JK0-022 Exam Training Practice Tests (CompTIA Academic/E2C Security+ Certification Exam Voucher Only)]

Question 1

A company has proprietary mission critical devices connected to their network which are configured remotely by both employees and approved customers. The administrator wants to monitor device security without changing their baseline configuration. Which of the following should be implemented to secure the devices without risking availability?

A. Host-based firewall B. Honeypot C. IDS D. IPS

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

How must user accounts for exiting employees be handled?

A. Deleted if the employee has been terminated B. Disabled, regardless of the circumstances C. Disabled if the employee has been terminated D. Deleted, regardless of the circumstances

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Which of the following is a requirement when implementing PKI if data loss is unacceptable?

A. Web of trust B. Non-repudiation C. Key escrow D. Certificate revocation list

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

Certificates are used for: (Select TWO).

A. WEP encryption. B. Password hashing. C. Access control lists. D. Code signing. E. Client authentication.

Correct Answer: D,E

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

Which of the following allows an organization to store a sensitive PKI component with a trusted third party?

A. Public Key Infrastructure B. Trust model C. Private key D. Key escrow

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

Which of the following will help prevent smurf attacks?

A. Disabling unused services on the gateway firewall B. Allowing necessary UDP packets in and out of the network C. Disabling directed broadcast on border routers D. Flash the BIOS with the latest firmware

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

When an order was submitted via the corporate website, an administrator noted special characters (e.g., ";--" and "or 1=1 --") were input instead of the expected letters and numbers.
Which of the following is the MOST likely reason for the unusual results?

A. The user is sending malicious SQL injection strings in order to extract sensitive company or customer data via the website. B. The user is attempting to fuzz the web server by entering foreign language characters which are incompatible with the website. C. The user is attempting to highjack the web server session using an open-source browser. D. The user has been compromised by a cross-site scripting attack (XSS) and is part of a botnet performing DDoS attacks.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

A company has purchased an application that integrates into their enterprise user directory for account authentication. Users are still prompted to type in their usernames and passwords. Which of the following types of authentication is being utilized here?

A. Same sign-on B. Least privilege C. Separation of duties D. Single sign-on

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

Which of the following types of cryptography should be used when minimal overhead is necessary for a mobile device?

A. Elliptical curve cryptography B. Diffie-Hellman algorithm C. Block cipher D. Stream cipher

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

Ann is the data owner of financial records for a company. She has requested that she have the ability to assign read and write privileges to her folders. The network administrator is tasked with setting up the initial access control system and handing Ann's administrative capabilities. Which of the following systems should be deployed?

A. Mandatory B. Role-based C. Rule-based D. Discretionary

Correct Answer: D

Question 11

A malicious program modified entries in the LMHOSTS file of an infected system. Which of the following protocols would have been affected by this?

A. BGP B. DNS C. ICMP D. NetBIOS

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

CompTIA Academic/E2C Security+ Certification Exam Voucher Only - JK0-022 Exam Practice Test