CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 91:

  DRAG DROP

  You have been tasked with designing a security plan for your company. Drag and drop the appropriate security controls on the floor plan-Instructions: All objects must be used and all place holders must be filled Order does not matter When you have completed the simulation, please select the Done button to submit.

  Select and Place:

  

  

• Question 92:

  After an audit, it was discovered that the security group memberships were not properly adjusted for employees' accounts when they moved from one role to another. Which of the following has the organization failed to properly implement? (Select TWO).

  A. Mandatory access control enforcement.
  B. User rights and permission reviews.
  C. Technical controls over account management.
  D. Account termination procedures.
  E. Management controls over account management.
  F. Incident management and response plan.
  B. User rights and permission reviews.
  E. Management controls over account management.

• Question 93:

  A security architect wishes to implement a wireless network with connectivity to the company's internal network. Before they inform all employees that this network is being put in place, the architect wants to roll it out to a small test segment. Which of the following allows for greater secrecy about this network during this initial phase of implementation?

  A. Disabling SSID broadcasting
  B. Implementing WPA2 - TKIP
  C. Implementing WPA2 - CCMP
  D. Filtering test workstations by MAC address
  A. Disabling SSID broadcasting

• Question 94:

  Joe, the security administrator, has determined that one of his web servers is under attack. Which of the following can help determine where the attack originated from?

  A. Capture system image
  B. Record time offset
  C. Screenshots
  D. Network sniffing
  D. Network sniffing

• Question 95:

  Pete's corporation has outsourced help desk services to a large provider. Management has published a procedure that requires all users, when receiving support, to call a special number. Users then need to enter the code provided to them by the help desk technician prior to allowing the technician to work on their PC. Which of the following does this procedure prevent?

  A. Collusion
  B. Impersonation
  C. Pharming
  D. Transitive Access
  B. Impersonation

• Question 96:

  Which of the following ports is used to securely transfer files between remote UNIX systems?

  A. 21
  B. 22
  C. 69
  D. 445
  B. 22

• Question 97:

  The systems administrator notices that many employees are using passwords that can be easily guessed or are susceptible to brute force attacks. Which of the following would BEST mitigate this risk?

  A. Enforce password rules requiring complexity.
  B. Shorten the maximum life of account passwords.
  C. Increase the minimum password length.
  D. Enforce account lockout policies.
  A. Enforce password rules requiring complexity.

• Question 98:

  The systems administrator wishes to implement a hardware-based encryption method that could also be used to sign code. They can achieve this by:

  A. Utilizing the already present TPM.
  B. Configuring secure application sandboxes.
  C. Enforcing whole disk encryption.
  D. Moving data and applications into the cloud.
  A. Utilizing the already present TPM.

• Question 99:

  During an anonymous penetration test, Jane, a system administrator, was able to identify a shared print spool directory, and was able to download a document from the spool. Which statement BEST describes her privileges?

  A. All users have write access to the directory.
  B. Jane has read access to the file.
  C. All users have read access to the file.
  D. Jane has read access to the directory.
  C. All users have read access to the file.

• Question 100:

  Which of the following uses both a public and private key?

  A. RSA
  B. AES
  C. MD5
  D. SHA
  A. RSA