CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 631:

  The security department has implemented a new laptop encryption product in the environment. The product requires one user name and password at the time of boot up and also another password after the operating system has finished loading. This setup is using which of the following authentication types?

  A. Two-factor authentication
  B. Single sign-on
  C. Multifactor authentication
  D. Single factor authentication
  D. Single factor authentication

• Question 632:

  A network device that protects an enterprise based only on source and destination addresses is BEST described as:

  A. IDS.
  B. ACL.
  C. Stateful packet filtering.
  D. Simple packet filtering.
  D. Simple packet filtering.

• Question 633:

  The security administrator is observing unusual network behavior from a workstation. The workstation is communicating with a known malicious destination over an encrypted tunnel. A full antivirus scan, with an updated antivirus definition file, does not show any signs of infection. Which of the following has happened on the workstation?

  A. Zero-day attack
  B. Known malware infection
  C. Session hijacking
  D. Cookie stealing
  A. Zero-day attack

• Question 634:

  Jane, an IT security technician, needs to create a way to secure company mobile devices. Which of the following BEST meets this need?

  A. Implement voice encryption, pop-up blockers, and host-based firewalls.
  B. Implement firewalls, network access control, and strong passwords.
  C. Implement screen locks, device encryption, and remote wipe capabilities.
  D. Implement application patch management, antivirus, and locking cabinets.
  C. Implement screen locks, device encryption, and remote wipe capabilities.

• Question 635:

  A network analyst received a number of reports that impersonation was taking place on the network. Session tokens were deployed to mitigate this issue and defend against which of the following attacks?

  A. Replay
  B. DDoS
  C. Smurf
  D. Ping of Death
  A. Replay

• Question 636:

  Which of the following wireless security technologies continuously supplies new keys for WEP?

  A. TKIP
  B. Mac filtering
  C. WPA2
  D. WPA
  A. TKIP

• Question 637:

  A Chief Information Security Officer (CISO) is tasked with outsourcing the analysis of security logs. These will need to still be reviewed on a regular basis to ensure the security of the company has not been breached. Which of the following cloud service options would support this requirement?

  A. SaaS
  B. MaaS
  C. IaaS
  D. PaaS
  B. MaaS

• Question 638:

  Which of the following ports should be used by a system administrator to securely manage a remote server?

  A. 22
  B. 69
  C. 137
  D. 445
  A. 22

• Question 639:

  Which statement is TRUE about the operation of a packet sniffer?

  A. It can only have one interface on a management network.
  B. They are required for firewall operation and stateful inspection.
  C. The Ethernet card must be placed in promiscuous mode.
  D. It must be placed on a single virtual LAN interface.
  C. The Ethernet card must be placed in promiscuous mode.

• Question 640:

  Disabling unnecessary services, restricting administrative access, and enabling auditing controls on a server are forms of which of the following?

  A. Application patch management
  B. Cross-site scripting prevention
  C. Creating a security baseline
  D. System hardening
  D. System hardening