CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 131:

  Pete, the security engineer, would like to prevent wireless attacks on his network. Pete has implemented a security control to limit the connecting MAC addresses to a single port. Which of the following wireless attacks would this address?

  A. Interference
  B. Man-in-the-middle
  C. ARP poisoning
  D. Rogue access point
  D. Rogue access point

• Question 132:

  Which of the following results in datacenters with failed humidity controls? (Select TWO).

  A. Excessive EMI
  B. Electrostatic charge
  C. Improper ventilation
  D. Condensation
  E. Irregular temperature
  B. Electrostatic charge
  D. Condensation

• Question 133:

  Several departments within a company have a business need to send high volumes of confidential information to customers via email. Which of the following is the BEST solution to mitigate unintentional exposure of confidential information?

  A. Employ encryption on all outbound emails containing confidential information.
  B. Employ exact data matching and prevent inbound emails with Data Loss Prevention.
  C. Employ hashing on all outbound emails containing confidential information.
  D. Employ exact data matching and encrypt inbound e-mails with Data Loss Prevention.
  A. Employ encryption on all outbound emails containing confidential information.

• Question 134:

  A Chief Information Security Officer (CISO) wants to implement two-factor authentication within the company. Which of the following would fulfill the CISO's requirements?

  A. Username and password
  B. Retina scan and fingerprint scan
  C. USB token and PIN
  D. Proximity badge and token
  C. USB token and PIN

• Question 135:

  A security administrator has just finished creating a hot site for the company. This implementation relates to which of the following concepts?

  A. Confidentiality
  B. Availability
  C. Succession planning
  D. Integrity
  B. Availability

• Question 136:

  Developers currently have access to update production servers without going through an approval process. Which of the following strategies would BEST mitigate this risk?

  A. Incident management
  B. Clean desk policy
  C. Routine audits
  D. Change management
  D. Change management

• Question 137:

  Which of the following would a security administrator use to verify the integrity of a file?

  A. Time stamp
  B. MAC times
  C. File descriptor
  D. Hash
  D. Hash

• Question 138:

  The network administrator has been tasked to rebuild a compromised web server. The administrator is to remove the malware and install all the necessary updates and patches. This represents which of the following stages of the Incident Handling Response?

  A. Lessons Learned
  B. Plan of action
  C. Eradication
  D. Reconstitution
  C. Eradication

• Question 139:

  One of the servers on the network stops responding due to lack of available memory. Server administrators did not have a clear definition of what action should have taken place based on the available memory. Which of the following would have BEST kept this incident from occurring?

  A. Set up a protocol analyzer
  B. Set up a performance baseline
  C. Review the systems monitor on a monthly basis
  D. Review the performance monitor on a monthly basis
  B. Set up a performance baseline

• Question 140:

  A small company has a website that provides online customer support. The company requires an account recovery process so that customers who forget their passwords can regain access. Which of the following is the BEST approach to implement this process?

  A. Replace passwords with hardware tokens which provide two-factor authentication to the online customer support site.
  B. Require the customer to physically come into the company's main office so that the customer can be authenticated prior to their password being reset.
  C. Web-based form that identifies customer by another mechanism and then emails the customer their forgotten password.
  D. Web-based form that identifies customer by another mechanism, sets a temporary password and forces a password change upon first login.
  D. Web-based form that identifies customer by another mechanism, sets a temporary password and forces a password change upon first login.