CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 471:

  Identifying a list of all approved software on a system is a step in which of the following practices?

  A. Passively testing security controls
  B. Application hardening
  C. Host software baselining
  D. Client-side targeting
  C. Host software baselining

• Question 472:

  A CA is compromised and attacks start distributing maliciously signed software updates. Which of the following can be used to warn users about the malicious activity?

  A. Key escrow
  B. Private key verification
  C. Public key verification
  D. Certificate revocation list
  D. Certificate revocation list

• Question 473:

  Which of the following can be implemented if a security administrator wants only certain devices connecting to the wireless network?

  A. Disable SSID broadcast
  B. Install a RADIUS server
  C. Enable MAC filtering
  D. Lowering power levels on the AP
  C. Enable MAC filtering

• Question 474:

  After analyzing and correlating activity from multiple sensors, the security administrator has determined that a group of very well organized individuals from an enemy country is responsible for various attempts to breach the company network, through the use of very sophisticated and targeted attacks. Which of the following is this an example of?

  A. Privilege escalation
  B. Advanced persistent threat
  C. Malicious insider threat
  D. Spear phishing
  B. Advanced persistent threat

• Question 475:

  A customer service department has a business need to send high volumes of confidential information to customers electronically. All emails go through a DLP scanner. Which of the following is the BEST solution to meet the business needs and protect confidential information?

  A. Automatically encrypt impacted outgoing emails
  B. Automatically encrypt impacted incoming emails
  C. Monitor impacted outgoing emails
  D. Prevent impacted outgoing emails
  A. Automatically encrypt impacted outgoing emails

• Question 476:

  Which of the following is the MOST intrusive type of testing against a production system?

  A. White box testing
  B. War dialing
  C. Vulnerability testing
  D. Penetration testing
  D. Penetration testing

• Question 477:

  Which of the following types of wireless attacks would be used specifically to impersonate another WAP in order to gain unauthorized information from mobile users?

  A. IV attack
  B. Evil twin
  C. War driving
  D. Rogue access point
  B. Evil twin

• Question 478:

  Which of the following authentication services uses a ticket granting system to provide access?

  A. RADIUS
  B. LDAP
  C. TACACS+
  D. Kerberos
  D. Kerberos

• Question 479:

  A system administrator has noticed that users change their password many times to cycle back to the original password when their passwords expire. Which of the following would BEST prevent this behavior?

  A. Assign users passwords based upon job role.
  B. Enforce a minimum password age policy.
  C. Prevent users from choosing their own passwords.
  D. Increase the password expiration time frame.
  B. Enforce a minimum password age policy.

• Question 480:

  A security administrator implements access controls based on the security classification of the data and need-to-know information. Which of the following BEST describes this level of access control?

  A. Implicit deny
  B. Role-based Access Control
  C. Mandatory Access Controls
  D. Least privilege
  C. Mandatory Access Controls