CompTIA CompTIA Security+ JK0-022 Questions & Answers

• Question 891:

  A security administrator must implement a firewall rule to allow remote employees to VPN onto the company network. The VPN concentrator implements SSL VPN over the standard HTTPS port. Which of the following is the MOST secure ACL to implement at the company's gateway firewall?

  A. PERMIT TCP FROM ANY 443 TO 199.70.5.25 443

  B. PERMIT TCP FROM ANY ANY TO 199.70.5.23 ANY

  C. PERMIT TCP FROM 199.70.5.23 ANY TO ANY ANY

  D. PERMIT TCP FROM ANY 1024-65535 TO 199.70.5.23 443

  Correct Answer: D

• Question 892:

  Which of the following helps to establish an accurate timeline for a network intrusion?

  A. Hashing images of compromised systems

  B. Reviewing the date of the antivirus definition files

  C. Analyzing network traffic and device logs

  D. Enforcing DLP controls at the perimeter

  Correct Answer: C

• Question 893:

  While securing a network it is decided to allow active FTP connections into the network. Which of the following ports MUST be configured to allow active FTP connections? (Select TWO).

  A. 20

  B. 21

  C. 22

  D. 68

  E. 69

  Correct Answer: AB

• Question 894:

  An administrator needs to secure a wireless network and restrict access based on the hardware address of the device. Which of the following solutions should be implemented?

  A. Use a stateful firewall

  B. Enable MAC filtering

  C. Upgrade to WPA2 encryption

  D. Force the WAP to use channel 1

  Correct Answer: B

• Question 895:

  The common method of breaking larger network address space into smaller networks is known as:

  A. subnetting.

  B. phishing.

  C. virtualization.

  D. packet filtering.

  Correct Answer: A

• Question 896:

  Which of the following would be MOST appropriate to secure an existing SCADA system by preventing connections from unauthorized networks?

  A. Implement a HIDS to protect the SCADA system

  B. Implement a Layer 2 switch to access the SCADA system

  C. Implement a firewall to protect the SCADA system

  D. Implement a NIDS to protect the SCADA system

  Correct Answer: C

• Question 897:

  An organization processes credit card transactions and is concerned that an employee may intentionally email credit card numbers to external email addresses. This company should consider which of the following technologies?

  A. IDS

  B. Firewalls

  C. DLP

  D. IPS

  Correct Answer: C

• Question 898:

  A computer is found to be infected with malware and a technician re-installs the operating system. The computer remains infected with malware. This is an example of:

  A. a rootkit.

  B. a MBR infection.

  C. an exploit kit.

  D. Spyware.

  Correct Answer: B

• Question 899:

  Which of the following, if properly implemented, would prevent users from accessing files that are unrelated to their job duties? (Select TWO).

  A. Separation of duties

  B. Job rotation

  C. Mandatory vacation

  D. Time of day restrictions

  E. Least privilege

  Correct Answer: AE

• Question 900:

  Which of the following types of technologies is used by security and research personnel for identification and analysis of new security threats in a networked environment by using false data/hosts for information collection?

  A. Honeynet

  B. Vulnerability scanner

  C. Port scanner

  D. Protocol analyzer

  Correct Answer: A