CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 1:

  Which of the following would be used to identify the security posture of a network without actually exploiting any weaknesses?

  A. Penetration test
  B. Code review
  C. Vulnerability scan
  D. Brute Force scan
  C. Vulnerability scan

• Question 2:

  Separation of duties is often implemented between developers and administrators in order to separate which of the following?

  A. More experienced employees from less experienced employees
  B. Changes to program code and the ability to deploy to production
  C. Upper level management users from standard development employees
  D. The network access layer from the application access layer
  B. Changes to program code and the ability to deploy to production

• Question 3:

  Which of the following is true about the CRL?

  A. It should be kept public
  B. It signs other keys
  C. It must be kept secret
  D. It must be encrypted
  A. It should be kept public

• Question 4:

  Company employees are required to have workstation client certificates to access a bank website. These certificates were backed up as a precautionary step before the new computer upgrade. After the upgrade and restoration, users state they can access the bank's website, but not login. Which is the following is MOST likely the issue?

  A. The IP addresses of the clients have change
  B. The client certificate passwords have expired on the server
  C. The certificates have not been installed on the workstations
  D. The certificates have been installed on the CA
  C. The certificates have not been installed on the workstations

• Question 5:

  Which of the following devices is BEST suited for servers that need to store private keys?

  A. Hardware security module
  B. Hardened network firewall
  C. Solid state disk drive
  D. Hardened host firewall
  A. Hardware security module

• Question 6:

  A software firm posts patches and updates to a publicly accessible FTP site. The software firm also posts digitally signed checksums of all patches and updates. The firm does this to address:

  A. Integrity of downloaded software.
  B. Availability of the FTP site.
  C. Confidentiality of downloaded software.
  D. Integrity of the server logs.
  A. Integrity of downloaded software.

• Question 7:

  Several users' computers are no longer responding normally and sending out spam email to the users' entire contact list. This is an example of which of the following?

  A. Trojan virus
  B. Botnet
  C. Worm outbreak
  D. Logic bomb
  C. Worm outbreak

• Question 8:

  Matt, an administrator, notices a flood fragmented packet and retransmits from an email server. After disabling the TCP offload setting on the NIC, Matt sees normal traffic with packets flowing in sequence again. Which of the following utilities was he MOST likely using to view this issue?

  A. Spam filter
  B. Protocol analyzer
  C. Web application firewall
  D. Load balancer
  B. Protocol analyzer

• Question 9:

  The fundamental information security principals include confidentiality, availability and which of the following?

  A. The ability to secure data against unauthorized disclosure to external sources
  B. The capacity of a system to resist unauthorized changes to stored information
  C. The confidence with which a system can attest to the identity of a user
  D. The characteristic of a system to provide uninterrupted service to authorized users
  B. The capacity of a system to resist unauthorized changes to stored information

• Question 10:

  Which of the following is BEST used to break a group of IP addresses into smaller network segments or blocks?

  A. NAT
  B. Virtualization
  C. NAC
  D. Subnetting
  D. Subnetting