CheckPoint 156-110 Online Practice Questions and Exam Preparation

CheckPoint 156-110 Online Questions & Answers

• Question 1:

  Which of the following represents a valid reason for testing a patch on a nonproduction system, before applying it to a production system?

  A. Patches may re-enable services previously disabled.
  B. Patches are a kind of virus.
  C. Patches always overwrite user data.
  D. Only patches on vendor-pressed CDs can be trusted.
  E. Patches usually break important system functionality.
  A. Patches may re-enable services previously disabled.

• Question 2:

  Who should have physical access to network-connectivity devices and corporate servers?

  A. Customers and clients
  B. Accounting, information-technology, and auditing staff
  C. Managers and C-level executives
  D. Only appropriate information-technology personnel
  E. Only the maintenance staff
  D. Only appropriate information-technology personnel

• Question 3:

  A(n) _______________ is an abstract machine, which mediates all access subjects have to objects.

  A. ACL
  B. Reference monitor
  C. State machine
  D. TCB
  E. Router
  B. Reference monitor

• Question 4:

  Why should user populations be segmented?

  A. To allow resources to be shared among employees
  B. To allow appropriate collaboration, and prevent inappropriate resource sharing
  C. To prevent appropriate collaboration
  D. To provide authentication services
  E. To prevent the generation of audit trails from gateway devices
  B. To allow appropriate collaboration, and prevent inappropriate resource sharing

• Question 5:

  What is the purpose of resource isolation?

  A. To reduce the level of broadcast traffic on physical segments.
  B. To ensure that anyone accessing a resource has appropriate integrity.
  C. To automate the creation of access control lists and Trusted Computing Bases.
  D. To enforce access controls, and clearly separate resources from each other.
  E. To make people buy more computers than they really need.
  D. To enforce access controls, and clearly separate resources from each other.

• Question 6:

  Which of the following are appropriate uses of asymmetric encryption? (Choose THREE.)

  A. Authentication
  B. Secure key-exchange mechanisms
  C. Public Web site access
  D. Data-integrity checking
  E. Sneaker net
  A. Authentication
  B. Secure key-exchange mechanisms
  D. Data-integrity checking

• Question 7:

  _________________ is a type of cryptography, where letters of an original message are systematically rearranged into another sequence.

  A. Symmetric-key exchange
  B. Steganography
  C. Transposition cipher
  D. Asymmetric-key encryption
  E. Simple substitution cipher
  C. Transposition cipher

• Question 8:

  Which encryption algorithm has the highest bit strength?

  A. AES
  B. Blowfish
  C. DES
  D. CAST
  E. Triple DES
  A. AES

• Question 9:

  Which of the following equations results in the Single Loss Expectancy for an asset?

  A. Asset Value x % Of Loss From Realized Exposure
  B. Asset Value x % Of Loss From Realized Threat
  C. Annualized Rate of Occurrence / Annualized Loss Expectancy
  D. Asset Value x % Of Loss From Realized Vulnerability
  E. Annualized Rate of Occurrence x Annualized Loss Expectancy
  B. Asset Value x % Of Loss From Realized Threat

• Question 10:

  _______ is a method of tricking users into revealing passwords, or other sensitive information.

  A. Dumpster diving
  B. Means testing
  C. Social engineering
  D. Risk
  E. Exposure
  C. Social engineering