Free CompTIA JK0-022 Exam Dumps Questions & Answers

Which of the following BEST describes a SQL Injection attack?

• A.  The attacker overwhelms a system or application, causing it to crash, and then redirects the memory address to read from a location holding the payload.
• B.  The attacker attempts to have the receiving server pass information to a back-end database from which it can compromise the stored information.
• C.  The attacker attempts to have the receiving server run a payload using programming commonly found on web servers.
• D.  The attacker overwhelms a system or application, causing it to crash and bring the server down to cause an outage.

An information bank has been established to store contacts, phone numbers and other records.
An application running on UNIX would like to connect to this index server using port 88. Which of the following authentication services would this use this port by default?

• A.  Radius
• B.  LDAP
• C.  TACACS+
• D.  Kerberos

An overseas branch office within a company has many more technical and non-technical security incidents than other parts of the company. Which of the following management controls should be introduced to the branch office to improve their state of security?

• A.  Firewall, IPS and network segmentation
• B.  Initial baseline configuration snapshots
• C.  Event log analysis and incident response
• D.  Continuous security monitoring processes

An attacker used an undocumented and unknown application exploit to gain access to a file server. Which of the following BEST describes this type of attack?

• A.  Integer overflow
• B.  Zero-day
• C.  Cross-site scripting
• D.  Session hijacking
• E.  XML injection

Which of the following protocols encapsulates an IP packet with an additional IP header?

• A.  SFTP
• B.  SSL
• C.  IPSec
• D.  HTTPS