CheckPoint CheckPoint Certification 156-110 Questions & Answers

• Question 31:

  Which type of access management allows subjects to control some access of objects for other subjects?

  A. Discretionary

  B. Hybrid

  C. Mandatory

  D. Role-based

  E. Nondiscretionary

  Correct Answer: A

• Question 32:

  When attempting to identify OPSEC indicators, information-security professionals must: (Choose THREE.)

  A. Discover the information daily activities yield.

  B. Meet with adversaries.

  C. Perform business impact analysis surveys.

  D. Scrutinize their organizations' daily activities.

  E. Analyze indicators, to determine the information an adversary can glean ?both from routine and nonroutine activities.

  Correct Answer: ADE

• Question 33:

  Which of the following can be stored on a workstation? (Choose TWO.)

  A. Payroll information

  B. Data objects used by many employees

  C. Databases

  D. Interoffice memo

  E. Customer correspondence

  Correct Answer: DE

• Question 34:

  Which of the following should be included in an enterprise Business Continuity Plan (BCP)? (Choose THREE.)

  A. Accidental or intentional data deletion

  B. Severe weather disasters

  C. Employee terminations

  D. Employee administrative leave

  E. Minor power outages

  Correct Answer: ABE

• Question 35:

  Which type of access management uses information about job duties and positions, to indicate subjects' clearance levels?

  A. Discretionary

  B. Role-based

  C. Nondiscretionary

  D. Hybrid

  E. Mandatory

  Correct Answer: B

• Question 36:

  Which of the following is NOT a concern for enterprise physical security?

  A. Network Intrusion Detection Systems

  B. Social engineering

  C. Dumpster diving

  D. Property theft

  E. Unauthorized access to a facility

  Correct Answer: A

• Question 37:

  _______ intrusion-detection systems learn the behavior of a machine or network, and create a baseline.

  A. Behavioral analysis

  B. Statistical anomaly

  C. Network

  D. Pattern matching

  E. Host

  Correct Answer: B

• Question 38:

  Which of the following best describes the largest security challenge for Remote Offices/Branch Offices?

  A. Leased-line security

  B. Salami attacks

  C. Unauthorized network connectivity

  D. Distributed denial-of-service attacks

  E. Secure access to remote organizational resources

  Correct Answer: E

• Question 39:

  Why does the (ISC)2 access-control systems and methodology functional domain address both the confidentiality and integrity aspects of the Information Security Triad? Access-control systems and methodologies:

  A. are required standards in health care and banking.

  B. provide redundant systems and data backups.

  C. control who is allowed to view and modify information.

  D. are academic models not suitable for implementation.

  E. set standards for acceptable media-storage devices.

  Correct Answer: C

• Question 40:

  ABC Corporation's network requires users to authenticate to cross the border firewall, and before entering restricted segments. Servers containing sensitive information require separate authentication. This is an example of which type of access-control method?

  A. Single sign-on

  B. Decentralized access control

  C. Hybrid access control

  D. Layered access control

  E. Mandatory access control

  Correct Answer: D