CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 251:

  The Chief Information Security Officer (CISO) has mandated that all IT systems with credit card data be segregated from the main corporate network to prevent unauthorized access and that access to the IT systems should be logged. Which of the following would BEST meet the CISO's requirements?

  A. Sniffers
  B. NIDS
  C. Firewalls
  D. Web proxies
  E. Layer 2 switches
  C. Firewalls

• Question 252:

  Which of the following devices would be MOST useful to ensure availability when there are a large number of requests to a certain website?

  A. Protocol analyzer
  B. Load balancer
  C. VPN concentrator
  D. Web security gateway
  B. Load balancer

• Question 253:

  Sara, a security engineer, is testing encryption ciphers for performance. Which of the following ciphers offers strong encryption with the FASTEST speed?

  A. 3DES
  B. Blowfish
  C. Serpent
  D. AES256
  B. Blowfish

• Question 254:

  An IT auditor tests an application as an authenticated user. This is an example of which of the following types of testing?

  A. Penetration
  B. White box
  C. Black box
  D. Gray box
  D. Gray box

• Question 255:

  A security administrator wants to check user password complexity. Which of the following is the BEST tool to use?

  A. Password history
  B. Password logging
  C. Password cracker
  D. Password hashing
  C. Password cracker

• Question 256:

  Jane, an IT administrator, is implementing security controls on a Microsoft Windows based kiosk used at a bank branch. This kiosk is used by the public for Internet banking. Which of the following controls will BEST protect the kiosk from general public users making system changes?

  A. Group policy implementation
  B. Warning banners
  C. Command shell restrictions
  D. Host based firewall
  A. Group policy implementation

• Question 257:

  Which of the following offers the LEAST amount of protection against data theft by USB drives?

  A. DLP
  B. Database encryption
  C. TPM
  D. Cloud computing
  D. Cloud computing

• Question 258:

  Which of the following protocols is vulnerable to man-in-the-middle attacks by NOT using end to end TLS encryption?

  A. HTTPS
  B. WEP
  C. WPA
  D. WPA 2
  C. WPA

• Question 259:

  Visitors entering a building are required to close the back door before the front door of the same entry room is open. Which of the following is being described?

  A. Tailgating
  B. Fencing
  C. Screening
  D. Mantrap
  D. Mantrap

• Question 260:

  After a recent security breach, the network administrator has been tasked to update and backup all router and switch configurations. The security administrator has been tasked to enforce stricter security policies. All users were forced to undergo additional user awareness training. All of these actions are due to which of the following types of risk mitigation strategies?

  A. Change management
  B. Implementing policies to prevent data loss
  C. User rights and permissions review
  D. Lessons learned
  D. Lessons learned