CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 441:

  Sara, a security technician, has received notice that a vendor coming in for a presentation will require access to a server outside of the network. Currently, users are only able to access remote sites through a VPN connection. How could Sara BEST accommodate the vendor?

  A. Allow incoming IPSec traffic into the vendor's IP address.
  B. Set up a VPN account for the vendor, allowing access to the remote site.
  C. Turn off the firewall while the vendor is in the office, allowing access to the remote site.
  D. Write a firewall rule to allow the vendor to have access to the remote site.
  D. Write a firewall rule to allow the vendor to have access to the remote site.

• Question 442:

  Which of the following should Pete, a security manager, implement to reduce the risk of employees working in collusion to embezzle funds from their company?

  A. Privacy Policy
  B. Least Privilege
  C. Acceptable Use
  D. Mandatory Vacations
  D. Mandatory Vacations

• Question 443:

  Which of the following firewall rules only denies DNS zone transfers?

  A. deny udp any any port 53
  B. deny ip any any
  C. deny tcp any any port 53
  D. deny all dns packets
  C. deny tcp any any port 53

• Question 444:

  A security administrator has concerns about new types of media which allow for the mass distribution of personal comments to a select group of people. To mitigate the risks involved with this media, employees should receive training on which of the following?

  A. Peer to Peer
  B. Mobile devices
  C. Social networking
  D. Personally owned devices
  C. Social networking

• Question 445:

  A recent audit of a company's identity management system shows that 30% of active accounts belong to people no longer with the firm. Which of the following should be performed to help avoid this scenario? (Select TWO).

  A. Automatically disable accounts that have not been utilized for at least 10 days.
  B. Utilize automated provisioning and de-provisioning processes where possible.
  C. Request that employees provide a list of systems that they have access to prior to leaving the firm.
  D. Perform regular user account review / revalidation process.
  E. Implement a process where new account creations require management approval.
  B. Utilize automated provisioning and de-provisioning processes where possible.
  D. Perform regular user account review / revalidation process.

• Question 446:

  During which of the following phases of the Incident Response process should a security administrator define and implement general defense against malware?

  A. Lessons Learned
  B. Preparation
  C. Eradication
  D. Identification
  B. Preparation

• Question 447:

  You are the security administrator. You need to determine the types of security. Drag the items “Types of Security” to appropriate Security devices.

  

  Correct Answer. Use the following answer for this simulation task.
  Use the following answer for this simulation task.

• Question 448:

  An information bank has been established to store contacts, phone numbers and other records. A UNIX application needs to connect to the index server using port 389. Which of the following authentication services should be used on this port by default?

  A. RADIUS
  B. Kerberos
  C. TACACS+
  D. LDAP
  D. LDAP

• Question 449:

  Which of the following wireless protocols could be vulnerable to a brute-force password attack? (Select TWO).

  A. WPA2-PSK
  B. WPA ?EAP - TLS
  C. WPA2-CCMP
  D. WPA ?CCMP
  E. WPA - LEAP
  F. WEP
  A. WPA2-PSK
  E. WPA - LEAP

• Question 450:

  DRAG DROP

  You are the security administrator. You need to determine the types of security. Drag the items “Types of Security” to appropriate Security devices.

  Select and Place: