Dumps4cert.com : Latest Dumps with PDF and VCE Files
2018 Aug CompTIA Official New Released JK0-018
100% Free Download! 100% Pass Guaranteed!

CompTIA Security E2C

Question No: 1 – (Topic 1)

Which of the following is the BEST approach to perform risk mitigation of user access control rights?

1. Conduct surveys and rank the results.

2. Perform routine user permission reviews.

3. Implement periodic vulnerability scanning.

4. Disable user accounts that have not been used within the last two weeks.

Answer: B

Question No: 2 – (Topic 1)

Which of the following devices is BEST suited for servers that need to store private keys?

1. Hardware security module

2. Hardened network firewall

3. Solid state disk drive

4. Hardened host firewall

Answer: A

Question No: 3 – (Topic 1)

All of the following are valid cryptographic hash functions EXCEPT:

1. RIPEMD.

2. RC4.

3. SHA-512.

4. MD4.

Answer: B

Question No: 4 – (Topic 1)

In regards to secure coding practices, why is input validation important?

1. It mitigates buffer overflow attacks.

2. It makes the code more readable.

3. It provides an application configuration baseline.

4. It meets gray box testing standards.

Answer: A

Question No: 5 – (Topic 1)

Which of the following would be used when a higher level of security is desired for encryption key storage?

1. TACACS

2. L2TP

3. LDAP

4. TPM

Answer: D

Question No: 6 – (Topic 1)

A security administrator needs to determine which system a particular user is trying to login to at various times of the day. Which of the following log types would the administrator check?

1. Firewall

2. Application

3. IDS

4. Security

Answer: D

Question No: 7 – (Topic 1)

Which of the following MUST be updated immediately when an employee is terminated to

prevent unauthorized access?

1. Registration

2. CA

3. CRL

4. Recovery agent

Answer: C

Question No: 8 – (Topic 1)

Employee badges are encoded with a private encryption key and specific personal information. The encoding is then used to provide access to the network. Which of the following describes this access control type?

1. Smartcard

2. Token

3. Discretionary access control

4. Mandatory access control

Answer: A

Question No: 9 – (Topic 1)

Which of the following devices would MOST likely have a DMZ interface?

1. Firewall

2. Switch

3. Load balancer

4. Proxy

Answer: A

Question No: 10 – (Topic 1)

Which of the following application security testing techniques is implemented when an automated system generates random input data?

1. Fuzzing

2. XSRF

3. Hardening

4. Input validation

Answer: A

100% Dumps4cert Free Download!
–JK0-018 PDF
100% Dumps4cert Pass Guaranteed!
–JK0-018 Dumps

	Dumps4cert	ExamCollection	Testking
Lowest Price Guarantee	Yes	No	No
Up-to-Dated	Yes	No	No
Real Questions	Yes	No	No
Explanation	Yes	No	No
PDF VCE	Yes	No	No
Free VCE Simulator	Yes	No	No
Instant Download	Yes	No	No