CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 291:

  A process in which the functionality of an application is tested without any knowledge of the internal mechanisms of the application is known as:

  A. Black box testing
  B. White box testing
  C. Black hat testing
  D. Gray box testing
  A. Black box testing

• Question 292:

  A server administrator notes that a legacy application often stops running due to a memory error. When reviewing the debugging logs, they notice code being run calling an internal process to exploit the machine. Which of the following attacks does this describe?

  A. Zero-day
  B. Buffer overflow
  C. Cross site scripting
  D. Malicious add-on
  B. Buffer overflow

• Question 293:

  A security administrator is reviewing the below output from a password auditing tool:

  P@ss.

  @pW1.

  S3cU4

  Which of the following additional policies should be implemented based on the tool's output?

  A. Password age
  B. Password history
  C. Password length
  D. Password complexity
  C. Password length

• Question 294:

  A user has forgotten their account password. Which of the following is the BEST recovery strategy?

  A. Upgrade the authentication system to use biometrics instead.
  B. Temporarily disable password complexity requirements.
  C. Set a temporary password that expires upon first use.
  D. Retrieve the user password from the credentials database.
  C. Set a temporary password that expires upon first use.

• Question 295:

  Which of the following BEST explains the use of an HSM within the company servers?

  A. Thumb drives present a significant threat which is mitigated by HSM.
  B. Software encryption can perform multiple functions required by HSM.
  C. Data loss by removable media can be prevented with DLP.
  D. Hardware encryption is faster than software encryption.
  D. Hardware encryption is faster than software encryption.

• Question 296:

  A network administrator noticed various chain messages have been received by the company. Which of the following security controls would need to be implemented to mitigate this issue?

  A. Anti-spam
  B. Antivirus
  C. Host-based firewalls
  D. Anti-spyware
  A. Anti-spam

• Question 297:

  A supervisor in the human resources department has been given additional job duties in the accounting department. Part of their new duties will be to check the daily balance sheet calculations on spreadsheets that are restricted to the accounting group. In which of the following ways should the account be handled?

  A. The supervisor should be allowed to have access to the spreadsheet files, and their membership in the human resources group should be terminated.
  B. The supervisor should be removed from the human resources group and added to the accounting group.
  C. The supervisor should be added to the accounting group while maintaining their membership in the human resources group.
  D. The supervisor should only maintain membership in the human resources group.
  C. The supervisor should be added to the accounting group while maintaining their membership in the human resources group.

• Question 298:

  A security administrator forgets their card to access the server room. The administrator asks a co-worker if they could use their card for the day. Which of the following is the administrator using to gain access to the server room?

  A. Man-in-the-middle
  B. Tailgating
  C. Impersonation
  D. Spoofing
  C. Impersonation

• Question 299:

  After an assessment, auditors recommended that an application hosting company should contract with additional data providers for redundant high speed Internet connections. Which of the following is MOST likely the reason for this recommendation? (Select TWO).

  A. To allow load balancing for cloud support
  B. To allow for business continuity if one provider goes out of business
  C. To eliminate a single point of failure
  D. To allow for a hot site in case of disaster
  E. To improve intranet communication speeds
  B. To allow for business continuity if one provider goes out of business
  C. To eliminate a single point of failure

• Question 300:

  A security administrator wishes to increase the security of the wireless network. Which of the following BEST addresses this concern?

  A. Change the encryption from TKIP-based to CCMP-based.
  B. Set all nearby access points to operate on the same channel.
  C. Configure the access point to use WEP instead of WPA2.
  D. Enable all access points to broadcast their SSIDs.
  A. Change the encryption from TKIP-based to CCMP-based.