CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 211:

  Physical documents must be incinerated after a set retention period is reached. Which of the following attacks does this action remediate?

  A. Shoulder Surfing
  B. Dumpster Diving
  C. Phishing
  D. Impersonation
  B. Dumpster Diving

• Question 212:

  Which of the following should be performed to increase the availability of IP telephony by prioritizing traffic?

  A. Subnetting
  B. NAT
  C. Quality of service
  D. NAC
  C. Quality of service

• Question 213:

  End-user awareness training for handling sensitive personally identifiable information would include secure storage and transmission of customer:

  A. Date of birth.
  B. First and last name.
  C. Phone number.
  D. Employer name.
  A. Date of birth.

• Question 214:

  A system administrator is using a packet sniffer to troubleshoot remote authentication. The administrator detects a device trying to communicate to TCP port 49. Which of the following authentication methods is MOST likely being attempted?

  A. RADIUS
  B. TACACS+
  C. Kerberos
  D. LDAP
  B. TACACS+

• Question 215:

  Which of the following protocols allows for the LARGEST address space?

  A. IPX
  B. IPv4
  C. IPv6
  D. Appletalk
  C. IPv6

• Question 216:

  A network administrator uses an RFID card to enter the datacenter, a key to open the server rack, and a username and password to logon to a server. These are examples of which of the following?

  A. Multifactor authentication
  B. Single factor authentication
  C. Separation of duties
  D. Identification
  B. Single factor authentication

• Question 217:

  Key cards at a bank are not tied to individuals, but rather to organizational roles. After a break in, it becomes apparent that extra efforts must be taken to successfully pinpoint who exactly enters secure areas. Which of the following security measures can be put in place to mitigate the issue until a new key card system can be installed?

  A. Bollards
  B. Video surveillance
  C. Proximity readers
  D. Fencing
  B. Video surveillance

• Question 218:

  Which of the following describes purposefully injecting extra input during testing, possibly causing an application to crash?

  A. Input validation
  B. Exception handling
  C. Application hardening
  D. Fuzzing
  D. Fuzzing

• Question 219:

  Highly sensitive data is stored in a database and is accessed by an application on a DMZ server. The disk drives on all servers are fully encrypted. Communication between the application server and end-users is also encrypted. Network ACLs prevent any connections to the database server except from the application server. Which of the following can still result in exposure of the sensitive data in the database server?

  A. SQL Injection
  B. Theft of the physical database server
  C. Cookies
  D. Cross-site scripting
  A. SQL Injection

• Question 220:

  Which of the following protocols provides fast, unreliable file transfer?

  A. TFTP
  B. SFTP
  C. Telnet
  D. FTPS
  A. TFTP