CompTIA JK0-022 - CompTIA Academic/E2C Security+ Certification Exam Voucher Only Exam

Page:    1 / 199   
Total 993 questions

Which of the following protocols is used to authenticate the client and servers digital certificate?

  • A. PEAP
  • B. DNS
  • C. TLS
  • D. ICMP


Answer : C

Explanation:
Transport Layer Security (TLS) is a cryptographic protocol designed to provide communications security over a computer network. It uses X.509 certificates and hence asymmetric cryptography to authenticate the counterparty with whom it is communicating, and to exchange a symmetric key.

Ann, a technician, is attempting to establish a remote terminal session to an end users computer using Kerberos authentication, but she cannot connect to the destination machine. Which of the following default ports should Ann ensure is open?

  • A. 22
  • B. 139
  • C. 443
  • D. 3389


Answer : D

Explanation:
Remote Desktop Protocol (RDP) uses TCP port 3389.

In intrusion detection system vernacular, which account is responsible for setting the security policy for an organization?

  • A. Supervisor
  • B. Administrator
  • C. Root
  • D. Director


Answer : B

Explanation:
The administrator is the person responsible for setting the security policy for an organization and is responsible for making decisions about the deployment and configuration of the IDS.

A review of the companys network traffic shows that most of the malware infections are caused by users visiting gambling and gaming websites. The security manager wants to implement a solution that will block these websites, scan all web traffic for signs of malware, and block the malware before it enters the company network. Which of the following is suited for this purpose?

  • A. ACL
  • B. IDS
  • C. UTM
  • D. Firewall


Answer : C

Explanation:
An all-in-one appliance, also known as Unified Threat Management (UTM) and Next
Generation Firewall (NGFW), is one that provides a good foundation for security. A variety is available; those that you should be familiar with for the exam fall under the categories of providing URL filtering, content inspection, or malware inspection.
Malware inspection is the use of a malware scanner to detect unwanted software content in network traffic. If malware is detected, it can be blocked or logged and/or trigger an alert.

Mike, a network administrator, has been asked to passively monitor network traffic to the companys sales websites. Which of the following would be BEST suited for this task?

  • A. HIDS
  • B. Firewall
  • C. NIPS
  • D. Spam filter


Answer : C

Explanation:
Network-based intrusion prevention system (NIPS) monitors the entire network for suspicious traffic by analyzing protocol activity.

Page:    1 / 199   
Total 993 questions