CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 721:

  Which of the following attacks allows access to contact lists on cellular phones?

  A. War chalking
  B. Blue jacking
  C. Packet sniffing
  D. Bluesnarfing
  D. Bluesnarfing

• Question 722:

  An internal auditing team would like to strengthen the password policy to support special characters. Which of the following types of password controls would achieve this goal?

  A. Add reverse encryption
  B. Password complexity
  C. Increase password length
  D. Allow single sign on
  B. Password complexity

• Question 723:

  A security administrator is responsible for performing periodic reviews of user permission settings due to high turnover and internal transfers at a corporation. Which of the following BEST describes the procedure and security rationale for performing such reviews?

  A. Review all user permissions and group memberships to ensure only the minimum set of permissions required to perform a job is assigned.
  B. Review the permissions of all transferred users to ensure new permissions are granted so the employee can work effectively.
  C. Ensure all users have adequate permissions and appropriate group memberships, so the volume of help desk calls is reduced.
  D. Ensure former employee accounts have no permissions so that they cannot access any network file stores and resources.
  A. Review all user permissions and group memberships to ensure only the minimum set of permissions required to perform a job is assigned.

• Question 724:

  Which of the following preventative controls would be appropriate for responding to a directive to reduce the attack surface of a specific host?

  A. Installing anti-malware
  B. Implementing an IDS
  C. Taking a baseline configuration
  D. Disabling unnecessary services
  D. Disabling unnecessary services

• Question 725:

  During a server audit, a security administrator does not notice abnormal activity. However, a network security analyst notices connections to unauthorized ports from outside the corporate network. Using specialized tools, the network security analyst also notices hidden processes running. Which of the following has MOST likely been installed on the server?

  A. SPIM
  B. Backdoor
  C. Logic bomb
  D. Rootkit
  D. Rootkit

• Question 726:

  A password history value of three means which of the following?

  A. Three different passwords are used before one can be reused.
  B. A password cannot be reused once changed for three years.
  C. After three hours a password must be re-entered to continue.
  D. The server stores passwords in the database for three days.
  A. Three different passwords are used before one can be reused.

• Question 727:

  Which of the following can hide confidential or malicious data in the whitespace of other files (e.g. JPEGs)?

  A. Hashing
  B. Transport encryption
  C. Digital signatures
  D. Steganography
  D. Steganography

• Question 728:

  Which of the following MUST be updated immediately when an employee is terminated to prevent unauthorized access?

  A. Registration
  B. CA
  C. CRL
  D. Recovery agent
  C. CRL

• Question 729:

  Two programmers write a new secure application for the human resources department to store personal identifiable information. The programmers make the application available to themselves using an uncommon port along with an ID and password only they know. This is an example of which of the following?

  A. Root Kit
  B. Spyware
  C. Logic Bomb
  D. Backdoor
  D. Backdoor

• Question 730:

  An investigator recently discovered that an attacker placed a remotely accessible CCTV camera in a public area overlooking several Automatic Teller Machines (ATMs). It is also believed that user accounts belonging to ATM operators may have been compromised. Which of the following attacks has MOST likely taken place?

  A. Shoulder surfing
  B. Dumpster diving
  C. Whaling attack
  D. Vishing attack
  A. Shoulder surfing