CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 191:

  A software development company has hired a programmer to develop a plug-in module to an existing proprietary application. After completing the module, the developer needs to test the entire application to ensure that the module did not introduce new vulnerabilities. Which of the following is the developer performing when testing the application?

  A. Black box testing
  B. White box testing
  C. Gray box testing
  D. Design review
  C. Gray box testing

• Question 192:

  How often, at a MINIMUM, should Sara, an administrator, review the accesses and right of the users on her system?

  A. Annually
  B. Immediately after an employee is terminated
  C. Every five years
  D. Every time they patch the server
  A. Annually

• Question 193:

  Customers' credit card information was stolen from a popular video streaming company. A security consultant determined that the information was stolen, while in transit, from the gaming consoles of a particular vendor. Which of the following methods should the company consider to secure this data in the future?

  A. Application firewalls
  B. Manual updates
  C. Firmware version control
  D. Encrypted TCP wrappers
  D. Encrypted TCP wrappers

• Question 194:

  Joe, a security analyst, asks each employee of an organization to sign a statement saying that they understand how their activities may be monitored. Which of the following BEST describes this statement? (Select TWO).

  A. Acceptable use policy
  B. Risk acceptance policy
  C. Privacy policy
  D. Email policy
  E. Security policy
  A. Acceptable use policy
  C. Privacy policy

• Question 195:

  Which of the following would Jane, an administrator, use to detect an unknown security vulnerability?

  A. Patch management
  B. Application fuzzing
  C. ID badge
  D. Application configuration baseline
  B. Application fuzzing

• Question 196:

  Which of the following wireless security measures can an attacker defeat by spoofing certain properties of their network interface card?

  A. WEP
  B. MAC filtering
  C. Disabled SSID broadcast
  D. TKIP
  B. MAC filtering

• Question 197:

  An administrator configures all wireless access points to make use of a new network certificate authority. Which of the following is being used?

  A. WEP
  B. LEAP
  C. EAP-TLS
  D. TKIP
  C. EAP-TLS

• Question 198:

  A security administrator develops a web page and limits input into their fields on the web page as well as filters special characters in output. The administrator is trying to prevent which of the following attacks?

  A. Spoofing
  B. XSS
  C. Fuzzing
  D. Pharming
  B. XSS

• Question 199:

  Joe, the systems administrator, is setting up a wireless network for his team's laptops only and needs to prevent other employees from accessing it. Which of the following would BEST address this?

  A. Disable default SSID broadcasting.
  B. Use WPA instead of WEP encryption.
  C. Lower the access point's power settings.
  D. Implement MAC filtering on the access point.
  D. Implement MAC filtering on the access point.

• Question 200:

  Which of the following technologies can store multi-tenant data with different security requirements?

  A. Data loss prevention
  B. Trusted platform module
  C. Hard drive encryption
  D. Cloud computing
  D. Cloud computing