CompTIA CompTIA Security+ JK0-022 Questions & Answers

• Question 901:

  Which of the following are examples of detective controls?

  A. Biometrics, motion sensors and mantraps.

  B. Audit, firewall, anti-virus and biometrics.

  C. Motion sensors, intruder alarm and audit.

  D. Intruder alarm, mantraps and firewall.

  Correct Answer: C

• Question 902:

  Which of the following attacks impact the availability of a system? (Select TWO).

  A. Smurf

  B. Phishing

  C. Spim

  D. DDoS

  E. Spoofing

  Correct Answer: AD

• Question 903:

  Which of the following is a directional antenna that can be used in point-to-point or point-to-multi-point WiFi communication systems? (Select TWO).

  A. Backfire

  B. Dipole

  C. Omni

  D. PTZ

  E. Dish

  Correct Answer: AE

• Question 904:

  A large bank has moved back office operations offshore to another country with lower wage costs in an attempt to improve profit and productivity. Which of the following would be a customer concern if the offshore staff had direct access to their data?

  A. Service level agreements

  B. Interoperability agreements

  C. Privacy considerations

  D. Data ownership

  Correct Answer: C

• Question 905:

  Which of the following controls should critical application servers implement to protect themselves from other potentially compromised application services?

  A. NIPS

  B. Content filter

  C. NIDS

  D. Host-based firewalls

  Correct Answer: D

• Question 906:

  A large multinational corporation with networks in 30 countries wants to establish an understanding of their overall public-facing network attack surface. Which of the following security techniques would be BEST suited for this?

  A. External penetration test

  B. Internal vulnerability scan

  C. External vulnerability scan

  D. Internal penetration test

  Correct Answer: C

• Question 907:

  An overseas branch office within a company has many more technical and non-technical security incidents than other parts of the company. Which of the following management controls should be introduced to the branch office to improve their state of security?

  A. Initial baseline configuration snapshots

  B. Firewall, IPS and network segmentation

  C. Event log analysis and incident response

  D. Continuous security monitoring processes

  Correct Answer: D

• Question 908:

  A security administrator must implement a system that will support and enforce the following file system access control model:

  FILE NAME SECURITY LABEL Employees.doc Confidential Salary.xls Confidential OfficePhones.xls Unclassified PersonalPhones.xls Restricted

  Which of the following should the security administrator implement?

  A. White and black listing

  B. SCADA system

  C. Trusted OS

  D. Version control

  Correct Answer: C

• Question 909:

  The system administrator is reviewing the following logs from the company web server:

  12:34:56 GET /directory_listing.php?user=adminandpass=admin1

  12:34:57 GET /directory_listing.php?user=adminandpass=admin2

  12:34:58 GET /directory_listing.php?user=adminandpass=1admin

  12:34:59 GET /directory_listing.php?user=adminandpass=2admin

  Which of the following is this an example of?

  A. Online rainbow table attack

  B. Offline brute force attack

  C. Offline dictionary attack

  D. Online hybrid attack

  Correct Answer: D

• Question 910:

  An organizations' security policy requires that users change passwords every 30 days. After a security audit, it was determined that users were recycling previously used passwords. Which of the following password enforcement policies would have mitigated this issue?

  A. Password history

  B. Password complexity

  C. Password length

  D. Password expiration

  Correct Answer: A