CheckPoint 156-110 Online Practice Questions and Exam Preparation

CheckPoint 156-110 Online Questions & Answers

• Question 41:

  Which type of access management allows subjects to control some access of objects for other subjects?

  A. Discretionary
  B. Hybrid
  C. Mandatory
  D. Role-based
  E. Nondiscretionary
  A. Discretionary

• Question 42:

  You are preparing a machine that will be used as a dedicated Web server. Which of the following services should NOT be removed?

  A. E. IRC
  B. SMTP
  C. FTP
  D. HTTP
  E. PVP
  D. HTTP

• Question 43:

  Which of these metrics measure how a biometric device performs, when attempting to authenticate subjects? (Choose THREE.)

  A. False Rejection Rate
  B. User Acceptance Rate
  C. Crossover Error Rate
  D. False Acceptance Rate
  E. Enrollment Failure Rate
  A. False Rejection Rate
  C. Crossover Error Rate
  D. False Acceptance Rate

• Question 44:

  ____________________ educate(s) security administrators and end users about organizations' security policies.

  A. Security-awareness training
  B. Information Security (INFOSEC) briefings
  C. Acceptable-use policies
  D. Continuing education
  E. Nondisclosure agreements
  A. Security-awareness training

• Question 45:

  _________________ is a type of cryptography, where letters of an original message are systematically rearranged into another sequence.

  A. Symmetric-key exchange
  B. Steganography
  C. