CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 701:

  Which of the following passwords is the LEAST complex?

  A. MyTrain!45
  B. Mytr@in!!
  C. MyTr@in12
  D. MyTr@in#8
  B. Mytr@in!!

• Question 702:

  Which of the following mitigation strategies is established to reduce risk when performing updates to business critical systems?

  A. Incident management
  B. Server clustering
  C. Change management
  D. Forensic analysis
  C. Change management

• Question 703:

  Matt, a systems security engineer, is determining which credential-type authentication to use within a planned 802.1x deployment. He is looking for a method that does not require a client certificate, has a server side certificate, and uses TLS tunnels for encryption. Which credential-type authentication method BEST fits these requirements?

  A. EAP-TLS
  B. EAP-FAST
  C. PEAP-CHAP
  D. PEAP-MSCHAPv2
  D. PEAP-MSCHAPv2

• Question 704:

  Digital signatures are used for ensuring which of the following items? (Select TWO).

  A. Confidentiality
  B. Integrity
  C. Non-Repudiation
  D. Availability
  E. Algorithm strength
  B. Integrity
  C. Non-Repudiation

• Question 705:

  Two members of the finance department have access to sensitive information. The company is concerned they may work together to steal information. Which of the following controls could be implemented to discover if they are working together?

  A. Least privilege access
  B. Separation of duties
  C. Mandatory access control
  D. Mandatory vacations
  D. Mandatory vacations

• Question 706:

  Which of the following are restricted to 64-bit block sizes? (Select TWO).

  A. PGP
  B. DES
  C. AES256
  D. RSA
  E. 3DES
  F. AES
  B. DES
  E. 3DES

• Question 707:

  Which of the following concepts is a term that directly relates to customer privacy considerations?

  A. Data handling policies
  B. Personally identifiable information
  C. Information classification
  D. Clean desk policies
  B. Personally identifiable information

• Question 708:

  A security analyst has been informed that the development team has plans to develop an application which does not meet the company's password policy. Which of the following should be done NEXT?

  A. Contact the Chief Information Officer and ask them to change the company password policy so that the application is made compliant.
  B. Tell the application development manager to code the application to adhere to the company's password policy.
  C. Ask the application development manager to submit a risk acceptance memo so that the issue can be documented.
  D. Inform the Chief Information Officer of non-adherence to the security policy so that the developers can be reprimanded.
  B. Tell the application development manager to code the application to adhere to the company's password policy.

• Question 709:

  A router has a single Ethernet connection to a switch. In the router configuration, the Ethernet interface has three sub-interfaces, each configured with ACLs applied to them and 802.1q trunks. Which of the following is MOST likely the reason for the sub-interfaces?

  A. The network uses the subnet of 255.255.255.128.
  B. The switch has several VLANs configured on it.
  C. The sub-interfaces are configured for VoIP traffic.
  D. The sub-interfaces each implement quality of service.
  B. The switch has several VLANs configured on it.

• Question 710:

  A security administrator plans on replacing a critical business application in five years. Recently, there was a security flaw discovered in the application that will cause the IT department to manually re-enable user accounts each month at a cost of $2,000. Patching the application today would cost $140,000 and take two months to implement. Which of the following should the security administrator do in regards to the application?

  A. Avoid the risk to the user base allowing them to re-enable their own accounts
  B. Mitigate the risk by patching the application to increase security and saving money
  C. Transfer the risk replacing the application now instead of in five years
  D. Accept the risk and continue to enable the accounts each month saving money
  D. Accept the risk and continue to enable the accounts each month saving money