CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 221:

  Which of the following is an attack vector that can cause extensive physical damage to a datacenter without physical access?

  A. CCTV system access
  B. Dial-up access
  C. Changing environmental controls
  D. Ping of death
  C. Changing environmental controls

• Question 222:

  The string:

  ` or 1=1--

  represents which of the following?

  A. Bluejacking
  B. Rogue access point
  C. SQL Injection
  D. Client-side attacks
  C. SQL Injection

• Question 223:

  Ann, a security technician, is reviewing the IDS log files. She notices a large number of alerts for multicast packets from the switches on the network. After investigation, she discovers that this is normal activity for her network. Which of the following BEST describes these results?

  A. True negatives
  B. True positives
  C. False positives
  D. False negatives
  C. False positives

• Question 224:

  An IT security technician is actively involved in identifying coding issues for her company. Which of the following is an application security technique that can be used to identify unknown weaknesses within the code?

  A. Vulnerability scanning
  B. Denial of service
  C. Fuzzing
  D. Port scanning
  C. Fuzzing

• Question 225:

  A network administrator has been tasked with securing the WLAN. Which of the following cryptographic products would be used to provide the MOST secure environment for the WLAN?

  A. WPA2 CCMP
  B. WPA
  C. WPA with MAC filtering
  D. WPA2 TKIP
  A. WPA2 CCMP

• Question 226:

  Ann, a technician, is attempting to establish a remote terminal session to an end user's computer using Kerberos authentication, but she cannot connect to the destination machine. Which of the following default ports should Ann ensure is open?

  A. 22
  B. 139
  C. 443
  D. 3389
  D. 3389

• Question 227:

  After a user performed a war driving attack, the network administrator noticed several similar markings where WiFi was available throughout the enterprise. Which of the following is the term used to describe these markings?

  A. IV attack
  B. War dialing
  C. Rogue access points
  D. War chalking
  D. War chalking

• Question 228:

  Pete, the compliance manager, wants to meet regulations. Pete would like certain ports blocked only on all computers that do credit card transactions. Which of the following should Pete implement to BEST achieve this goal?

  A. A host-based intrusion prevention system
  B. A host-based firewall
  C. Antivirus update system
  D. A network-based intrusion detection system
  B. A host-based firewall

• Question 229:

  Ann works at a small company and she is concerned that there is no oversight in the finance department; specifically, that Joe writes, signs and distributes paychecks, as well as other expenditures. Which of the following controls can she implement to address this concern?

  A. Mandatory vacations
  B. Time of day restrictions
  C. Least privilege
  D. Separation of duties
  D. Separation of duties

• Question 230:

  Which of the following components MUST be trusted by all parties in PKI?

  A. Key escrow
  B. CA
  C. Private key
  D. Recovery key
  B. CA