CompTIA Security+ Certification (JK0-018) Free Practice Test
Question 1
Which of the following should Jane, a security administrator, perform before a hard drive is analyzed with forensics tools?
Correct Answer: C
Question 2
Which of the following would MOST likely belong in the DMZ? (Select TWO).
Correct Answer: B,C
Question 3
Which of the following can a security administrator implement on mobile devices that will help prevent unwanted people from viewing the data if the device is left unattended?
Correct Answer: B
Question 4
Which of the following is BEST carried out immediately after a security breach is discovered?
Correct Answer: C
Question 5
After visiting a website, a user receives an email thanking them for a purchase which they did not request. Upon investigation the security administrator sees the following source code in a pop-up window:
<HTML>
<body onload="document.getElementByID('badForm').submit()">
<form id="badForm" action="shoppingsite.company.com/purchase.php" method="post"
<input name="Perform Purchase" value="Perform Purchase" />
</form></body></HTML>
Which of the following has MOST likely occurred?
<HTML>
<body onload="document.getElementByID('badForm').submit()">
<form id="badForm" action="shoppingsite.company.com/purchase.php" method="post"
<input name="Perform Purchase" value="Perform Purchase" />
</form></body></HTML>
Which of the following has MOST likely occurred?
Correct Answer: C
Question 6
Which of the following network design elements allows for many internal devices to share one public IP address?
Correct Answer: D
Question 7
Jane, a security administrator, wants to harden the web server. Which of the following could she perform to accomplish this task?
Correct Answer: C
Question 8
A security administrator has concerns about new types of media which allow for the mass distribution of personal comments to a select group of people. To mitigate the risks involved with this media, employees should receive training on which of the following?
Correct Answer: B
Question 9
Pete, the system administrator, is reviewing his disaster recovery plans. He wishes to limit the downtime in the event of a disaster, but does not have the budget approval to implement or maintain an offsite location that ensures 99.99% availability. Which of the following would be Pete's BEST option?
Correct Answer: A
Question 10
Which of the following is synonymous with a server's certificate?
Correct Answer: A
Question 11
Pete, the system administrator, has concerns regarding users losing their company provided smartphones. Pete's focus is on equipment recovery. Which of the following BEST addresses his concerns?
Correct Answer: A
Question 12
Which of the following BEST describes using a smart card and typing in a PIN to gain access to a system?
Correct Answer: B
Question 13
A security administrator needs to determine which system a particular user is trying to login to at various times of the day. Which of the following log types would the administrator check?
Correct Answer: D
Question 14
Fuzzing is a security assessment technique that allows testers to analyze the behavior of software applications under which of the following conditions?
Correct Answer: D