CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 171:

  The Chief Risk Officer is concerned about the new employee BYOD device policy and has requested the security department implement mobile security controls to protect corporate data in the event that a device is lost or stolen. The level of protection must not be compromised even if the communication SIM is removed from the device. Which of the following BEST meets the requirements? (Select TWO).

  A. Asset tracking
  B. Screen-locks
  C. Geo-tagging
  D. Patch management
  E. Device encryption
  B. Screen-locks
  E. Device encryption

• Question 172:

  Which of the following protocols allows for secure transfer of files? (Select TWO).

  A. ICMP
  B. SNMP
  C. SFTP
  D. SCP
  E. TFTP
  C. SFTP
  D. SCP

• Question 173:

  All executive officers have changed their monitor location so it cannot be easily viewed when passing by their offices. Which of the following attacks does this action remediate?

  A. Dumpster Diving
  B. Impersonation
  C. Shoulder Surfing
  D. Whaling
  C. Shoulder Surfing

• Question 174:

  A user has several random browser windows opening on their computer. Which of the following programs can be installed on his machine to help prevent this from happening?

  A. Antivirus
  B. Pop-up blocker
  C. Spyware blocker
  D. Anti-spam
  B. Pop-up blocker

• Question 175:

  A company with a US-based sales force has requested that the VPN system be configured to authenticate the sales team based on their username, password and a client side certificate. Additionally, the security administrator has restricted the VPN to only allow authentication from the US territory. How many authentication factors are in use by the VPN system?

  A. 1
  B. 2
  C. 3
  D. 4
  C. 3

• Question 176:

  One of the most consistently reported software security vulnerabilities that leads to major exploits is:

  A. Lack of malware detection.
  B. Attack surface decrease.
  C. Inadequate network hardening.
  D. Poor input validation.
  D. Poor input validation.

• Question 177:

  Pete, a security analyst, has been informed that the development team has plans to develop an application which does not meet the company's password policy. Which of the following should Pete do NEXT?

  A. Contact the Chief Information Officer and ask them to change the company password policy so that the application is made compliant.
  B. Tell the application development manager to code the application to adhere to the company's password policy.
  C. Ask the application development manager to submit a risk acceptance memo so that the issue can be documented.
  D. Inform the Chief Information Officer of non-adherence to the security policy so that the developers can be reprimanded.
  B. Tell the application development manager to code the application to adhere to the company's password policy.

• Question 178:

  Jane has recently implemented a new network design at her organization and wishes to passively identify security issues with the new network. Which of the following should Jane perform?

  A. Vulnerability assessment
  B. Black box testing
  C. White box testing
  D. Penetration testing
  A. Vulnerability assessment

• Question 179:

  A company has purchased an application that integrates into their enterprise user directory for account authentication. Users are still prompted to type in their usernames and passwords. Which of the following types of authentication is being utilized here?

  A. Separation of duties
  B. Least privilege
  C. Same sign-on
  D. Single sign-on
  C. Same sign-on

• Question 180:

  In the initial stages of an incident response, Matt, the security administrator, was provided the hard drives in question from the incident manager. Which of the following incident response procedures would he need to perform in order to begin the analysis? (Select TWO).

  A. Take hashes
  B. Begin the chain of custody paperwork
  C. Take screen shots
  D. Capture the system image
  E. Decompile suspicious files
  A. Take hashes
  D. Capture the system image