CompTIA JK0-022 Online Practice Questions and Exam Preparation

CompTIA JK0-022 Online Questions & Answers

• Question 881:

  A network administrator recently updated various network devices to ensure redundancy throughout the network. If an interface on any of the Layer 3 devices were to go down, traffic will still pass through another interface and the production environment would be unaffected. This type of configuration represents which of the following concepts?

  A. High availability
  B. Load balancing
  C. Backout contingency plan
  D. Clustering
  A. High availability

  ---

  High availability (HA) refers to the measures used to keep services and systems operational during an outage. In short, the goal is to provide all services to all users, where they need them and when they need them. With high availability, the goal is to have key services available 99.999 percent of the time (also known as five nines availability). Incorrect Answers: B: Load balancing is one of the ways that high availability can be obtained because it allows you to split the workload across multiple computers C: Backout contingency plan is a reversion from a change that had negative consequences. D: Clustering is done whenever you connect multiple computers to work and act together as a single server. It is meant to utilize parallel processing and can also add to redundancy. References: Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 32, 443

• Question 882:

  Which of the following would provide the STRONGEST encryption?

  A. Random one-time pad
  B. DES with a 56-bit key
  C. AES with a 256-bit key
  D. RSA with a 1024-bit key
  A. Random one-time pad

  ---

  One-time pads are the only truly completely secure cryptographic implementations. They are so secure for two reasons. First, they use a key that is as long as a plaintext message. That means there is no pattern in the key application for an attacker to use. Also, one-time pad keys are used only once and then discarded. So even if you could break a one-time pad cipher, that same key would never be used again, so knowledge of the key would be useless. Incorrect Answers: B, C, D: DES; AES, and RSA are less secure than one-time pads. References: Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 250, 251, 252

• Question 883:

  An administrator wishes to hide the network addresses of an internal network when connecting to the Internet. The MOST effective way to mask the network address of the users would be by passing the traffic through a:

  A. stateful firewall
  B. packet-filtering firewall
  C. NIPS
  D. NAT
  D. NAT

  ---

  NAT serves as a basic firewall by only allowing incoming traffic that is in response to an internal system's request. Incorrect Answers: A: A stateful inspection firewall is aware that any valid outbound communication will trigger a corresponding response or reply from the external entity. B: A packet filter firewall filters traffic based on basic identification items found in a network packet's header. These items include source and destination address, port numbers, and protocols used. C: Network-based intrusion prevention system (NIPS) monitors the entire network for suspicious traffic by analyzing protocol activity. References: http://en.wikipedia.org/wiki/Intrusion_prevention_system Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 6, 39.

• Question 884:

  A company replaces a number of devices with a mobile appliance, combining several functions. Which of the following descriptions fits this new implementation? (Select TWO).

  A. Cloud computing
  B. Virtualization
  C. All-in-one device
  D. Load balancing
  E. Single point of failure
  C. All-in-one device
  E. Single point of failure

  ---

  The disadvantages of combining everything into one include a potential single point of failure, and the dependence on the one vendor. The all in-one device represents a single point of failure risk being taken on. Incorrect Answers: A: Cloud computing refers to 3 service models defined as Software as a Service, Platform as a Service and Infrastructure as a Service (SaaS, PaaS, and IaaS), and four delivery models (private, public, community, and hybrid). It also offers ways of cost savings to its tenants being hosted by the cloud. It offers the ability to decrease costs, increase efficiency, and make the world a better place. B: Virtualization is the foundation for cloud computing. You cannot have cloud computing without virtualization. It makes it possible by abstracting the hardware and making it available to the virtual machines. The abstraction is done through the use of a hypervisor, which can be either Type I (bare metal) or Type II (hosted). D: Load balancing is a way of providing high availability by splitting the workload across multiple computers. References: Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 119, 196-202, 235

• Question 885:

  A software developer wants to prevent stored passwords from being easily decrypted. When the password is stored by the application, additional text is added to each password before the password is hashed. This technique is known as:

  A. Symmetric cryptography.
  B. Private key cryptography.
  C. Salting.
  D. Rainbow tables.
  C. Salting.

  ---

  Salting can be used to strengthen the hashing when the passwords were encrypted. Though hashing is a one-way algorithm it does not mean that it cannot be hacked. One method to hack a hash is though rainbow tables and salt is the counter measure to rainbow tables. With salt a password that you typed in and that has been encrypted with a hash will yield a letter combination other than what you actually types in when it is rainbow table attacked. Incorrect Answers: A: Symmetric cryptography refers to symmetric algorithms require both ends of an encrypted message to have the same key and processing algorithms. Symmetric algorithms generate a secret key that must be protected. A symmetric key, sometimes referred to as a secret key or private key, is a key that isn't disclosed to people who aren't authorized to use the encryption system. The disclosure of a private key breaches the security of the encryption system. B: Private Key cryptography is also known as symmetric cryptography. D: Rainbow tables can be used to break a hash. A rainbow table attack focuses on identifying a stored value. By using values in an existing table of hashed phrases or words (think of taking a word and hashing it every way you can imagine) and comparing them to values found. References: Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 249-250, 256

• Question 886:

  Pete's corporation has outsourced help desk services to a large provider. Management has published a procedure that requires all users, when receiving support, to call a special number. Users then need to enter the code provided to them

  by the help desk technician prior to allowing the technician to work on their PC.

