CheckPoint 156-110 Online Practice Questions and Exam Preparation

CheckPoint 156-110 Online Questions & Answers

• Question 91:

  Internal intrusions are loosely divided into which categories? (Choose TWO.)

  A. Attempts by insiders to perform appropriate acts, on information assets to which they have been given rights or permissions.
  B. Attempts by insiders to access resources, without proper access rights.
  C. Attempts by insiders to access external resources, without proper access rights.
  D. Attempts by insiders to perform inappropriate acts, on external information assets to which they have been given rights or permissions.
  E. Attempts by insiders to perform inappropriate acts, on information assets to which they have been given rights or permissions.
  B. Attempts by insiders to access resources, without proper access rights.
  E. Attempts by insiders to perform inappropriate acts, on information assets to which they have been given rights or permissions.

• Question 92:

  Why should user populations be segmented?

  A. To allow resources to be shared among employees
  B. To allow appropriate collaboration, and prevent inappropriate resource sharing
  C. To prevent appropriate collaboration
  D. To provide authentication services
  E. To prevent the generation of audit trails from gateway devices
  B. To allow appropriate collaboration, and prevent inappropriate resource sharing

• Question 93:

  Which of the following equations results in the Single Loss Expectancy for an asset?

  A. Asset Value x % Of Loss From Realized Exposure
  B. Asset Value x % Of Loss From Realized Threat
  C. Annualized Rate of Occurrence / Annualized Loss Expectancy
  D. Asset Value x % Of Loss From Realized Vulnerability
  E. Annualized Rate of Occurrence x Annualized Loss Expectancy
  B. Asset Value x % Of Loss From Realized Threat

• Question 94:

  Which of the following is NOT a concern for enterprise physical security?

  A. Network Intrusion Detection Systems
  B. Social engineering
  C. Dumpster diving
  D. Property theft
  E. Unauthorized access to a facility
  A. Network Intrusion Detection Systems

• Question 95:

  _______ intrusion-detection systems learn the behavior of a machine or network, and create a baseline.

  A. Behavioral analysis
  B. Statistical anomaly
  C. Network
  D. Pattern matching
  E. Host
  B. Statistical anomaly

• Question 96:

  Which of these choices correctly describe denial-of-service (DoS) attacks? (Choose THREE.)

  A. DoS attacks do not require attackers to have any privileges on a target system.
  B. DoS attacks are nearly impossible to stop, once they begin.
  C. DoS attacks free the target system of excessive overhead.
  D. DoS ties up a system with so many requests, system resources are consumed, and performance degrades.
  E. DoS attacks cause the attacked system to accept legitimate access requests.
  A. DoS attacks do not require attackers to have any privileges on a target system.
  B. DoS attacks are nearly impossible to stop, once they begin.
  D. DoS ties up a system with so many requests, system resources are consumed, and performance degrades.

• Question 97:

  Public servers are typically placed in the _______, to enhance security.

  A. Restricted Entry Zone
  B. Open Zone
  C. Internet Zone
  D. Demilitarized Zone
  E. Public Entry Zone
  D. Demilitarized Zone

• Question 98:

  _______ involves gathering pieces of information and drawing a conclusion, whose sensitivity exceeds any of the individual pieces of information.

  A. Inference
  B. Social engineering
  C. Movement analysis
  D. Communication-pattern analysis
  E. Aggregation
  E. Aggregation

• Question 99:

  Distinguish between the role of the data owner and the role of the data custodian. Complete the following sentence. The data owner is the:

  A. department in the organization responsible for the data's physical storage location. The data custodian is anyone who has access the data for any reason.
  B. person or entity who accesses/and or manipulates data or information, in the course of assigned duties. The data custodian is a person or process with the appropriate level of privilege to access the data.
  C. person or entity ultimately responsible for the security of an information asset. The data custodian is the person or entity responsible for imposing and enforcing policies and restrictions, dictated by the data owner.
  D. person or process that originally creates the information. The data custodian is a role that shifts to any person or process currently accessing the data, and passes to the next person or process to access the data.
  E. person or entity responsible for imposing and enforcing policies and restrictions, dictated by the functional user. The data custodian is a person or process who accesses and/or manipulates the information.
  C. person or entity ultimately responsible for the security of an information asset. The data custodian is the person or entity responsible for imposing and enforcing policies and restrictions, dictated by the data owner.

• Question 100:

  How do virtual corporations maintain confidentiality?

  A. Encryption
  B. Checksum
  C. Data hashes
  D. Redundant servers
  E. Security by obscurity
  A. Encryption