CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 401:

  Recent data loss on financial servers due to security breaches forced the system administrator to harden their systems. Which of the following algorithms with transport encryption would be implemented to provide the MOST secure web connections to manage and access these servers?

  A. SSL
  B. TLS
  C. HTTP
  D. FTP
  B. TLS

• Question 402:

  To ensure proper evidence collection, which of the following steps should be preformed FIRST?

  A. Take hashes from the live system
  B. Review logs
  C. Capture the system image
  D. Copy all compromised files
  C. Capture the system image

• Question 403:

  During a recent user awareness and training session, a new staff member asks the Chief Information Security Officer (CISO) why the company does not allow personally owned devices into the company facilities. Which of the following represents how the CISO should respond?

  A. Company A views personally owned devices as creating an unacceptable risk to the organizational IT systems.
  B. Company A has begun to see zero-day attacks against personally owned devices disconnected from the network.
  C. Company A believes that staff members should be focused on their work while in the company's facilities.
  D. Company A has seen social engineering attacks against personally owned devices and does not allow their use.
  A. Company A views personally owned devices as creating an unacceptable risk to the organizational IT systems.

• Question 404:

  Which of the following is characterized by an attacker attempting to map out an organization's staff hierarchy in order to send targeted emails?

  A. Whaling
  B. Impersonation
  C. Privilege escalation
  D. Spear phishing
  A. Whaling

• Question 405:

  While rarely enforced, mandatory vacation policies are effective at uncovering:

  A. Help desk technicians with oversight by multiple supervisors and detailed quality control systems.
  B. Collusion between two employees who perform the same business function.
  C. Acts of incompetence by a systems engineer designing complex architectures as a member of a team.
  D. Acts of gross negligence on the part of system administrators with unfettered access to system and no oversight.
  D. Acts of gross negligence on the part of system administrators with unfettered access to system and no oversight.

• Question 406:

  Which of the following would Pete, a security administrator, MOST likely implement in order to allow employees to have secure remote access to certain internal network services such as file servers?

  A. Packet filtering firewall
  B. VPN gateway
  C. Switch
  D. Router
  B. VPN gateway

• Question 407:

  Which of the following is true about an email that was signed by User A and sent to User B?

  A. User A signed with User B's private key and User B verified with their own public key.
  B. User A signed with their own private key and User B verified with User A's public key.
  C. User A signed with User B's public key and User B verified with their own private key.
  D. User A signed with their own public key and User B verified with User A's private key.
  B. User A signed with their own private key and User B verified with User A's public key.

• Question 408:

  Environmental control measures include which of the following?

  A. Access list
  B. Lighting
  C. Motion detection
  D. EMI shielding
  D. EMI shielding

• Question 409:

  Which of the following uses port 22 by default? (Select THREE).

  A. SSH
  B. SSL
  C. TLS
  D. SFTP
  E. SCP
  F. FTPS
  G. SMTP
  H. SNMP
  A. SSH
  D. SFTP
  E. SCP

• Question 410:

  Which of the following is an important step in the initial stages of deploying a host-based firewall?

  A. Selecting identification versus authentication
  B. Determining the list of exceptions
  C. Choosing an encryption algorithm
  D. Setting time of day restrictions
  B. Determining the list of exceptions