JK0-022 by CompTIA Valid Free Exam Practice Test

Question 1

A periodic update that corrects problems in one version of a product is called a

A. Overhaul B. Security update C. Hotfix D. Service pack

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

A new security analyst is given the task of determining whether any of the company's servers are vulnerable to a recently discovered attack on an old version of SSH. Which of the following is the quickest FIRST step toward determining the version of SSH running on these servers?

A. Banner grabbing B. Passive scanning C. Protocol analysis D. Penetration testing

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

The method to provide end users of IT systems and applications with requirements related to acceptable use, privacy, new threats and trends, and use of social networking is:

A. BYOD security training. B. Security awareness training. C. Role-based security training. D. Legal compliance training.

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

The Chief Security Officer (CSO) is concerned about misuse of company assets and wishes to determine who may be responsible. Which of the following would be the BEST course of action?

A. Implement a single sign-on application on equipment with sensitive data and high-profile shares. B. Create a single, shared user account for every system that is audited and logged based upon time of use. C. Separate employees into teams led by a person who acts as a single point of contact for observation purposes. D. Enact a policy that employees must use their vacation time in a staggered schedule.

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

A network consists of various remote sites that connect back to two main locations. Pete, the security administrator, needs to block TELNET access into the network. Which of the following, by default, would be the BEST choice to accomplish this goal?

A. Block port 23 on the network firewall B. Block port 23 on the L2 switch at each remote site C. Block port 25 on the network firewall D. Block port 25 on the L2 switch at each remote site

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

Which of the following is the default port for TFTP?

A. 21 B. 20 C. 69 D. 68

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 7

A security administrator is concerned about the strength of user's passwords. The company does not want to implement a password complexity policy. Which of the following can the security Administrator implement to mitigate the risk of an online password attack against users with weak passwords?

A. Increase the password history B. Decrease the account lockout time C. Shorten the password expiration period D. Increase the password length requirements

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 8

The string:
' or 1=1--
Represents which of the following?

A. Client-side attacks B. Bluejacking C. SQL Injection D. Rogue access point

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

CompTIA Academic/E2C Security+ Certification Exam Voucher Only - JK0-022 Exam Practice Test