CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 691:

  A technician has just installed a new firewall onto the network. Users are reporting that they cannot reach any website. Upon further investigation, the technician determines that websites can be reached by entering their IP addresses. Which of the following ports may have been closed to cause this issue?

  A. HTTP
  B. DHCP
  C. DNS
  D. NetBIOS
  C. DNS

• Question 692:

  Users require access to a certain server depending on their job function. Which of the following would be the MOST appropriate strategy for securing the server?

  A. Common access card
  B. Role based access control
  C. Discretionary access control
  D. Mandatory access control
  B. Role based access control

• Question 693:

  Which of the following is characterized by an attack against a mobile device?

  A. Evil twin
  B. Header manipulation
  C. Blue jacking
  D. Rogue AP
  C. Blue jacking

• Question 694:

  Sara, an employee, tethers her smartphone to her work PC to bypass the corporate web security gateway while connected to the LAN. While Sara is out at lunch her PC is compromised via the tethered connection and corporate data is stolen. Which of the following would BEST prevent this from occurring again?

  A. Disable the wireless access and implement strict router ACLs.
  B. Reduce restrictions on the corporate web security gateway.
  C. Security policy and threat awareness training.
  D. Perform user rights and permissions reviews.
  C. Security policy and threat awareness training.

• Question 695:

  A security administrator must implement all requirements in the following corporate policy:

  Passwords shall be protected against offline password brute force attacks. Passwords shall be protected against online password brute force attacks.

  Which of the following technical controls must be implemented to enforce the corporate policy? (Select THREE).

  A. Account lockout
  B. Account expiration
  C. Screen locks
  D. Password complexity
  E. Minimum password lifetime
  F. Minimum password length
  A. Account lockout
  D. Password complexity
  F. Minimum password length

• Question 696:

  Which of the following network devices is used to analyze traffic between various network interfaces?

  A. Proxies
  B. Firewalls
  C. Content inspection
  D. Sniffers
  D. Sniffers

• Question 697:

  Which of the following means of wireless authentication is easily vulnerable to spoofing?

  A. MAC Filtering
  B. WPA - LEAP
  C. WPA - PEAP
  D. Enabled SSID
  A. MAC Filtering

• Question 698:

  Which of the following protocols would be implemented to secure file transfers using SSL?

  A. TFTP
  B. SCP
  C. SFTP
  D. FTPS
  D. FTPS

• Question 699:

  Which of the following statements is MOST likely to be included in the security awareness training about P2P?

  A. P2P is always used to download copyrighted material.
  B. P2P can be used to improve computer system response.
  C. P2P may prevent viruses from entering the network.
  D. P2P may cause excessive network bandwidth.
  D. P2P may cause excessive network bandwidth.

• Question 700:

  Vendors typically ship software applications with security settings disabled by default to ensure a wide range of interoperability with other applications and devices. A security administrator should perform which of the following before deploying new software?

  A. Application white listing
  B. Network penetration testing
  C. Application hardening
  D. Input fuzzing testing
  C. Application hardening