CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 111:

  Use of a smart card to authenticate remote servers remains MOST susceptible to which of the following attacks?

  A. Malicious code on the local system
  B. Shoulder surfing
  C. Brute force certificate cracking
  D. Distributed dictionary attacks
  A. Malicious code on the local system

• Question 112:

  Which of the following should be considered to mitigate data theft when using CAT5 wiring?

  A. CCTV
  B. Environmental monitoring
  C. Multimode fiber
  D. EMI shielding
  D. EMI shielding

• Question 113:

  Ann, a company's security officer, often receives reports of unauthorized personnel having access codes to the cipher locks of secure areas in the building. Ann should immediately implement which of the following?

  A. Acceptable Use Policy
  B. Physical security controls
  C. Technical controls
  D. Security awareness training
  D. Security awareness training

• Question 114:

  RADIUS provides which of the following?

  A. Authentication, Authorization, Availability
  B. Authentication, Authorization, Auditing
  C. Authentication, Accounting, Auditing
  D. Authentication, Authorization, Accounting
  D. Authentication, Authorization, Accounting

• Question 115:

  Matt, a security analyst, needs to implement encryption for company data and also prevent theft of company data. Where and how should Matt meet this requirement?

  A. Matt should implement access control lists and turn on EFS.
  B. Matt should implement DLP and encrypt the company database.
  C. Matt should install Truecrypt and encrypt the company server.
  D. Matt should install TPMs and encrypt the company database.
  B. Matt should implement DLP and encrypt the company database.

• Question 116:

  Sara, a security manager, has decided to force expiration of all company passwords by the close of business day. Which of the following BEST supports this reasoning?

  A. A recent security breach in which passwords were cracked.
  B. Implementation of configuration management processes.
  C. Enforcement of password complexity requirements.
  D. Implementation of account lockout procedures.
  A. A recent security breach in which passwords were cracked.

• Question 117:

  Sara, an attacker, is recording a person typing in their ID number into a keypad to gain access to the building. Sara then calls the helpdesk and informs them that their PIN no longer works and would like to change it. Which of the following attacks occurred LAST?

  A. Phishing
  B. Shoulder surfing
  C. Impersonation
  D. Tailgating
  C. Impersonation

• Question 118:

  A security administrator wants to deploy security controls to mitigate the threat of company employees' personal information being captured online. Which of the following would BEST serve this purpose?

  A. Anti-spyware
  B. Antivirus
  C. Host-based firewall
  D. Web content filter
  A. Anti-spyware

• Question 119:

  An email client says a digital signature is invalid and the sender cannot be verified. The recipient is concerned with which of the following concepts?

  A. Integrity
  B. Availability
  C. Confidentiality
  D. Remediation
  A. Integrity

• Question 120:

  A customer has provided an email address and password to a website as part of the login process. Which of the following BEST describes the email address?

  A. Identification
  B. Authorization
  C. Access control
  D. Authentication
  A. Identification