CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 611:

  Sara, a security administrator, is noticing a slow down in the wireless network response. Sara launches a wireless sniffer and sees a large number of ARP packets being sent to the AP. Which of the following type of attacks is underway?

  A. IV attack
  B. Interference
  C. Blue jacking
  D. Packet sniffing
  A. IV attack

• Question 612:

  The manager has a need to secure physical documents every night, since the company began enforcing the clean desk policy. The BEST solution would includE. (Select TWO).

  A. Fire- or water-proof safe.
  B. Department door locks.
  C. Proximity card.
  D. 24-hour security guard.
  E. Locking cabinets and drawers.
  A. Fire- or water-proof safe.
  E. Locking cabinets and drawers.

• Question 613:

  Which of the following functions provides an output which cannot be reversed and converts data into a string of characters?

  A. Hashing
  B. Stream ciphers
  C. Steganography
  D. Block ciphers
  A. Hashing

• Question 614:

  A security administrator wishes to change their wireless network so that IPSec is built into the protocol and NAT is no longer required for address range extension. Which of the following protocols should be used in this scenario?

  A. WPA2
  B. WPA
  C. IPv6
  D. IPv4
  C. IPv6

• Question 615:

  The Human Resources department has a parent shared folder setup on the server. There are two groups that have access, one called managers and one called staff. There are many sub folders under the parent shared folder, one is called payroll. The parent folder access control list propagates all subfolders and all subfolders inherit the parent permission. Which of the following is the quickest way to prevent the staff group from gaining access to the payroll folder?

  A. Remove the staff group from the payroll folder
  B. Implicit deny on the payroll folder for the staff group
  C. Implicit deny on the payroll folder for the managers group
  D. Remove inheritance from the payroll folder
  B. Implicit deny on the payroll folder for the staff group

• Question 616:

  Timestamps and sequence numbers act as countermeasures against which of the following types of attacks?

  A. Smurf
  B. DoS
  C. Vishing
  D. Replay
  D. Replay

• Question 617:

  A security administrator wants to test the reliability of an application which accepts user provided parameters. The administrator is concerned with data integrity and availability. Which of the following should be implemented to accomplish this task?

  A. Secure coding
  B. Fuzzing
  C. Exception handling
  D. Input validation
  B. Fuzzing

• Question 618:

  Which of the following is the BEST way to prevent Cross-Site Request Forgery (XSRF) attacks?

  A. Check the referrer field in the HTTP header
  B. Disable Flash content
  C. Use only cookies for authentication
  D. Use only HTTPS URLs
  A. Check the referrer field in the HTTP header

• Question 619:

  Requiring technicians to report spyware infections is a step in which of the following?

  A. Routine audits
  B. Change management
  C. Incident management
  D. Clean desk policy
  C. Incident management

• Question 620:

  A system administrator is notified by a staff member that their laptop has been lost. The laptop contains the user's digital certificate. Which of the following will help resolve the issue? (Select TWO).

  A. Revoke the digital certificate
  B. Mark the key as private and import it
  C. Restore the certificate using a CRL
  D. Issue a new digital certificate
  E. Restore the certificate using a recovery agent
  A. Revoke the digital certificate
  D. Issue a new digital certificate