CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 561:

  Which of the following security strategies allows a company to limit damage to internal systems and provides loss control?

  A. Restoration and recovery strategies
  B. Deterrent strategies
  C. Containment strategies
  D. Detection strategies
  C. Containment strategies

• Question 562:

  A security administrator notices that a specific network administrator is making unauthorized changes to the firewall every Saturday morning. Which of the following would be used to mitigate this issue so that only security administrators can make changes to the firewall?

  A. Mandatory vacations
  B. Job rotation
  C. Least privilege
  D. Time of day restrictions
  C. Least privilege

• Question 563:

  A database administrator receives a call on an outside telephone line from a person who states that they work for a well-known database vendor. The caller states there have been problems applying the newly released vulnerability patch for their database system, and asks what version is being used so that they can assist. Which of the following is the BEST action for the administrator to take?

  A. Thank the caller, report the contact to the manager, and contact the vendor support line to verify any reported patch issues.
  B. Obtain the vendor's email and phone number and call them back after identifying the number of systems affected by the patch.
  C. Give the caller the database version and patch level so that they can receive help applying the patch.
  D. Call the police to report the contact about the database systems, and then check system logs for attack attempts.
  A. Thank the caller, report the contact to the manager, and contact the vendor support line to verify any reported patch issues.

• Question 564:

  A perimeter survey finds that the wireless network within a facility is easily reachable outside of the physical perimeter. Which of the following should be adjusted to mitigate this risk?

  A. CCMP
  B. MAC filter
  C. SSID broadcast
  D. Power level controls
  D. Power level controls

• Question 565:

  A security administrator suspects that an increase in the amount of TFTP traffic on the network is due to unauthorized file transfers, and wants to configure a firewall to block all TFTP traffic. Which of the following would accomplish this task?

  A. Deny TCP port 68
  B. Deny TCP port 69
  C. Deny UDP port 68
  D. Deny UDP port 69
  D. Deny UDP port 69

• Question 566:

  Everyone in the accounting department has the ability to print and sign checks. Internal audit has asked that only one group of employees may print checks while only two other employees may sign the checks. Which of the following concepts would enforce this process?

  A. Separation of Duties
  B. Mandatory Vacations
  C. Discretionary Access Control
  D. Job Rotation
  A. Separation of Duties

• Question 567:

  A security analyst needs to logon to the console to perform maintenance on a remote server. Which of the following protocols would provide secure access?

  A. SCP
  B. SSH
  C. SFTP
  D. HTTPS
  B. SSH

• Question 568:

  Jane, a security administrator, has observed repeated attempts to break into a server. Which of the following is designed to stop an intrusion on a specific server?

  A. HIPS
  B. NIDS
  C. HIDS
  D. NIPS
  A. HIPS

• Question 569:

  An SSL/TLS private key is installed on a corporate web proxy in order to inspect HTTPS requests. Which of the following describes how this private key should be stored so that it is protected from theft?

  A. Implement full disk encryption
  B. Store on encrypted removable media
  C. Utilize a hardware security module
  D. Store on web proxy file system
  C. Utilize a hardware security module

• Question 570:

  Who should be contacted FIRST in the event of a security breach?

  A. Forensics analysis team
  B. Internal auditors
  C. Incident response team
  D. Software vendors
  C. Incident response team