CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 161:

  Which of the following should be deployed to prevent the transmission of malicious traffic between virtual machines hosted on a singular physical device on a network?

  A. HIPS on each virtual machine
  B. NIPS on the network
  C. NIDS on the network
  D. HIDS on each virtual machine
  A. HIPS on each virtual machine

• Question 162:

  When using PGP, which of the following should the end user protect from compromise? (Select TWO).

  A. Private key
  B. CRL details
  C. Public key
  D. Key password
  E. Key escrow
  F. Recovery agent
  A. Private key
  D. Key password

• Question 163:

  Pete, the system administrator, wishes to monitor and limit users' access to external websites. Which of the following would BEST address this?

  A. Block all traffic on port 80.
  B. Implement NIDS.
  C. Use server load balancers.
  D. Install a proxy server.
  D. Install a proxy server.

• Question 164:

  A security engineer is given new application extensions each month that need to be secured prior to implementation. They do not want the new extensions to invalidate or interfere with existing application security. Additionally, the engineer wants to ensure that the new requirements are approved by the appropriate personnel. Which of the following should be in place to meet these two goals? (Select TWO).

  A. Patch Audit Policy
  B. Change Control Policy
  C. Incident Management Policy
  D. Regression Testing Policy
  E. Escalation Policy
  F. Application Audit Policy
  B. Change Control Policy
  D. Regression Testing Policy

• Question 165:

  Joe, a technician at the local power plant, notices that several turbines had ramp up in cycles during the week. Further investigation by the system engineering team determined that a timed .exe file had been uploaded to the system control console during a visit by international contractors. Which of the following actions should Joe recommend?

  A. Create a VLAN for the SCADA
  B. Enable PKI for the MainFrame
  C. Implement patch management
  D. Implement stronger WPA2 Wireless
  A. Create a VLAN for the SCADA

• Question 166:

  A security technician wishes to gather and analyze all Web traffic during a particular time period. Which of the following represents the BEST approach to gathering the required data?

  A. Configure a VPN concentrator to log all traffic destined for ports 80 and 443.
  B. Configure a proxy server to log all traffic destined for ports 80 and 443.
  C. Configure a switch to log all traffic destined for ports 80 and 443.
  D. Configure a NIDS to log all traffic destined for ports 80 and 443.
  B. Configure a proxy server to log all traffic destined for ports 80 and 443.

• Question 167:

  Allowing unauthorized removable devices to connect to computers increases the risk of which of the following?

  A. Data leakage prevention
  B. Data exfiltration
  C. Data classification
  D. Data deduplication
  B. Data exfiltration

• Question 168:

  Which of the following BEST allows Pete, a security administrator, to determine the type, source, and flags of the packet traversing a network for troubleshooting purposes?

  A. Switches
  B. Protocol analyzers
  C. Routers
  D. Web security gateways
  B. Protocol analyzers

• Question 169:

  A network administrator is looking for a way to automatically update company browsers so they import a list of root certificates from an online source. This online source will then be responsible for tracking which certificates are to be trusted or not trusted. Which of the following BEST describes the service that should be implemented to meet these requirements?

  A. Trust model
  B. Key escrow
  C. OCSP
  D. PKI
  A. Trust model

• Question 170:

  Which of the following is the MOST likely cause of users being unable to verify a single user's email signature and that user being unable to decrypt sent messages?

  A. Unmatched key pairs
  B. Corrupt key escrow
  C. Weak public key
  D. Weak private key
  A. Unmatched key pairs