CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 261:

  Matt, the network engineer, has been tasked with separating network traffic between virtual machines on a single hypervisor. Which of the following would he implement to BEST address this requirement? (Select TWO).

  A. Virtual switch
  B. NAT
  C. System partitioning
  D. Access-list
  E. Disable spanning tree
  F. VLAN
  A. Virtual switch
  F. VLAN

• Question 262:

  Pete, an employee, attempts to visit a popular social networking site but is blocked. Instead, a page is displayed notifying him that this site cannot be visited. Which of the following is MOST likely blocking Pete's access to this site?

  A. Internet content filter
  B. Firewall
  C. Proxy server
  D. Protocol analyzer
  A. Internet content filter

• Question 263:

  Which of the following security benefits would be gained by disabling a terminated user account rather than deleting it?

  A. Retention of user keys
  B. Increased logging on access attempts
  C. Retention of user directories and files
  D. Access to quarantined files
  A. Retention of user keys

• Question 264:

  An advantage of virtualizing servers, databases, and office applications is:

  A. Centralized management.
  B. Providing greater resources to users.
  C. Stronger access control.
  D. Decentralized management.
  A. Centralized management.

• Question 265:

  A security analyst implemented group-based privileges within the company active directory. Which of the following account management techniques should be undertaken regularly to ensure least privilege principles?

  A. Leverage role-based access controls.
  B. Perform user group clean-up.
  C. Verify smart card access controls.
  D. Verify SHA-256 for password hashes.
  B. Perform user group clean-up.

• Question 266:

  Pete, a network administrator, is implementing IPv6 in the DMZ. Which of the following protocols must he allow through the firewall to ensure the web servers can be reached via IPv6 from an IPv6 enabled Internet host?

  A. TCP port 443 and IP protocol 46
  B. TCP port 80 and TCP port 443
  C. TCP port 80 and ICMP
  D. TCP port 443 and SNMP
  C. TCP port 80 and ICMP

• Question 267:

  Which of the following BEST describes using a smart card and typing in a PIN to gain access to a system?

  A. Biometrics
  B. PKI
  C. Single factor authentication
  D. Multifactor authentication
  D. Multifactor authentication

• Question 268:

  Pete, an employee, needs a certificate to encrypt data. Which of the following would issue Pete a certificate?

  A. Certification authority
  B. Key escrow
  C. Certificate revocation list
  D. Registration authority
  A. Certification authority

• Question 269:

  Which of the following can be used to maintain a higher level of security in a SAN by allowing isolation of mis-configurations or faults?

  A. VLAN
  B. Protocol security
  C. Port security
  D. VSAN
  D. VSAN

• Question 270:

  An IT staff member was entering the datacenter when another person tried to piggyback into the datacenter as the door was opened. While the IT staff member attempted to question the other individual by politely asking to see their badge, the individual refused and ran off into the datacenter. Which of the following should the IT staff member do NEXT?

  A. Call the police while tracking the individual on the closed circuit television system
  B. Contact the forensics team for further analysis
  C. Chase the individual to determine where they are going and what they are doing
  D. Contact the onsite physical security team with a description of the individual
  D. Contact the onsite physical security team with a description of the individual