CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 431:

  Mandatory vacations are a security control which can be used to uncover which of the following?

  A. Fraud committed by a system administrator
  B. Poor password security among users
  C. The need for additional security staff
  D. Software vulnerabilities in vendor code
  A. Fraud committed by a system administrator

• Question 432:

  Which of the following should be done before resetting a user's password due to expiration?

  A. Verify the user's domain membership.
  B. Verify the user's identity.
  C. Advise the user of new policies.
  D. Verify the proper group membership.
  B. Verify the user's identity.

• Question 433:

  A major security risk with co-mingling of hosts with different security requirements is:

  A. Security policy violations.
  B. Zombie attacks.
  C. Password compromises.
  D. Privilege creep.
  A. Security policy violations.

• Question 434:

  Digital certificates can be used to ensure which of the following? (Select TWO).

  A. Availability
  B. Confidentiality
  C. Verification
  D. Authorization
  E. Non-repudiation
  C. Verification
  E. Non-repudiation

• Question 435:

  Which of the following could a security administrator implement to mitigate the risk of tailgating for a large organization?

  A. Train employees on correct data disposal techniques and enforce policies.
  B. Only allow employees to enter or leave through one door at specified times of the day.
  C. Only allow employees to go on break one at a time and post security guards 24/7 at each entrance.
  D. Train employees on risks associated with social engineering attacks and enforce policies.
  D. Train employees on risks associated with social engineering attacks and enforce policies.

• Question 436:

  Which of the following can a security administrator implement on mobile devices that will help prevent unwanted people from viewing the data if the device is left unattended?

  A. Screen lock
  B. Voice encryption
  C. GPS tracking
  D. Device encryption
  A. Screen lock

• Question 437:

  An administrator connects VoIP phones to the same switch as the network PCs and printers. Which of the following would provide the BEST logical separation of these three device types while still allowing traffic between them via ACL?

  A. Create three VLANs on the switch connected to a router
  B. Define three subnets, configure each device to use their own dedicated IP address range, and then connect the network to a router
  C. Install a firewall and connect it to the switch
  D. Install a firewall and connect it to a dedicated switch for each device type
  A. Create three VLANs on the switch connected to a router

• Question 438:

  A system administrator attempts to ping a hostname and the response is 2001:4860:0:2001::68. Which of the following replies has the administrator received?

  A. The loopback address
  B. The local MAC address
  C. IPv4 address
  D. IPv6 address
  D. IPv6 address

• Question 439:

  Which of the following concepts defines the requirement for data availability?

  A. Authentication to RADIUS
  B. Non-repudiation of email messages
  C. Disaster recovery planning
  D. Encryption of email messages
  C. Disaster recovery planning

• Question 440:

  A review of the company's network traffic shows that most of the malware infections are caused by users visiting gambling and gaming websites. The security manager wants to implement a solution that will block these websites, scan all web traffic for signs of malware, and block the malware before it enters the company network. Which of the following is suited for this purpose?

  A. ACL
  B. IDS
  C. UTM
  D. Firewall
  C. UTM