CompTIA JK0-018 Online Practice Questions and Exam Preparation

CompTIA JK0-018 Online Questions & Answers

• Question 81:

  Which of the following should Jane, the security administrator, do FIRST when an employee reports the loss of a corporate mobile device?

  A. Remotely lock the device with a PIN
  B. Enable GPS location and record from the camera
  C. Remotely uninstall all company software
  D. Remotely initiate a device wipe
  D. Remotely initiate a device wipe

• Question 82:

  While opening an email attachment, Pete, a customer, receives an error that the application has encountered an unexpected issue and must be shut down. This could be an example of which of the following attacks?

  A. Cross-site scripting
  B. Buffer overflow
  C. Header manipulation
  D. Directory traversal
  B. Buffer overflow

• Question 83:

  Pete, a developer, writes an application. Jane, the security analyst, knows some things about the overall application but does not have all the details. Jane needs to review the software before it is released to production. Which of the following reviews should Jane conduct?

  A. Gray Box Testing
  B. Black Box Testing
  C. Business Impact Analysis
  D. White Box Testing
  A. Gray Box Testing

• Question 84:

  Several employee accounts appear to have been cracked by an attacker. Which of the following should the security administrator implement to mitigate password cracking attacks? (Select TWO).

  A. Increase password complexity
  B. Deploy an IDS to capture suspicious logins
  C. Implement password history
  D. Implement monitoring of logins
  E. Implement password expiration
  F. Increase password length
  A. Increase password complexity
  F. Increase password length

• Question 85:

  HOTSPOT

  Select the appropriate attack from each drop down list to label the corresponding illustrated attack.

  Instructions: Attacks may only be used once, and will disappear from drop down list if selected. When you have completed the simulation, please select the Done button to submit.

  Hot Area:

  

  

• Question 86:

  Which of the following should a security technician implement to identify untrusted certificates?

  A. CA
  B. PKI
  C. CRL
  D. Recovery agent
  C. CRL

• Question 87:

  The system administrator has been notified that many users are having difficulty connecting to the company's wireless network. They take a new laptop and physically go to the access point and connect with no problems. Which of the following would be the MOST likely cause?

  A. The certificate used to authenticate users has been compromised and revoked.
  B. Multiple war drivers in the parking lot have exhausted all available IPs from the pool to deny access.
  C. An attacker has gained access to the access point and has changed the encryption keys.
  D. An unauthorized access point has been configured to operate on the same channel.
  D. An unauthorized access point has been configured to operate on the same channel.

• Question 88:

  A security administrator has configured FTP in passive mode. Which of the following ports should the security administrator allow on the firewall by default?

  A. 20
  B. 21
  C. 22
  D. 23
  B. 21

• Question 89:

  A company has implemented PPTP as a VPN solution. Which of the following ports would need to be opened on the firewall in order for this VPN to function properly? (Select TWO).

  A. UDP 1723
  B. TCP 500
  C. TCP 1723
  D. UDP 47
  E. TCP 47
  C. TCP 1723
  D. UDP 47

• Question 90:

  Which of the following can be implemented in hardware or software to protect a web server from cross-site scripting attacks?

  A. Intrusion Detection System
  B. Flood Guard Protection
  C. Web Application Firewall
  D. URL Content Filter
  C. Web Application Firewall