CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 811:

  Encryption of data at rest is important for sensitive information because of which of the following?

  A. Facilitates tier 2 support, by preventing users from changing the OS
  B. Renders the recovery of data harder in the event of user password loss
  C. Allows the remote removal of data following eDiscovery requests
  D. Prevents data from being accessed following theft of physical equipment
  D. Prevents data from being accessed following theft of physical equipment

• Question 812:

  Which of the following can be utilized in order to provide temporary IT support during a disaster, where the organization sets aside funds for contingencies, but does not necessarily have a dedicated site to restore those services?

  A. Hot site
  B. Warm site
  C. Cold site
  D. Mobile site
  D. Mobile site

• Question 813:

  In which of the following scenarios is PKI LEAST hardened?

  A. The CRL is posted to a publicly accessible location.
  B. The recorded time offsets are developed with symmetric keys.
  C. A malicious CA certificate is loaded on all the clients.
  D. All public keys are accessed by an unauthorized user.
  C. A malicious CA certificate is loaded on all the clients.

• Question 814:

  Purchasing receives a phone call from a vendor asking for a payment over the phone. The phone number displayed on the caller ID matches the vendor's number. When the purchasing agent asks to call the vendor back, they are given a different phone number with a different area code. Which of the following attack types is this?

  A. Hoax
  B. Impersonation
  C. Spear phishing
  D. Whaling
  B. Impersonation

• Question 815:

  Joe analyzed the following log and determined the security team should implement which of the following as a mitigation method against further attempts? Host 192.168.1.123

  [00:00:01]Successful Login: 015 192.168.1.123 : local

  [00:00:03]Unsuccessful Login: 022 214.34.56.006 :RDP 192.168.1.124

  [00:00:04]UnSuccessful Login: 010 214.34.56.006 :RDP 192.168.1.124

  [00:00:07]UnSuccessful Login: 007 214.34.56.006 :RDP 192.168.1.124

  [00:00:08]UnSuccessful

  Login: 003 214.34.56.006 :RDP 192.168.1.124

  A. Reporting
  B. IDS
  C. Monitor system logs
  D. Hardening
  D. Hardening

• Question 816:

  Which of the following can BEST help prevent cross-site scripting attacks and buffer overflows on a production system?

  A. Input validation
  B. Network intrusion detection system
  C. Anomaly-based HIDS
  D. Peer review
  A. Input validation

• Question 817:

  A company wants to ensure that its hot site is prepared and functioning. Which of the following would be the BEST process to verify the backup datacenter is prepared for such a scenario?

  A. Site visit to the backup data center
  B. Disaster recovery plan review
  C. Disaster recovery exercise
  D. Restore from backup
  C. Disaster recovery exercise

• Question 818:

  Pete, a security administrator, has observed repeated attempts to break into the network. Which of the following is designed to stop an intrusion on the network?

  A. NIPS
  B. HIDS
  C. HIPS
  D. NIDS
  A. NIPS

• Question 819:

  A network administrator is responsible for securing applications against external attacks. Every month, the underlying operating system is updated. There is no process in place for other software updates. Which of the following processes

  could MOST effectively mitigate these risks?

  A. Application hardening
  B. Application change management
  C. Application patch management
  D. Application firewall review
  C. Application patch management

• Question 820:

  Which of the following data security techniques will allow Matt, an IT security technician, to encrypt a system with speed as its primary consideration?

  A. Hard drive encryption
  B. Infrastructure as a service
  C. Software based encryption
  D. Data loss prevention
  A. Hard drive encryption