최신CompTIA Academic/E2C Security+ Certification Exam Voucher Only - JK0-022무료샘플문제
문제1
Digital certificates can be used to ensure which of the following? (Select TWO).
Digital certificates can be used to ensure which of the following? (Select TWO).
정답: B,D
설명: (KoreaDumps 회원만 볼 수 있음)
문제2
CORRECT TEXT
A security administrator discovers that an attack has been completed against a node on the corporate network. All available logs were collected and stored.
You must review all network logs to discover the scope of the attack, check the box of the node(s) that have been compromised and drag and drop the appropriate actions to complete the incident response on the network. The environment is a critical production environment; perform the LEAST disruptive actions on the network, while still performing the appropriate incid3nt responses.
Instructions: The web server, database server, IDS, and User PC are clickable. Check the box of the node(s) that have been compromised and drag and drop the appropriate actions to complete the incident response on the network. Not all actions may be used, and order is not important.
If at anytime you would like to bring back the initial state of the simulation, please select the Reset button.
When you have completed the simulation, please select the Done button to submit.
Once the simulation is submitted, please select the Next button to continue.
CORRECT TEXT
A security administrator discovers that an attack has been completed against a node on the corporate network. All available logs were collected and stored.
You must review all network logs to discover the scope of the attack, check the box of the node(s) that have been compromised and drag and drop the appropriate actions to complete the incident response on the network. The environment is a critical production environment; perform the LEAST disruptive actions on the network, while still performing the appropriate incid3nt responses.
Instructions: The web server, database server, IDS, and User PC are clickable. Check the box of the node(s) that have been compromised and drag and drop the appropriate actions to complete the incident response on the network. Not all actions may be used, and order is not important.
If at anytime you would like to bring back the initial state of the simulation, please select the Reset button.
When you have completed the simulation, please select the Done button to submit.
Once the simulation is submitted, please select the Next button to continue.
정답:
Database server was attacked, actions should be to capture network traffic and Chain of Custody.
Explanation:
IDS Server Log:
Web Server Log: Database Server Log: Users PC Log:
Explanation:
IDS Server Log:
Web Server Log: Database Server Log: Users PC Log:
문제3
A security administrator must implement all requirements in the following corporate policy: Passwords shall be protected against offline password brute force attacks. Passwords shall be protected against online password brute force attacks. Which of the following technical controls must be implemented to enforce the corporate policy? (Select THREE).
A security administrator must implement all requirements in the following corporate policy: Passwords shall be protected against offline password brute force attacks. Passwords shall be protected against online password brute force attacks. Which of the following technical controls must be implemented to enforce the corporate policy? (Select THREE).
정답: D,E,F
설명: (KoreaDumps 회원만 볼 수 있음)
문제4
How often, at a MINIMUM, should Sara, an administrator, review the accesses and rights of the users on her system?
How often, at a MINIMUM, should Sara, an administrator, review the accesses and rights of the users on her system?
정답: B
설명: (KoreaDumps 회원만 볼 수 있음)
문제5
Sara, a security analyst, is trying to prove to management what costs they could incur if their customer database was breached. This database contains 250 records with PII. Studies show that the cost per record for a breach is $300. The likelihood that their database would be breached in the next year is only 5%. Which of the following is the ALE that Sara should report to management for a security breach?
Sara, a security analyst, is trying to prove to management what costs they could incur if their customer database was breached. This database contains 250 records with PII. Studies show that the cost per record for a breach is $300. The likelihood that their database would be breached in the next year is only 5%. Which of the following is the ALE that Sara should report to management for a security breach?
정답: B
설명: (KoreaDumps 회원만 볼 수 있음)
문제6
An IT auditor tests an application as an authenticated user. This is an example of which of the following types of testing?
An IT auditor tests an application as an authenticated user. This is an example of which of the following types of testing?
정답: A
설명: (KoreaDumps 회원만 볼 수 있음)
문제7
Which of the following is used to certify intermediate authorities in a large PKI deployment?
Which of the following is used to certify intermediate authorities in a large PKI deployment?
정답: A
설명: (KoreaDumps 회원만 볼 수 있음)
문제8
Which of the following functions provides an output which cannot be reversed and converts data into a string of characters?
Which of the following functions provides an output which cannot be reversed and converts data into a string of characters?
정답: B
설명: (KoreaDumps 회원만 볼 수 있음)
문제9
Which of the following devices is used for the transparent security inspection of network traffic by redirecting user packets prior to sending the packets to the intended destination?
Which of the following devices is used for the transparent security inspection of network traffic by redirecting user packets prior to sending the packets to the intended destination?
정답: C
문제10
When reviewing a digital certificate for accuracy, which of the following would Matt, a security administrator, focus on to determine who affirms the identity of the certificate owner?
When reviewing a digital certificate for accuracy, which of the following would Matt, a security administrator, focus on to determine who affirms the identity of the certificate owner?
정답: A
설명: (KoreaDumps 회원만 볼 수 있음)
문제11
In Kerberos, the Ticket Granting Ticket (TGT) is used for which of the following?
In Kerberos, the Ticket Granting Ticket (TGT) is used for which of the following?
정답: A
설명: (KoreaDumps 회원만 볼 수 있음)
문제12
Which of the following describes the purpose of an MOU?
Which of the following describes the purpose of an MOU?
정답: D
설명: (KoreaDumps 회원만 볼 수 있음)
문제13
How must user accounts for exiting employees be handled?
How must user accounts for exiting employees be handled?
정답: C
설명: (KoreaDumps 회원만 볼 수 있음)
문제14
Layer 7 devices used to prevent specific types of html tags are called:
Layer 7 devices used to prevent specific types of html tags are called:
정답: B
설명: (KoreaDumps 회원만 볼 수 있음)
문제15
Ann, a security administrator at a call center, has been experiencing problems with users intentionally installing unapproved and occasionally malicious software on their computers. Due to the nature of their jobs, Ann cannot change their permissions. Which of the following would BEST alleviate her concerns?
Ann, a security administrator at a call center, has been experiencing problems with users intentionally installing unapproved and occasionally malicious software on their computers. Due to the nature of their jobs, Ann cannot change their permissions. Which of the following would BEST alleviate her concerns?
정답: A