CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 641:

  Which of the following will allow Pete, a security analyst, to trigger a security alert because of a tracking cookie?

  A. Network based firewall
  B. Anti-spam software
  C. Host based firewall
  D. Anti-spyware software
  D. Anti-spyware software

• Question 642:

  An auditor's report discovered several accounts with no activity for over 60 days. The accounts were later identified as contractors' accounts who would be returning in three months and would need to resume the activities. Which of the following would mitigate and secure the auditors finding?

  A. Disable unnecessary contractor accounts and inform the auditor of the update.
  B. Reset contractor accounts and inform the auditor of the update.
  C. Inform the auditor that the accounts belong to the contractors.
  D. Delete contractor accounts and inform the auditor of the update.
  A. Disable unnecessary contractor accounts and inform the auditor of the update.

• Question 643:

  A company replaces a number of devices with a mobile appliance, combining several functions. Which of the following descriptions fits this new implementation? (Select TWO).

  A. Cloud computing
  B. Virtualization
  C. All-in-one device
  D. Load balancing
  E. Single point of failure
  C. All-in-one device
  E. Single point of failure

• Question 644:

  Which of the following is a measure of biometrics performance which rates the ability of a system to correctly authenticate an authorized user?

  A. Failure to capture
  B. Type II
  C. Mean time to register
  D. Template capacity
  B. Type II

• Question 645:

  Which of the following identifies certificates that have been compromised or suspected of being compromised?

  A. Certificate revocation list
  B. Access control list
  C. Key escrow registry
  D. Certificate authority
  A. Certificate revocation list

• Question 646:

  Configuring the mode, encryption methods, and security associations are part of which of the following?

  A. IPSec
  B. Full disk encryption
  C. 802.1x
  D. PKI
  A. IPSec

• Question 647:

  The security manager received a report that an employee was involved in illegal activity and has saved data to a workstation's hard drive. During the investigation, local law enforcement's criminal division confiscates the hard drive as evidence. Which of the following forensic procedures is involved?

  A. Chain of custody
  B. System image
  C. Take hashes
  D. Order of volatility
  A. Chain of custody

• Question 648:

  Which of the following secure file transfer methods uses port 22 by default?

  A. FTPS
  B. SFTP
  C. SSL
  D. S/MIME
  B. SFTP

• Question 649:

  When an order was submitted via the corporate website, an administrator noted special characters (e.g., ";--" and "or 1=1 --") were input instead of the expected letters and numbers. Which of the following is the MOST likely reason for the unusual results?

  A. The user is attempting to highjack the web server session using an open-source browser.
  B. The user has been compromised by a cross-site scripting attack (XSS) and is part of a botnet performing DDoS attacks.
  C. The user is attempting to fuzz the web server by entering foreign language characters which are incompatible with the website.
  D. The user is sending malicious SQL injection strings in order to extract sensitive company or customer data via the website.
  D. The user is sending malicious SQL injection strings in order to extract sensitive company or customer data via the website.

• Question 650:

  Which of the following must a security administrator implement to isolate public facing servers from both the corporate network and the Internet?

  A. NAC
  B. IPSec
  C. DMZ
  D. NAT
  C. DMZ