CompTIA CompTIA Security+ JK0-022 Questions & Answers

• Question 931:

  After a company has standardized to a single operating system, not all servers are immune to a well- known OS vulnerability. Which of the following solutions would mitigate this issue?

  A. Host based firewall

  B. Initial baseline configurations

  C. Discretionary access control

  D. Patch management system

  Correct Answer: D

• Question 932:

  Pete, a network administrator, is implementing IPv6 in the DMZ. Which of the following protocols must he allow through the firewall to ensure the web servers can be reached via IPv6 from an IPv6 enabled Internet host?

  A. TCP port 443 and IP protocol 46

  B. TCP port 80 and TCP port 443

  C. TCP port 80 and ICMP

  D. TCP port 443 and SNMP

  Correct Answer: B

  HTTP and HTTPS, which uses TCP port 80 and TCP port 443 respectively, is necessary for Communicating with Web servers. It should therefore be allowed through the firewall. Incorrect Answers:

  A: IP protocol 46 was designed to reserve resources across a network for an integrated services Internet.

  C: Internet Control Message Protocol (ICMP) is a network health and link-testing protocol that is commonly used by tools such as ping, traceroute, and pathping.

  D: SNMP can be used to interact with various network devices to obtain status information, performance data, statistics, and configuration details.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 42, 46, 47, 52.

• Question 933:

  Which of the following protocols allows for the LARGEST address space?

  A. IPX

  B. IPv4

  C. IPv6

  D. Appletalk

  Correct Answer: C

  The main advantage of IPv6 over IPv4 is its larger address space. The length of an IPv6 address is 128 bits, compared with 32 bits in IPv4.

  Incorrect Answers:

  A: A big advantage of IPX was a small memory footprint of the IPX driver, which was vital for MS-DOS and Microsoft Windows up to the version Windows 95 because of limited size of the conventional memory.

  B: IPv4 has 32-bit addresses, whereas IPv6 has 128 bit addresses.

  D: AppleTalk is a proprietary suite of networking protocols developed by Apple Inc.

  References: http://en.wikipedia.org/wiki/IPv6#Larger_address_space http://en.wikipedia.org/wiki/Internetwork_Packet_Exchange http://en.wikipedia.org/wiki/AppleTalk

• Question 934:

  Which of the following protocols is used by IPv6 for MAC address resolution?

  A. NDP

  B. ARP

  C. DNS

  D. NCP

  Correct Answer: A

  The Neighbor Discovery Protocol (NDP) is a protocol in the Internet protocol suite used with Internet Protocol Version 6 (IPv6).

  Incorrect Answers:

  B: Address Resolution Protocol (ARP) is a telecommunication protocol used for resolution of network layer addresses into link layer addresses, a critical function in multiple-access networks.

  C: Domain name system (DNS) is the hierarchical naming scheme used in both public and private networks.

  D: NCP is used to access file, print, directory, clock synchronization, messaging, remote command execution and other network service functions.

  References:

  http://en.wikipedia.org/wiki/Neighbor_Discovery_Protocol http://en.wikipedia.org/wiki/Address_Resolution_Protocol Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, p 42.

  http://en.wikipedia.org/wiki/NetWare_Core_Protocol

• Question 935:

  A system administrator attempts to ping a hostname and the response is 2001:4860:0:2001::68. Which of the following replies has the administrator received?

  A. The loopback address

  B. The local MAC address

  C. IPv4 address

  D. IPv6 address

  Correct Answer: D

  IPv6 addresses are 128-bits in length. An IPv6 address is represented as eight groups of four hexadecimal digits, each group representing 16 bits (two octets). The groups are separated by colons (:). The hexadecimal digits are case-

  insensitive, but IETF recommendations suggest the use of lower case letters. The full representation of eight 4-digit groups may be simplified by several techniques, eliminating parts of the representation.

  Incorrect Answers:

  A: The name localhost is reserved for loopback purposes. An IPv4 or IPv6 address query for the name localhost must always resolve to the respective loopback address, which is specified in a separate standard.

