CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 301:

  Which of the following is best practice to put at the end of an ACL?

  A. Implicit deny
  B. Time of day restrictions
  C. Implicit allow
  D. SNMP string
  A. Implicit deny

• Question 302:

  A user casually browsing the Internet is redirected to a warez site where a number of pop- ups appear. After clicking on a pop-up to complete a survey, a drive-by download occurs. Which of the following is MOST likely to be contained in the download?

  A. Backdoor
  B. Spyware
  C. Logic bomb
  D. DDoS
  E. Smurf
  B. Spyware

• Question 303:

  Input validation is an important security defense because it:

  A. rejects bad or malformed data.
  B. enables verbose error reporting.
  C. protects mis-configured web servers.
  D. prevents denial of service attacks.
  A. rejects bad or malformed data.

• Question 304:

  Joe, a security administrator, is concerned with users tailgating into the restricted areas. Given a limited budget, which of the following would BEST assist Joe with detecting this activity?

  A. Place a full-time guard at the entrance to confirm user identity.
  B. Install a camera and DVR at the entrance to monitor access.
  C. Revoke all proximity badge access to make users justify access.
  D. Install a motion detector near the entrance.
  B. Install a camera and DVR at the entrance to monitor access.

• Question 305:

  A company's security administrator wants to manage PKI for internal systems to help reduce costs. Which of the following is the FIRST step the security administrator should take?

  A. Install a registration server.
  B. Generate shared public and private keys.
  C. Install a CA.
  D. Establish a key escrow policy.
  C. Install a CA.

• Question 306:

  The finance department works with a bank which has recently had a number of cyber attacks. The finance department is concerned that the banking website certificates have been compromised. Which of the following can the finance department check to see if any of the bank's certificates are still valid?

  A. Bank's CRL
  B. Bank's private key
  C. Bank's key escrow
  D. Bank's recovery agent
  A. Bank's CRL

• Question 307:

  Which of the following describes the purpose of an MOU?

  A. Define interoperability requirements
  B. Define data backup process
  C. Define onboard/offboard procedure
  D. Define responsibilities of each party
  D. Define responsibilities of each party

• Question 308:

  Which of the following provides the LEAST availability?

  A. RAID 0
  B. RAID 1
  C. RAID 3
  D. RAID 5
  A. RAID 0

• Question 309:

  After a recent internal audit, the security administrator was tasked to ensure that all credentials must be changed within 90 days, cannot be repeated, and cannot contain any dictionary words or patterns. All credentials will remain enabled regardless of the number of attempts made. Which of the following types of user account options were enforced? (Select TWO).

  A. Recovery
  B. User assigned privileges
  C. Lockout
  D. Disablement E. Group based privileges
  F. Password expiration
  G. Password complexity
  F. Password expiration
  G. Password complexity

• Question 310:

  Which of the following malware types typically allows an attacker to monitor a user's computer, is characterized by a drive-by download, and requires no user interaction?

  A. Virus
  B. Logic bomb
  C. Spyware
  D. Adware
  C. Spyware