CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 351:

  During a security assessment, an administrator wishes to see which services are running on a remote server. Which of the following should the administrator use?

  A. Port scanner
  B. Network sniffer
  C. Protocol analyzer
  D. Process list
  A. Port scanner

• Question 352:

  A program displays:

  ERROR: this program has caught an exception and will now terminate. Which of the following is MOST likely accomplished by the program's behavior?

  A. Operating system's integrity is maintained
  B. Program's availability is maintained
  C. Operating system's scalability is maintained
  D. User's confidentiality is maintained
  A. Operating system's integrity is maintained

• Question 353:

  A user ID and password together provide which of the following?

  A. Authorization
  B. Auditing
  C. Authentication
  D. Identification
  C. Authentication

• Question 354:

  Which of the following is a requirement when implementing PKI if data loss is unacceptable?

  A. Web of trust
  B. Non-repudiation
  C. Key escrow
  D. Certificate revocation list
  C. Key escrow

• Question 355:

  A security specialist has been asked to evaluate a corporate network by performing a vulnerability assessment. Which of the following will MOST likely be performed?

  A. Identify vulnerabilities, check applicability of vulnerabilities by passively testing security controls.
  B. Verify vulnerabilities exist, bypass security controls and exploit the vulnerabilities.
  C. Exploit security controls to determine vulnerabilities and mis-configurations.
  D. Bypass security controls and identify applicability of vulnerabilities by passively testing security controls.
  A. Identify vulnerabilities, check applicability of vulnerabilities by passively testing security controls.

• Question 356:

  Which of the following concepts allows an organization to group large numbers of servers together in order to deliver a common service?

  A. Clustering
  B. RAID
  C. Backup Redundancy
  D. Cold site
  A. Clustering

• Question 357:

  The system administrator notices that their application is no longer able to keep up with the large amounts of traffic their server is receiving daily. Several packets are dropped and sometimes the server is taken offline. Which of the following would be a possible solution to look into to ensure their application remains secure and available?

  A. Cloud computing
  B. Full disk encryption
  C. Data Loss Prevention
  D. HSM
  A. Cloud computing

• Question 358:

  ABC company has a lot of contractors working for them. The provisioning team does not always get notified that a contractor has left the company. Which of the following policies would prevent contractors from having access to systems in the event a contractor has left?

  A. Annual account review
  B. Account expiration policy
  C. Account lockout policy
  D. Account disablement
  B. Account expiration policy

• Question 359:

  Which of the following is the below pseudo-code an example of?

  IF VARIABLE (CONTAINS NUMBERS = TRUE) THEN EXIT

  A. Buffer overflow prevention
  B. Input validation
  C. CSRF prevention
  D. Cross-site scripting prevention
  B. Input validation

• Question 360:

  The security officer is preparing a read-only USB stick with a document of important personal phone numbers, vendor contacts, an MD5 program, and other tools to provide to employees. At which of the following points in an incident should the officer instruct employees to use this information?

  A. Business Impact Analysis
  B. First Responder
  C. Damage and Loss Control
  D. Contingency Planning
  B. First Responder