CompTIA Security+ Certification - JK0-018 Exam Questions
QUESTION NO: 1
Highly sensitive data is stored in a database and is accessed by an application on a DMZ server. The disk drives on all servers are fully encrypted. Communication between the application server and end-users is also encrypted. Network ACLs prevent any connections to the database server except from the application server. Which of the following can still result in exposure of the sensitive data in the database server?
Highly sensitive data is stored in a database and is accessed by an application on a DMZ server. The disk drives on all servers are fully encrypted. Communication between the application server and end-users is also encrypted. Network ACLs prevent any connections to the database server except from the application server. Which of the following can still result in exposure of the sensitive data in the database server?
Correct Answer: B
QUESTION NO: 2
Due to limited resources, a company must reduce their hardware budget while still maintaining availability. Which of the following would MOST likely help them achieve their objectives?
Due to limited resources, a company must reduce their hardware budget while still maintaining availability. Which of the following would MOST likely help them achieve their objectives?
Correct Answer: A
QUESTION NO: 3
Which of the following BEST describes part of the PKI process?
Which of the following BEST describes part of the PKI process?
Correct Answer: B
QUESTION NO: 4
A database administrator contacts a security administrator to request firewall changes for a connection to a new internal application. The security administrator notices that the new application uses a port typically monopolized by a virus. The security administrator denies the request and suggests a new port or service be used to complete the application's task. Which of the following is the security administrator practicing in this example?
A database administrator contacts a security administrator to request firewall changes for a connection to a new internal application. The security administrator notices that the new application uses a port typically monopolized by a virus. The security administrator denies the request and suggests a new port or service be used to complete the application's task. Which of the following is the security administrator practicing in this example?
Correct Answer: D
QUESTION NO: 5
A malicious program modified entries in the LMHOSTS file of an infected system. Which of the following protocols would have been affected by this?
A malicious program modified entries in the LMHOSTS file of an infected system. Which of the following protocols would have been affected by this?
Correct Answer: D
QUESTION NO: 6
Which of the following policies is implemented in order to minimize data loss or theft?
Which of the following policies is implemented in order to minimize data loss or theft?
Correct Answer: C
QUESTION NO: 7
While previously recommended as a security measure, disabling SSID broadcast is not effective against most attackers because network SSIDs are:
While previously recommended as a security measure, disabling SSID broadcast is not effective against most attackers because network SSIDs are:
Correct Answer: B
QUESTION NO: 8
Pete, an employee, is terminated from the company and the legal department needs documents from his encrypted hard drive. Which of the following should be used to accomplish this task? (Select TWO).
Pete, an employee, is terminated from the company and the legal department needs documents from his encrypted hard drive. Which of the following should be used to accomplish this task? (Select TWO).
Correct Answer: A,D
QUESTION NO: 9
Which of the following application attacks is used to gain access to SEH?
Which of the following application attacks is used to gain access to SEH?
Correct Answer: C
QUESTION NO: 10
An encrypted message is sent using PKI from Sara, a client, to a customer. Sara claims she never sent the message. Which of the following aspects of PKI BEST ensures the identity of the sender?
An encrypted message is sent using PKI from Sara, a client, to a customer. Sara claims she never sent the message. Which of the following aspects of PKI BEST ensures the identity of the sender?
Correct Answer: D
QUESTION NO: 11
Which of the following BEST describes a demilitarized zone?
Which of the following BEST describes a demilitarized zone?
Correct Answer: C
