CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 331:

  Which of the following cryptographic related browser settings allows an organization to communicate securely?

  A. SSL 3.0/TLS 1.0
  B. 3DES
  C. Trusted Sites
  D. HMAC
  A. SSL 3.0/TLS 1.0

• Question 332:

  Sara, a security architect, has developed a framework in which several authentication servers work together to increase processing power for an application. Which of the following does this represent?

  A. Warm site
  B. Load balancing
  C. Clustering
  D. RAID
  C. Clustering

• Question 333:

  Matt, a security analyst, needs to select an asymmetric encryption method that allows for the same level of encryption strength with a lower key length than is typically necessary. Which of the following encryption methods offers this capability?

  A. Twofish
  B. Diffie-Hellman
  C. ECC
  D. RSA
  C. ECC

• Question 334:

  Users are unable to connect to the web server at IP 192.168.0.20. Which of the following can be inferred of a firewall that is configured ONLY with the following ACL? PERMIT TCP ANY HOST 192.168.0.10 EQ 80 PERMIT TCP ANY HOST 192.168.0.10 EQ 443

  A. It implements stateful packet filtering.
  B. It implements bottom-up processing.
  C. It failed closed.
  D. It implements an implicit deny.
  D. It implements an implicit deny.

• Question 335:

  Which of the following is a best practice for error and exception handling?

  A. Log detailed exception but display generic error message
  B. Display detailed exception but log generic error message
  C. Log and display detailed error and exception messages
  D. Do not log or display error or exception messages
  A. Log detailed exception but display generic error message

• Question 336:

  The IT department has installed new wireless access points but discovers that the signal extends far into the parking lot. Which of the following actions should be taken to correct this?

  A. Disable the SSID broadcasting
  B. Configure the access points so that MAC filtering is not used
  C. Implement WEP encryption on the access points
  D. Lower the power for office coverage only
  D. Lower the power for office coverage only

• Question 337:

  If Organization A trusts Organization B and Organization B trusts Organization C, then Organization A trusts Organization C. Which of the following PKI concepts is this describing?

  A. Transitive trust
  B. Public key trust
  C. Certificate authority trust
  D. Domain level trust
  A. Transitive trust

• Question 338:

  A security analyst noticed a colleague typing the following command:

  `Telnet some-host 443'

  Which of the following was the colleague performing?

  A. A hacking attempt to the some-host web server with the purpose of achieving a distributed denial of service attack.
  B. A quick test to see if there is a service running on some-host TCP/443, which is being routed correctly and not blocked by a firewall.
  C. Trying to establish an insecure remote management session. The colleague should be using SSH or terminal services instead.
  D. A mistaken port being entered because telnet servers typically do not listen on port 443.
  B. A quick test to see if there is a service running on some-host TCP/443, which is being routed correctly and not blocked by a firewall.

• Question 339:

  A security administrator has been tasked to ensure access to all network equipment is controlled by a central server such as TACACS+. This type of implementation supports which of the following risk mitigation strategies?

  A. User rights and permissions review
  B. Change management
  C. Data loss prevention
  D. Implement procedures to prevent data theft
  A. User rights and permissions review

• Question 340:

  Which of the following authentication services should be replaced with a more secure alternative?

  A. RADIUS
  B. TACACS
  C. TACACS+
  D. XTACACS
  B. TACACS