A new client application developer wants to ensure that the encrypted passwords that are stored in their database are secure from cracking attempts. To implement this, the developer implements a function on the client application that hashes passwords thousands of times prior to being sent to the database. Which of the following did the developer MOST likely implement?

  A. RIPEMD

  B. PBKDF2

  C. HMAC

  D. ECDHE

  Correct Answer: B

• Question 842:

  An active directory setting restricts querying to only secure connections. Which of the following ports should be selected to establish a successful connection?

  A. 389

  B. 440

  C. 636

  D. 3286

  Correct Answer: C

• Question 843:

  Ann is an employee in the accounting department and would like to work on files from her home computer. She recently heard about a new personal cloud storage service with an easy web interface. Before uploading her work related files into the cloud for access, which of the following is the MOST important security concern Ann should be aware of?

  A. Size of the files

  B. Availability of the files

  C. Accessibility of the files from her mobile device

  D. Sensitivity of the files

  Correct Answer: D

• Question 844:

  A security administrator would like to ensure that system administrators are not using the same password for both their privileged and non-privileged accounts. Which of the following security controls BEST accomplishes this goal?

  A. Require different account passwords through a policy

  B. Require shorter password expiration for non-privileged accounts

  C. Require shorter password expiration for privileged accounts

  D. Require a greater password length for privileged accounts

  Correct Answer: A

• Question 845:

  It has been discovered that students are using kiosk tablets intended for registration and scheduling to play games and utilize instant messaging. Which of the following could BEST eliminate this issue?

  A. Device encryption

  B. Application control

  C. Content filtering

  D. Screen-locks

  Correct Answer: B

• Question 846:

  Visible security cameras are considered to be which of the following types of security controls?

  A. Technical

  B. Compensating

  C. Deterrent

  D. Administrative

  Correct Answer: C

• Question 847:

  Several employees clicked on a link in a malicious message that bypassed the spam filter and their PCs were infected with malware as a result. Which of the following BEST prevents this situation from occurring in the future?

  A. Data loss prevention

  B. Enforcing complex passwords

  C. Security awareness training

  D. Digital signatures

  Correct Answer: C

• Question 848:

  The loss prevention department has purchased a new application that allows the employees to monitor the alarm systems at remote locations. However, the application fails to connect to the vendor's server and the users are unable to log in. Which of the following are the MOST likely causes of this issue? (Select TWO).

  A. URL filtering

  B. Role-based access controls

  C. MAC filtering

  D. Port Security

  E. Firewall rules

  Correct Answer: AE

• Question 849:

  A security administrator is tasked with ensuring that all devices have updated virus definition files before they are allowed to access network resources. Which of the following technologies would be used to accomplish this goal?

  A. NIDS

  B. NAC

  C. DLP

  D. DMZ

  E. Port Security

  Correct Answer: B

• Question 850:

  Ann has recently transferred from the payroll department to engineering. While browsing file shares, Ann notices she can access the payroll status and pay rates of her new coworkers. Which of the following could prevent this scenario from occurring?

  A. Credential management

  B. Continuous monitoring

  C. Separation of duties

  D. User access reviews

  Correct Answer: D