CompTIA JK0-022 Online Practice Questions and Exam Preparation

CompTIA JK0-022 Online Questions & Answers

• Question 661:

  The datacenter manager is reviewing a problem with a humidity factor that is too low. Which of the following environmental problems may occur?

  A. EMI emanations
  B. Static electricity
  C. Condensation
  D. Dry-pipe fire suppression
  B. Static electricity

  ---

  Humidity control prevents the buildup of static electricity in the environment. If the humidity drops much below 50 percent, electronic components are extremely vulnerable to damage from electrostatic shock. Incorrect Answers: A: EMI emanations are a result of failed shielding not low humidity. C: Condensation is a result of a failed HVAC system D: Dry-pipe fire suppression refers to results when using either fire extinguishers or preventing fires. References: Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 383

• Question 662:

  Some customers have reported receiving an untrusted certificate warning when visiting the company's website. The administrator ensures that the certificate is not expired and that customers have trusted the original issuer of the certificate. Which of the following could be causing the problem?

  A. The intermediate CA certificates were not installed on the server.
  B. The certificate is not the correct type for a virtual server.
  C. The encryption key used in the certificate is too short.
  D. The client's browser is trying to negotiate SSL instead of TLS.
  A. The intermediate CA certificates were not installed on the server.

  ---

  In a hierarchical trust model, also known as a tree, a root CA at the top provides all of the information. The intermediate CAs are next in the hierarchy, and they trust only information provided by the root CA. The root CA also trusts intermediate CAs that are in their level in the hierarchy and none that aren't. Incorrect Answers: B: Nowhere in the question is mention made of virtual servers. C: An untrusted certificate warning is not indicative of too short encryption keys. D: Secure Sockets Layer (SSL) is used to establish a secure communication connection between two TCP-based machines. This protocol uses the handshake method of establishing a session, TLS is based on SSL and the browser would not issue an untrusted certificate warning. References: Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 75, 286

• Question 663:

  A periodic update that corrects problems in one version of a product is called a

  A. Hotfix
  B. Overhaul
  C. Service pack
  D. Security update
  C. Service pack

  ---

  A service pack is a collection of updates and hotfixes that address a number of software issues, as well as new software features. It is released periodically by the vendor. Incorrect Answers: A: A hotfix is a single-issue update that addresses a single software problem. It is released immediately in response to a newly discovered vulnerability. B: A system overhaul is not an update. It is the creation of a new version of the system. D: A security update is similar to a hotfix in that it addresses a single problem and is released immediately in response to a newly discovered vulnerability References: Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 220 Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 231

• Question 664:

  An organization does not want the wireless network name to be easily discovered. Which of the following software features should be configured on the access points?

  A. SSID broadcast
  B. MAC filter
  C. WPA2
  D. Antenna placement
  A. SSID broadcast

  ---

  Numerous networks broadcast their name (known as an SSID broadcast) to reveal their presence. Incorrect Answers: B: A MAC filter is a list of authorized wireless client interface MAC addresses that is used by a WAP to block access to all unauthorized devices. It does not, however, make finding the wireless network name any easier. C: WPA2 deals with encryption, not the wireless network name. D: This will increase or decrease signal strength and availability, but has nothing to do with the wireless network name being discovered. References: Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 183. Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, p 61.

• Question 665:

  A security technician would like to obscure sensitive data within a file so that it can be transferred without causing suspicion. Which of the following technologies would BEST be suited to accomplish this?

  A. Transport Encryption
  B. Stream Encryption
  C. Digital Signature
  D. Steganography
  D. Steganography

• Question 666:

  It is MOST important to make sure that the firewall is configured to do which of the following?

  A. Alert management of a possible intrusion.
  B. Deny all traffic and only permit by exception.
  C. Deny all traffic based on known signatures.
  D. Alert the administrator of a possible intrusion.
  B. Deny all traffic and only permit by exception.

• Question 667:

  A malicious individual is attempting to write too much data to an application's memory. Which of the following describes this type of attack?

