CheckPoint 156-110 Online Practice Questions and Exam Preparation

CheckPoint 156-110 Online Questions & Answers

• Question 11:

  You are a system administrator for a pool of Web servers. The vendor who sells your Web server posts a patch and sample exploit for a newly discovered vulnerability. You will take all of the actions listed below. Which of the following actions should you take first?

  A. Run the sample exploit against a test server.
  B. Run the sample exploit against a production server.
  C. Apply the patch to all production servers.
  D. Test the patch on a production server.
  E. Test the patch on a non-production server.
  A. Run the sample exploit against a test server.

• Question 12:

  Organizations _______ risk, when they convince another entity to assume the risk for them.

  A. Elevate
  B. Assume
  C. Deny
  D. Transfer
  E. Mitigate
  D. Transfer

• Question 13:

  The items listed below are examples of ___________________ controls.

  *Procedures and policies *Employee security-awareness training *Employee background checks *Increasing management security awareness

  A. Technical
  B. Administrative
  C. Role-based
  D. Mandatory
  E. Physical
  B. Administrative

• Question 14:

  Which of the following best describes the largest security challenge for Remote Offices/Branch Offices?

  A. Leased-line security
  B. Salami attacks
  C. Unauthorized network connectivity
  D. Distributed denial-of-service attacks
  E. Secure access to remote organizational resources
  E. Secure access to remote organizational resources

• Question 15:

  Which of the following should be included in an enterprise Business Continuity Plan (BCP)? (Choose THREE.)

  A. Accidental or intentional data deletion
  B. Severe weather disasters
  C. Employee terminations
  D. Employee administrative leave
  E. Minor power outages
  A. Accidental or intentional data deletion
  B. Severe weather disasters
  E. Minor power outages

• Question 16:

  Which principle of secure design states that a security mechanism's methods must be testable?

  A. Separation of privilege
  B. Least common mechanism
  C. Complete mediation
  D. Open design
  E. Economy of mechanism
  D. Open design

• Question 17:

  One individual is selected from each department, to attend a security-awareness course. Each person returns to his department, delivering the course to the remainder of the department. After training is complete, each person acts as a peer coach. Which type of training is this?

  A. On-line training
  B. Formal classroom training
  C. Train-the-mentor training
  D. Alternating-facilitator training
  E. Self-paced training
  C. Train-the-mentor training

• Question 18:

  Why does the (ISC)2 access-control systems and methodology functional domain address both the confidentiality and integrity aspects of the Information Security Triad? Access-control systems and methodologies:

  A. are required standards in health care and banking.
  B. provide redundant systems and data backups.
  C. control who is allowed to view and modify information.
  D. are academic models not suitable for implementation.
  E. set standards for acceptable media-storage devices.
  C. control who is allowed to view and modify information.

• Question 19:

  Which of the following statements about encryption's benefits is false? Encryption can: (Choose TWO.)

  A. significantly reduce the chance information will be modified by unauthorized entities.
  B. only be used to protect data in transit. Encryption provides no protection to stored data.
  C. allow private information to be sent over public networks, in relative safety.
  D. significantly reduce the chance information will be viewed by unauthorized entities.
  E. prevent information from being destroyed by malicious entities, while in transit.
  B. only be used to protect data in transit. Encryption provides no protection to stored data.
  E. prevent information from being destroyed by malicious entities, while in transit.

• Question 20:

  What type of document contains information on alternative business locations, IT resources, and personnel?

  A. End-user license agreement
  B. Nondisclosure agreement
  C. Acceptable use policy
  D. Security policy
  E. Business continuity plan
  E. Business continuity plan