CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 551:

  A security administrator wants to get a real time look at what attackers are doing in the wild, hoping to lower the risk of zero-day attacks. Which of the following should be used to accomplish this goal?

  A. Penetration testing
  B. Honeynets
  C. Vulnerability scanning
  D. Baseline reporting
  B. Honeynets

• Question 552:

  The security administrator installed a newly generated SSL certificate onto the company web server. Due to a mis-configuration of the website, a downloadable file containing one of the pieces of the key was available to the public. It was verified that the disclosure did not require a reissue of the certificate. Which of the following was MOST likely compromised?

  A. The file containing the recovery agent's keys.
  B. The file containing the public key.
  C. The file containing the private key.
  D. The file containing the server's encrypted passwords.
  B. The file containing the public key.

• Question 553:

  The Chief Technical Officer (CTO) is worried about an increased amount of malware detected on end user's workstations. Which of the following technologies should be recommended to detect such anomalies?

  A. NIDS
  B. Web content filter
  C. Host-based IDS
  D. Web application firewall
  C. Host-based IDS

• Question 554:

  A security administrator notices large amounts of traffic within the network heading out to an external website. The website seems to be a fake bank site with a phone number that when called, asks for sensitive information. After further investigation, the security administrator notices that a fake link was sent to several users. This is an example of which of the following attacks?

  A. Vishing
  B. Phishing
  C. Whaling
  D. SPAM
  E. SPIM
  B. Phishing

• Question 555:

  Which of the following does full disk encryption prevent?

  A. Client side attacks
  B. Clear text access
  C. Database theft
  D. Network-based attacks
  B. Clear text access

• Question 556:

  Which of the following provides additional encryption strength by repeating the encryption process with additional keys?

  A. AES
  B. 3DES
  C. TwoFish
  D. Blowfish
  B. 3DES

• Question 557:

  Which of the following security awareness training is BEST suited for data owners who are concerned with protecting the confidentiality of their data?

  A. Social networking use training
  B. Personally owned device policy training
  C. Tailgating awareness policy training
  D. Information classification training
  D. Information classification training

• Question 558:

  Which of the following should Matt, a security administrator, include when encrypting smartphones? (Select TWO).

  A. Steganography images
  B. Internal memory
  C. Master boot records
  D. Removable memory cards
  E. Public keys
  B. Internal memory
  D. Removable memory cards

• Question 559:

  A database administrator contacts a security administrator to request firewall changes for a connection to a new internal application. The security administrator notices that the new application uses a port typically monopolized by a virus. The security administrator denies the request and suggests a new port or service be used to complete the application's task. Which of the following is the security administrator practicing in this example?

  A. Explicit deny
  B. Port security
  C. Access control lists
  D. Implicit deny
  C. Access control lists

• Question 560:

  When designing a new network infrastructure, a security administrator requests that the intranet web server be placed in an isolated area of the network for security purposes. Which of the following design elements would be implemented to comply with the security administrator's request?

  A. DMZ
  B. Cloud services
  C. Virtualization
  D. Sandboxing
  A. DMZ