CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 241:

  Which of the following controls can be used to prevent the disclosure of sensitive information stored on a mobile device's removable media in the event that the device is lost or stolen?

  A. Hashing
  B. Screen locks
  C. Device password
  D. Encryption
  D. Encryption

• Question 242:

  Which of the following concepts describes the use of a one way transformation in order to validate the integrity of a program?

  A. Hashing
  B. Key escrow
  C. Non-repudiation
  D. Steganography
  A. Hashing

• Question 243:

  The annual loss expectancy can be calculated by:

  A. Dividing the annualized rate of return by single loss expectancy.
  B. Multiplying the annualized rate of return and the single loss expectancy.
  C. Subtracting the single loss expectancy from the annualized rate of return.
  D. Adding the single loss expectancy and the annualized rate of return.
  B. Multiplying the annualized rate of return and the single loss expectancy.

• Question 244:

  Which of the following would the security engineer set as the subnet mask for the servers below to utilize host addresses on separate broadcast domains?

  Server 1: 192.168.100.6

  Server 2: 192.168.100.9

  Server 3: 192.169.100.20

  A. /24
  B. /27
  C. /28
  D. /29
  E. /30
  D. /29

• Question 245:

  When a communications plan is developed for disaster recovery and business continuity plans, the MOST relevant items to include would bE. (Select TWO).

  A. Methods and templates to respond to press requests, institutional and regulatory reporting requirements.
  B. Methods to exchange essential information to and from all response team members, employees, suppliers, and customers.
  C. Developed recovery strategies, test plans, post-test evaluation and update processes.
  D. Defined scenarios by type and scope of impact and dependencies, with quantification of loss potential.
  E. Methods to review and report on system logs, incident response, and incident handling.
  A. Methods and templates to respond to press requests, institutional and regulatory reporting requirements.
  B. Methods to exchange essential information to and from all response team members, employees, suppliers, and customers.

• Question 246:

  Layer 7 devices used to prevent specific types of html tags are called:

  A. Firewalls.
  B. Content filters.
  C. Routers.
  D. NIDS.
  B. Content filters.

• Question 247:

  A security analyst performs the following activities: monitors security logs, installs surveillance cameras and analyzes trend reports. Which of the following job responsibilities is the analyst performing? (Select TWO).

  A. Detect security incidents
  B. Reduce attack surface of systems
  C. Implement monitoring controls
  D. Hardening network devices
  E. Prevent unauthorized access
  A. Detect security incidents
  C. Implement monitoring controls

• Question 248:

  An organization is recovering data following a datacenter outage and determines that backup copies of files containing personal information were stored in an unsecure location, because the sensitivity was unknown. Which of the following activities should occur to prevent this in the future?

  A. Business continuity planning
  B. Quantitative assessment
  C. Data classification
  D. Qualitative assessment
  C. Data classification

• Question 249:

  Which of the following can be used on a smartphone to BEST protect against sensitive data loss if the device is stolen? (Select TWO).

  A. Tethering
  B. Screen lock PIN
  C. Remote wipe
  D. Email password
  E. GPS tracking
  F. Device encryption
  C. Remote wipe
  F. Device encryption

• Question 250:

  An IT security technician needs to establish host based security for company workstations. Which of the following will BEST meet this requirement?

  A. Implement IIS hardening by restricting service accounts.
  B. Implement database hardening by applying vendor guidelines.
  C. Implement perimeter firewall rules to restrict access.
  D. Implement OS hardening by applying GPOs.
  D. Implement OS hardening by applying GPOs.