  B: MAC addresses are 48-bits in length.

  C: IPv4 uses 32-bit addresses.

  References: http://en.wikipedia.org/wiki/IPv6_address http://en.wikipedia.org/wiki/Localhost http://en.wikipedia.org/wiki/MAC_address http://en.wikipedia.org/wiki/IPv4#Addressing

• Question 936:

  A security administrator wishes to change their wireless network so that IPSec is built into the protocol and NAT is no longer required for address range extension. Which of the following protocols should be used in this scenario?

  A. WPA2

  B. WPA

  C. IPv6

  D. IPv4

  Correct Answer: C

  IPSec security is built into IPv6.

  Incorrect Answers:

  A: WPA2 makes use of CCMP

  B: WPA makes use of the RC4 encryption algorithm with TKIP.

  D: IPSec is an add-on to IPv4.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 145, 172.

• Question 937:

  After a network outage, a PC technician is unable to ping various network devices. The network administrator verifies that those devices are working properly and can be accessed securely. Which of the following is the MOST likely reason the PC technician is unable to ping those devices?

  A. ICMP is being blocked

  B. SSH is not enabled

  C. DNS settings are wrong

  D. SNMP is not configured properly

  Correct Answer: A

  ICMP is a protocol that is commonly used by tools such as ping, traceroute, and pathping. ICMP offers no information If ICMP request queries go unanswered, or ICMP replies are lost or blocked.

  Incorrect Answers:

  B: SSH is used to establish a command-line, text-only interface connection with a server, router, switch, or similar device over any distance.

  C: Domain name system (DNS) is the hierarchical naming scheme used for public and private networks.

  D: You can use SNMP to interact with various network devices to obtain status information, performance data, statistics, and configuration details.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 18, 20, 21.

• Question 938:

  Which of the following protocols allows for secure transfer of files? (Select TWO).

  A. ICMP

  B. SNMP

  C. SFTP

  D. SCP

  E. TFTP

  Correct Answer: CD

  Standard FTP is a protocol often used to move files between one system and another either over the Internet or within private networks. SFTP is a secured alternative to standard FTP. Secure Copy Protocol (SCP) is a secure file-transfer facility based on SSH and Remote Copy Protocol (RCP).

  Incorrect Answers:

  A: ICMP is a protocol that is commonly used by tools such as ping, traceroute, and pathping.

  B: You can use SNMP to interact with various network devices to obtain status information, performance data, statistics, and configuration details.

  E: Trivial File Transfer Protocol (TFTP) is a simple fi le-exchange protocol that doesn't require authentication.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 42, 49, 50.

• Question 939:

  FTP/S uses which of the following TCP ports by default?

  A. 20 and 21

  B. 139 and 445

  C. 443 and 22

  D. 989 and 990

  Correct Answer: D

  FTPS uses ports 989 and 990.

  Incorrect Answers:

  A: FTP makes use of ports 20 and 21.

  B: Port 139 is used by NetBIOS, and port 445 is used by Microsoft-DS.

  C: Port 443 is used by HTTPS, and port 22 is used by SSH and SCP.

  References:

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 81-83.

  http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers

• Question 940:

  Which of the following is the MOST secure protocol to transfer files?

  A. FTP

  B. FTPS

  C. SSH

  D. TELNET

  Correct Answer: B

  FTPS refers to FTP Secure, or FTP SSL. It is a secure variation of File Transfer Protocol (FTP).

  Incorrect Answers:

  A: FTP traffic is vulnerable to packet sniffing and other forms of eavesdropping. It is, therefore, not secure.

  C: SSH allows a user to run commands on a machine's command prompt without being near the machine physically.

  D: TELNET, by default, does not encrypt any data sent over the connection, and so it is often practical to eavesdrop on the communications and use the password later for malicious purposes. It is, therefore, not secure.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 42, 46, 49, 51.