  Which of the following does this procedure prevent?

  A. Collusion
  B. Impersonation
  C. Pharming
  D. Transitive Access
  B. Impersonation

  ---

  Impersonation is where a person, computer, software application or service pretends to be someone or something it's not. Impersonation is commonly non- maliciously used in client/server applications. However, it can also be used as a security threat. The procedure the users have to go through is to ensure that the technician who will have access to the computer is a genuine technician and not someone impersonating a technician. Incorrect Answers: A: In computer security, `collusion' is the practice of two or more people working together to commit fraud, data theft or some other malicious act. The procedure in the question is not designed to prevent collusion. Therefore, this answer is incorrect. C: Similar in nature to e-mail phishing, pharming seeks to obtain personal or private (usually financial related) information through domain spoofing. Rather than being spammed with malicious and mischievous e-mail requests for you to visit spoof Web sites which appear legitimate, pharming 'poisons' a DNS server by infusing false information into the DNS server, resulting in a user's request being redirected elsewhere. Your browser, however will show you are at the correct Web site, which makes pharming a bit more serious and more difficult to detect. Phishing attempts to scam people one at a time with an e-mail while pharming allows the scammers to target large groups of people at one time through domain spoofing. The procedure in the question is not designed to prevent pharming. Therefore, this answer is incorrect. D: With transitive access, one party (A) trusts another party (B). If the second party (B) trusts another party (C), then a relationship can exist where the first party (A) also may trust the third party (C). The procedure in the question is not designed to prevent transitive access. Therefore, this answer is incorrect. References: http://www.webopedia.com/TERM/P/pharming.html

• Question 887:

  Which of the following protocols is used to authenticate the client and server's digital certificate?

  A. PEAP
  B. DNS
  C. TLS
  D. ICMP
  C. TLS

  ---

  Transport Layer Security (TLS) is a cryptographic protocol designed to provide communications security over a computer network. It uses X.509 certificates and hence asymmetric cryptography to authenticate the counterparty with whom it is communicating, and to exchange a symmetric key. Incorrect Answers: A: Protected Extensible Authentication Protocol (PEAP) encapsulates EAP methods within a TLS tunnel that provides authentication and potentially encryption. B: Domain name system (DNS) is the hierarchical naming scheme used for public and private networks. D: ICMP is a protocol that is commonly used by tools such as ping, traceroute, and pathping. References: http://en.wikipedia.org/wiki/Transport_Layer_Security Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 42, 47, 61.

• Question 888:

  A company administrator has a firewall with an outside interface connected to the Internet and an inside interface connected to the corporate network. Which of the following should the administrator configure to redirect traffic destined for the default HTTP port on the outside interface to an internal server listening on port 8080?

  A. Create a dynamic PAT from port 80 on the outside interface to the internal interface on port 8080
  B. Create a dynamic NAT from port 8080 on the outside interface to the server IP address on port 80
  C. Create a static PAT from port 80 on the outside interface to the internal interface on port 8080
  D. Create a static PAT from port 8080 on the outside interface to the server IP address on port 80
  C. Create a static PAT from port 80 on the outside interface to the internal interface on port 8080

• Question 889:

  After recovering from a data breach in which customer data was lost, the legal team meets with the Chief Security Officer (CSO) to discuss ways to better protect the privacy of customer data.

  Which of the following controls support this goal?

  A. Contingency planning
  B. Encryption and stronger access control
  C. Hashing and non-repudiation
  D. Redundancy and fault tolerance
  B. Encryption and stronger access control

  ---

  Encryption is used to protect data/contents/documents. Access control refers to controlling who accesses any data/contents/documents and to exercise authorized control to the accessing of that data. Incorrect Answers: A: Contingency planning is part of a disaster-recovery plan. C: Hashing refers to the hash algorithms used in cryptography. Nonrepudiation prevents one party from denying actions they carried out. D: Redundancy and fault tolerance refers to the ability to sustain operation in the event of system and component failure. References: Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 155, 262, 291

• Question 890:

  A security manager requires fencing around the perimeter, and cipher locks on all entrances. The manager is concerned with which of the following security controls?

  A. Integrity
  B. Availability
  C. Confidentiality
  D. Safety
  D. Safety

  ---

  Fencing is used to increase physical security and safety. Locks are used to keep those who are unauthorized out. Incorrect Answers: A: Integrity means making sure that data has not been altered. B: Availability is the act of making sure that data and systems are available to authorized users. C: Confidentiality means preventing unauthorized users from accessing data. References: Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 401, 414