  A. Zero-day
  B. SQL injection
  C. Buffer overflow
  D. XSRF
  C. Buffer overflow

  ---

  A buffer overflow occurs when a program or process tries to store more data in a buffer (temporary data storage area) than it was intended to hold. Since buffers are created to contain a finite amount of data, the extra information - which has to go somewhere - can overflow into adjacent buffers, corrupting or overwriting the valid data held in them. Although it may occur accidentally through programming error, buffer overflow is an increasingly common type of security attack on data integrity. In buffer overflow attacks, the extra data may contain codes designed to trigger specific actions, in effect sending new instructions to the attacked computer that could, for example, damage the user's files, change data, or disclose confidential information. Buffer overflow attacks are said to have arisen because the C programming language supplied the framework, and poor programming practices supplied the vulnerability. Incorrect Answers: A: A zero day vulnerability refers to a hole in software that is unknown to the vendor. This security hole is then exploited by hackers before the vendor becomes aware and hurries to fix it --this exploit is called a zero day attack. Uses of zero day attacks can include infiltrating malware, spyware or allowing unwanted access to user information. The term "zero day" refers to the unknown nature of the hole to those outside of the hackers, specifically, the developers. Once the vulnerability becomes known, a race begins for the developer, who must protect users. This type of attack does not attempt to write too much data to an application's memory. Therefore, this answer is incorrect. B: SQL injection is a code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). SQL injection must exploit a security vulnerability in an application's software, for example, when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly executed. SQL injection is mostly known as an attack vector for websites but can be used to attack any type of SQL database. This type of attack does not attempt to write too much data to an application's memory. Therefore, this answer is incorrect. D: Cross-Site Request Forgery--also known as XSRF, session riding, and one-click attack-- involves unauthorized commands coming from a trusted user to the website. This is often done without the user's knowledge, and it employs some type of social networking to pull it off. For example, assume that Evan and Spencer are chatting through Facebook. Spencer sends Evan a link to what he purports is a funny video that will crack him up. Evan clicks the link, but it actually brings up Evan's bank account information in another browser tab, takes a screenshot of it, closes the tab, and sends the information to Spencer. The reason the attack is possible is because Evan is a trusted user with his own bank. In order for it to work, Evan would need to have recently accessed that bank's website and have a cookie that had yet to expire. The best protection against cross-site scripting is to disable the running of scripts (and browser profi les). This type of attack does not attempt to write too much data to an application's memory. Therefore, this answer is incorrect. References: http://searchsecurity.techtarget.com/definition/buffer-overflow http://www.pctools.com/security-news/zero-day-vulnerability/ http://en.wikipedia.org/wiki/ SQL_injection Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 335

• Question 668:

  Which of the following concepts describes the use of a one way transformation in order to validate the integrity of a program?

  A. Hashing
  B. Key escrow
  C. Non-repudiation
  D. Steganography
  A. Hashing

  ---

  Hashing refers to the hash algorithms used in cryptography. It is used to store data, such as hash tables and its main characteristics are: It must be one-way it is not reversible. Variable-length input produces fixed-length output whether you have two characters or 2 million, the hash size is the same. The algorithm must have few or no collisions in hashing two different inputs does not give the same output. Incorrect Answers: B: Key escrow is used with nonrepudiation in that the third party in the two-key system may also need access keys. Under the conditions of key escrow, the keys needed to decrypt/encrypt data are held in an escrow account and made available if that third party requests it. The opposite of key escrow is a key recovery agent. C: Nonrepudiation prevents one party from denying actions that they carried out and in the electronic world nonrepudiation measures can be a two-key cryptographic system and the involvement of a third party to verify the validity. This respected third party `vouches' for the individuals in the two-key system. D: Steganography is the process of hiding a message in a medium such as a digital image, audio fi le, or other file. In theory, doing this prevents analysts from detecting the real message. You could encode your message in another fi le or message and use that fi le to hide your message. References: Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 248, 255, 262, 291

• Question 669:

  Company A submitted a bid on a contract to do work for Company B via email. Company B was insistent that the bid did not come from Company A. Which of the following would have assured that the bid was submitted by Company A?

  A. Steganography
  B. Hashing
  C. Encryption
  D. Digital Signatures
  D. Digital Signatures

  ---

  A digital signature is similar in function to a standard signature on a document. It validates the integrity of the message and the sender. The message is encrypted using the encryption system, and a second piece of information, the digital signature, is added to the message. Incorrect Answers: A: Steganography is the process of hiding a message in a medium such as a digital image, audio fi le, or other file. In theory, doing this prevents analysts from detecting the real message. You could encode your message in another fi le or message and use that fi le to hide your message. B: Hashing refers to the hash algorithms used in cryptography. It is used to store data, such as hash tables and its main characteristics are: It must be one-way it is not reversible. Variable-length input produces fixed-length output whether you has two characters of 2 million, the hash size is the same. The algorithm must have few or no collisions in hashing two different inputs does not give the same output. C: Encryption is too wide a concept since all companies would have their bids encrypted. Encryption is part of the process when making use of digital signatures. References: Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 248, 255, 261, 291

• Question 670:

  Which of the following uses port 22 by default? (Select THREE).

  A. SSH
  B. SSL
  C. TLS
  D. SFTP
  E. SCP
  F. FTPS
  G. SMTP
  H. SNMP
  A. SSH
  D. SFTP
  E. SCP

  ---

  SSH uses TCP port 22. All protocols encrypted by SSH, including SFTP, SHTTP, SCP, SExec, and slogin, also use TCP port 22. Incorrect Answers: B: SSL operates over TCP port 443. C: TLS can operate over TCP ports 443 and 80. F: FTPS uses ports 989 and 990. G: SMTP uses TCP port 25. H: SNMP makes use of UDP ports 161 and 162. References: Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 42, 45, 51. http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers