JK0-018 Exam Details

  • Exam Code
    :JK0-018
  • Exam Name
    :CompTIA Security+ E2C (2011 Edition)
  • Certification
    :CompTIA Security+
  • Vendor
    :CompTIA
  • Total Questions
    :820 Q&As
  • Last Updated
    :Dec 09, 2021

CompTIA JK0-018 Online Questions & Answers

  • Question 341:

    Joe, a newly hired employee, has a corporate workstation that has been compromised due to several visits to P2P sites. Joe insisted that he was not aware of any company policy that prohibits the use of such web sites. Which of the following is the BEST method to deter employees from the improper use of the company's information systems?

    A. Acceptable Use Policy
    B. Privacy Policy
    C. Security Policy
    D. Human Resource Policy

  • Question 342:

    The security administrator at ABC company received the following log information from an external party:

    10:45:01 EST, SRC 10.4.3.7:3056, DST 8.4.2.1:80, ALERT, Directory traversal

    10:45:02 EST, SRC 10.4.3.7:3057, DST 8.4.2.1:80, ALERT, Account brute force

    10:45:03

    EST, SRC 10.4.3.7:3058, DST 8.4.2.1:80, ALERT, Port scan

    The external party is reporting attacks coming from abc-company.com. Which of the following is the reason the ABC company's security administrator is unable to determine the origin of the attack?

    A. A NIDS was used in place of a NIPS.
    B. The log is not in UTC.
    C. The external party uses a firewall.
    D. ABC company uses PAT.

  • Question 343:

    A recent intrusion has resulted in the need to perform incident response procedures. The incident response team has identified audit logs throughout the network and organizational systems which hold details of the security breach. Prior to this incident, a security consultant informed the company that they needed to implement an NTP server on the network. Which of the following is a problem that the incident response team will likely encounter during their assessment?

    A. Chain of custody
    B. Tracking man hours
    C. Record time offset
    D. Capture video traffic

  • Question 344:

    Which of the following MOST specifically defines the procedures to follow when scheduled system patching fails resulting in system outages?

    A. Risk transference
    B. Change management
    C. Configuration management
    D. Access control revalidation

  • Question 345:

    Which of the following technologies uses multiple devices to share work?

    A. Switching
    B. Load balancing
    C. RAID
    D. VPN concentrator

  • Question 346:

    Which of the following is an authentication and accounting service that uses TCP for connecting to routers and switches?

    A. DIAMETER
    B. RADIUS
    C. TACACS+
    D. Kerberos

  • Question 347:

    When verifying file integrity on a remote system that is bandwidth limited, which of the following tool combinations provides the STRONGEST confidence?

    A. MD5 and 3DES
    B. MD5 and SHA-1
    C. SHA-256 and RSA
    D. SHA-256 and AES

  • Question 348:

    Pete, the security administrator, has been notified by the IDS that the company website is under attack. Analysis of the web logs show the following string, indicating a user is trying to post a comment on the public bulletin board.

    INSERT INTO message `

    This is an example of which of the following?

    A. XSS attack
    B. XML injection attack
    C. Buffer overflow attack
    D. SQL injection attack

  • Question 349:

    A security administrator has installed a new KDC for the corporate environment. Which of the following authentication protocols is the security administrator planning to implement across the organization?

    A. LDAP
    B. RADIUS
    C. Kerberos
    D. XTACACS

  • Question 350:

    Which of the following services are used to support authentication services for several local devices from a central location without the use of tokens?

    A. TACACS+
    B. Smartcards
    C. Biometrics
    D. Kerberos

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only CompTIA exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your JK0-018 exam preparations and CompTIA certification application, do not hesitate to visit our Vcedump.com to find your solutions here.