CheckPoint 156-110 Online Practice Questions and Exam Preparation

CheckPoint 156-110 Online Questions & Answers

• Question 31:

  _______ is a method of tricking users into revealing passwords, or other sensitive information.

  A. Dumpster diving
  B. Means testing
  C. Social engineering
  D. Risk
  E. Exposure
  C. Social engineering

• Question 32:

  _______ can mimic the symptoms of a denial-of-service attack, and the resulting loss in productivity can be no less devastating to an organization.

  A. ICMP traffic
  B. Peak traffic
  C. Fragmented packets
  D. Insufficient bandwidth
  E. Burst traffic
  D. Insufficient bandwidth

• Question 33:

  What is mandatory sign-on? An authentication method that:

  A. uses smart cards, hardware tokens, and biometrics to authenticate users; also known as three-factor authentication
  B. requires the use of one-time passwords, so users authenticate only once, with a given set of credentials
  C. requires users to re-authenticate at each server and access control
  D. stores user credentials locally, so that users need only authenticate the first time a local machine is used
  E. allows users to authenticate once, and then uses tokens or other credentials to manage subsequent authentication attempts
  C. requires users to re-authenticate at each server and access control

• Question 34:

  If a firewall receives traffic not explicitly permitted by its security policy, what should the firewall do?

  A. Nothing
  B. Do not log and drop the traffic.
  C. Log and drop the traffic.
  D. Log and pass the traffic.
  E. Do not log and pass the traffic.
  C. Log and drop the traffic.

• Question 35:

  _________________ is the process of subjects establishing who they are to an access control.

  A. Identification
  B. Authentication
  C. Authorization
  D. Validation
  E. Biometrics
  A. Identification

• Question 36:

  Which of the following are appropriate uses of asymmetric encryption? (Choose THREE.)

  A. Authentication
  B. Secure key-exchange mechanisms
  C. Public Web site access
  D. Data-integrity checking
  E. Sneaker net
  A. Authentication
  B. Secure key-exchange mechanisms
  D. Data-integrity checking

• Question 37:

  Which of the following is NOT a Business Continuity Plan (BCP) recovery strategy?

  A. Delegating risk to another entity, such as an insurer
  B. Manual procedures; alternative solution to technology available
  C. Deferring action; action waiting until a later date
  D. Reciprocal agreements with another organization
  E. Doing nothing; no action taken to recover the technology
  A. Delegating risk to another entity, such as an insurer

• Question 38:

  What is single sign-on? An authentication method:

  A. that allows users to authenticate once, and then uses tokens or other credentials to manage subsequent authentication attempts
  B. that stores user credentials locally, so that users need only authenticate the first time, a local machine is used
  C. requiring the use of one-time passwords, so users authenticate only once, with a given set of credentials.
  D. that uses smart cards, hardware tokens, and biometrics to authenticate users; also known as three-factor authentication
  E. that requires users to re-authenticate for every resource accessed
  A. that allows users to authenticate once, and then uses tokens or other credentials to manage subsequent authentication attempts

• Question 39:

  At ABC Corporation, access to critical information resources, such as database and e-mail servers, is controlled by the information-technology (IT) department. The supervisor in the department grants access to printers where the printer is located. Managers grant and revoke rights to files within their departments' directories on the file server, but the IT department controls who has access to the directories. Which type of access-management system is in use at ABC

  Corporation?

  A. Centralized access management
  B. Role-based access management
  C. Hybrid access management
  D. Decentralized access management
  E. Privileged access management
  C. Hybrid access management

• Question 40:

  If e-mail is subject to review by individuals other than the sender and recipient, what should be clearly stated in the organization's e-mail policy?

  A. Technologies and methods used to monitor and enforce the organization's policies
  B. Senior management and business-unit owner responsibilities and delegation options
  C. Clear, legally defensible definition of what constitutes a business record
  D. Consequences for violation of the organization's acceptable-use policy
  E. No expectation of privacy for e-mail communications, using the organization's resources
  E. No expectation of privacy for e-mail communications, using the organization's resources