CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 731:

  Which of the following could cause a browser to display the message below?

  "The security certificate presented by this website was issued for a different website's address."

  A. The website certificate was issued by a different CA than what the browser recognizes in its trusted CAs.
  B. The website is using a wildcard certificate issued for the company's domain.
  C. HTTPS://127.0.01 was used instead of HTTPS://localhost.
  D. The website is using an expired self signed certificate.
  C. HTTPS://127.0.01 was used instead of HTTPS://localhost.

• Question 732:

  Which of the following helps to apply the proper security controls to information?

  A. Data classification
  B. Deduplication
  C. Clean desk policy
  D. Encryption
  A. Data classification

• Question 733:

  Matt, a security administrator, wants to configure all the switches and routers in the network in order to securely monitor their status. Which of the following protocols would he need to configure on each device?

  A. SMTP
  B. SNMPv3
  C. IPSec
  D. SNMP
  B. SNMPv3

• Question 734:

  Which of the following practices is used to mitigate a known security vulnerability?

  A. Application fuzzing
  B. Patch management
  C. Password cracking
  D. Auditing security logs
  B. Patch management

• Question 735:

  Which of the following can be performed when an element of the company policy cannot be enforced by technical means?

  A. Develop a set of standards
  B. Separation of duties
  C. Develop a privacy policy
  D. User training
  D. User training

• Question 736:

  Human Resources suspects an employee is accessing the employee salary database. The administrator is asked to find out who it is. In order to complete this task, which of the following is a security control that should be in place?

  A. Shared accounts should not be in use
  B. Account lockout should be enabled
  C. Privileges should be assigned to groups rather than individuals
  D. Time of day restrictions should be in use
  A. Shared accounts should not be in use

• Question 737:

  After visiting a website, a user receives an email thanking them for a purchase which they did not request. Upon investigation the security administrator sees the following source code in a pop-up window:

  Which of the following has MOST likely occurred?

  A. SQL injection
  B. Cookie stealing
  C. XSRF
  D. XSS
  C. XSRF

• Question 738:

  Jane, an administrator, needs to make sure the wireless network is not accessible from the parking area of their office. Which of the following would BEST help Jane when deploying a new access point?

  A. Placement of antenna
  B. Disabling the SSID
  C. Implementing WPA2
  D. Enabling the MAC filtering
  A. Placement of antenna

• Question 739:

  Joe, a security administrator, believes that a network breach has occurred in the datacenter as a result of a misconfigured router access list, allowing outside access to an SSH server. Which of the following should Joe search for in the log files?

  A. Failed authentication attempts
  B. Network ping sweeps
  C. Host port scans
  D. Connections to port 22
  D. Connections to port 22

• Question 740:

  Which of the following is an example of a false positive?

  A. Anti-virus identifies a benign application as malware.
  B. A biometric iris scanner rejects an authorized user wearing a new contact lens.
  C. A user account is locked out after the user mistypes the password too many times.
  D. The IDS does not identify a buffer overflow.
  A. Anti-virus identifies a benign application as malware.