CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 381:

  Which of the following should be implemented to stop an attacker from mapping out addresses and/or devices on a network?

  A. Single sign on
  B. IPv6
  C. Secure zone transfers
  D. VoIP
  C. Secure zone transfers

• Question 382:

  A company is installing a new security measure that would allow one person at a time to be authenticated to an area without human interaction. Which of the following does this describe?

  A. Fencing
  B. Mantrap
  C. A guard
  D. Video surveillance
  B. Mantrap

• Question 383:

  A user has unknowingly gone to a fraudulent site. The security analyst notices the following system change on the user's host: Old `hosts' file:

  127.0.0.1 localhost New `hosts' file:

  127.0.0.1 localhost

  5.5.5.5 www.comptia.com

  Which of the following attacks has taken place?

  A. Spear phishing
  B. Pharming
  C. Phishing
  D. Vishing
  B. Pharming

• Question 384:

  The Chief Information Officer (CIO) has mandated web based Customer Relationship Management (CRM) business functions be moved offshore to reduce cost, reduce IT overheads, and improve availability. The Chief Risk Officer (CRO) has agreed with the CIO's direction but has mandated that key authentication systems be run within the organization's network. Which of the following would BEST meet the CIO and CRO's requirements?

  A. Software as a Service
  B. Infrastructure as a Service
  C. Platform as a Service
  D. Hosted virtualization service
  A. Software as a Service

• Question 385:

  Which of the following security devices can be replicated on a Linux based computer using IP tables to inspect and properly handle network based traffic?

  A. Sniffer
  B. Router
  C. Firewall
  D. Switch
  C. Firewall

• Question 386:

  Which of the following network architecture concepts is used to securely isolate at the boundary between networks?

  A. VLAN
  B. Subnetting
  C. DMZ
  D. NAT
  C. DMZ

• Question 387:

  Which of the following is a best practice when securing a switch from physical access?

  A. Disable unnecessary accounts
  B. Print baseline configuration
  C. Enable access lists
  D. Disable unused ports
  D. Disable unused ports

• Question 388:

  A user has received an email from an external source which asks for details on the company's new product line set for release in one month. The user has a detailed spec sheet but it is marked "Internal Proprietary Information". Which of the following should the user do NEXT?

  A. Contact their manager and request guidance on how to best move forward
  B. Contact the help desk and/or incident response team to determine next steps
  C. Provide the requestor with the email information since it will be released soon anyway
  D. Reply back to the requestor to gain their contact information and call them
  B. Contact the help desk and/or incident response team to determine next steps

• Question 389:

  In order to use a two-way trust model the security administrator MUST implement which of the following?

  A. DAC
  B. PKI
  C. HTTPS
  D. TPM
  B. PKI

• Question 390:

  Which of the following BEST describes a protective countermeasure for SQL injection?

  A. Eliminating cross-site scripting vulnerabilities
  B. Installing an IDS to monitor network traffic
  C. Validating user input in web applications
  D. Placing a firewall between the Internet and database servers
  C. Validating user input in web applications