CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 651:

  Which of the following can Joe, a security administrator, implement on his network to capture attack details that are occurring while also protecting his production network?

  A. Security logs
  B. Protocol analyzer
  C. Audit logs
  D. Honeypot
  D. Honeypot

• Question 652:

  Users need to exchange a shared secret to begin communicating securely. Which of the following is another name for this symmetric key?

  A. Session Key
  B. Public Key
  C. Private Key
  D. Digital Signature
  A. Session Key

• Question 653:

  Which of the following can be used to mitigate risk if a mobile device is lost?

  A. Cable lock
  B. Transport encryption
  C. Voice encryption
  D. Strong passwords
  D. Strong passwords

• Question 654:

  To ensure compatibility with their flagship product, the security engineer is tasked to recommend an encryption cipher that will be compatible with the majority of third party software and hardware vendors. Which of the following should be recommended?

  A. SHA
  B. MD5
  C. Blowfish
  D. AES
  D. AES

• Question 655:

  Review the following diagram depicting communication between PC1 and PC2 on each side of a router. Analyze the network traffic logs which show communication between the two computers as captured by the computer with IP 10.2.2.10. DIAGRAM PC1 PC2 [192.168.1.30]--------[INSIDE 192.168.1.1 router OUTSIDE 10.2.2.1]---------[10.2.2.10] LOGS 10:30:22, SRC 10.2.2.1:3030, DST 10.2.2.10:80, SYN 10:30:23, SRC 10.2.2.10:80, DST 10.2.2.1:3030, SYN/ACK 10:30:24, SRC 10.2.2.1:3030, DST 10.2.2.10:80, ACK Given the above information, which of the following can be inferred about the above environment?

  A. 192.168.1.30 is a web server.
  B. The web server listens on a non-standard port.
  C. The router filters port 80 traffic.
  D. The router implements NAT.
  D. The router implements NAT.

• Question 656:

  The system administrator has deployed updated security controls for the network to limit risk of attack. The security manager is concerned that controls continue to function as intended to maintain appropriate security posture. Which of the following risk mitigation strategies is MOST important to the security manager?

  A. User permissions
  B. Policy enforcement
  C. Routine audits
  D. Change management
  C. Routine audits

• Question 657:

  Which of the following is the BEST reason to provide user awareness and training programs for organizational staff?

  A. To ensure proper use of social media
  B. To reduce organizational IT risk
  C. To detail business impact analyses
  D. To train staff on zero-days
  B. To reduce organizational IT risk

• Question 658:

  Which of the following is the MOST important step for preserving evidence during forensic procedures?

  A. Involve law enforcement
  B. Chain of custody
  C. Record the time of the incident
  D. Report within one hour of discovery
  B. Chain of custody

• Question 659:

  Pete needs to open ports on the firewall to allow for secure transmission of files. Which of the following ports should be opened on the firewall?

  A. TCP 23
  B. UDP 69
  C. TCP 22
  D. TCP 21
  C. TCP 22

• Question 660:

  The security administrator is analyzing a user's history file on a Unix server to determine if the user was attempting to break out of a rootjail. Which of the following lines in the user's history log shows evidence that the user attempted to escape the rootjail?

  A. cd ../../../../bin/bash
  B. whoami
  C. ls /root
  D. sudo -u root
  A. cd ../../../../bin/bash