CheckPoint 156-110 Online Practice Questions and Exam Preparation

CheckPoint 156-110 Online Questions & Answers

• Question 21:

  _______________________________ occurs when an individual or process acquires a higher level of privilege, or access, than originally intended.

  A. Security Triad
  B. Privilege aggregation
  C. Need-to-know
  D. Privilege escalation
  E. Least privilege
  D. Privilege escalation

• Question 22:

  Which of the following calculations is used when selecting countermeasures?

  A. Annualized Rate of Occurrence
  B. Single Loss Expectancy
  C. Annualized Loss Expectancy
  D. Business Impact Analysis
  E. Business Continuity Plan
  C. Annualized Loss Expectancy

• Question 23:

  A(n) __________________________ is issued by senior management, and defines an organization's security goals.

  A. Records-retention procedure
  B. Acceptable-use policy
  C. Organizational security policy
  D. Security policy mission statement
  E. Service level agreement
  D. Security policy mission statement

• Question 24:

  Which of the following is the BEST method for managing users in an enterprise?

  A. Enter user data in a spreadsheet.
  B. Implement centralized access control.
  C. Deploy Kerberos.
  D. Place them in a centralized Lightweight Directory Access Protocol.
  E. Use a Domain Name System.
  D. Place them in a centralized Lightweight Directory Access Protocol.

• Question 25:

  Why should each system user and administrator have individual accounts? (Choose TWO.)

  A. Using generic user names and passwords increases system security and reliability.
  B. Using separate accounts for each user reduces resource consumption, particularly disk space.
  C. By using individual login names and passwords, user actions can be traced.
  D. If users do not have individual login names, processes can automatically run with root/administrator access.
  E. A generic user name and password for users and security administrators provides anonymity, which prevents useful logging and auditing.
  C. By using individual login names and passwords, user actions can be traced.
  E. A generic user name and password for users and security administrators provides anonymity, which prevents useful logging and auditing.

• Question 26:

  Which of the following is an integrity requirement for Remote Offices/Branch Offices (ROBOs)?

  A. Private data must remain internal to an organization.
  B. Data must be consistent between ROBO sites and headquarters.
  C. Users must be educated about appropriate security policies.
  D. Improvised solutions must provide the level of protection required.
  E. Data must remain available to all remote offices.
  B. Data must be consistent between ROBO sites and headquarters.

• Question 27:

  Embedding symbols in images or common items, such as pictures or quilts, is an example of __________.

  A. Espionage
  B. Transposition cipher
  C. Key exchange
  D. Arithmancy
  E. Steganography
  E. Steganography

• Question 28:

  You are considering purchasing a VPN solution to protect your organization's information assets. The solution you are reviewing uses RFC-compliant and open-standards encryption schemes. The vendor has submitted the system to a variety of recognized testing authorities. The vendor does not make the source code available to testing authorities. Does this solution adhere to the secure design principle of open design?

  A. No, because the software vendor could have changed the code after testing, which is not verifiable.
  B. No, because the software vendor submitted the software to testing authorities only, and did not make the software available to the public for testing.
  C. Yes, because the methods were tested by recognized testing authorities, and the source code is protected from vandalism.
  D. Yes, because the methods are open, and the system does not rely on the secrecy of its internal mechanisms to provide protection.
  E. No, because if a software vendor refuses to reveal the source code for a product, it cannot comply with the open-design principle.
  D. Yes, because the methods are open, and the system does not rely on the secrecy of its internal mechanisms to provide protection.

• Question 29:

  To protect its information assets, ABC Company purchases a safeguard that costs $60,000. The annual cost to maintain the safeguard is estimated to be $40,000. The aggregate Annualized Loss Expectancy for the risks the safeguard is expected to mitigate is $50,000. At this rate of return, how long will it take ABC Company to recoup the cost of the safeguard?

  A. ABC Company will never recoup the cost of this safeguard.
  B. Less than 7 years
  C. Less than 3 years
  D. Less than 1 year
  E. Less than 5 years
  B. Less than 7 years

• Question 30:

  Enterprise employees working remotely require access to data at an organization's headquarters. Which of the following is the BEST method to transfer this data?

  A. Standard e-mail
  B. Faxed information
  C. Dial-in access behind the enterprise firewall
  D. Virtual private network
  E. CD-ROMs shipped with updated versions of the data
  C. Dial-in access behind the enterprise firewall