CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 11:

  Which of the following are Data Loss Prevention (DLP) strategies that address data in transit issues? (Select TWO).

  A. Scanning printing of documents.
  B. Scanning of outbound IM (Instance Messaging).
  C. Scanning copying of documents to USB.
  D. Scanning of SharePoint document library.
  E. Scanning of shared drives.
  F. Scanning of HTTP user traffic.
  B. Scanning of outbound IM (Instance Messaging).
  F. Scanning of HTTP user traffic.

• Question 12:

  A bank has a fleet of aging payment terminals used by merchants for transactional processing. The terminals currently support single DES but require an upgrade in order to be compliant with security standards. Which of the following is likely to be the simplest upgrade to the aging terminals which will improve in-transit protection of transactional data?

  A. AES
  B. 3DES
  C. RC4
  D. WPA2
  B. 3DES

• Question 13:

  Which of the following is an example of a false negative?

  A. The IDS does not identify a buffer overflow.
  B. Anti-virus identifies a benign application as malware.
  C. Anti-virus protection interferes with the normal operation of an application.
  D. A user account is locked out after the user mistypes the password too many times.
  A. The IDS does not identify a buffer overflow.

• Question 14:

  Data execution prevention is a feature in most operating systems intended to protect against which type of attack?

  A. Cross-site scripting
  B. Buffer overflow
  C. Header manipulation
  D. SQL injection
  B. Buffer overflow

• Question 15:

  Ann, the software security engineer, works for a major software vendor. Which of the following practices should be implemented to help prevent race conditions, buffer overflows, and other similar vulnerabilities prior to each production release?

  A. Product baseline report
  B. Input validation
  C. Patch regression testing
  D. Code review
  D. Code review

• Question 16:

  Ann would like to forward some Personal Identifiable Information to her HR department by email, but she is worried about the confidentiality of the information. Which of the following will accomplish this task securely?

  A. Digital Signatures
  B. Hashing
  C. Secret Key
  D. Encryption
  D. Encryption

• Question 17:

  Which of the following is the BEST approach to perform risk mitigation of user access control rights?

  A. Conduct surveys and rank the results.
  B. Perform routine user permission reviews.
  C. Implement periodic vulnerability scanning.
  D. Disable user accounts that have not been used within the last two weeks.
  B. Perform routine user permission reviews.

• Question 18:

  Which of the following types of encryption will help in protecting files on a PED?

  A. Mobile device encryption
  B. Transport layer encryption
  C. Encrypted hidden container
  D. Database encryption
  A. Mobile device encryption

• Question 19:

  A company that purchased an HVAC system for the datacenter is MOST concerned with which of the following?

  A. Availability
  B. Integrity
  C. Confidentiality
  D. Fire suppression
  A. Availability

• Question 20:

  Which of the following should be connected to the fire alarm system in order to help prevent the spread of a fire in a server room without data loss to assist in an FM-200 deployment?

  A. Water base sprinkler system
  B. Electrical
  C. HVAC
  D. Video surveillance
  C. HVAC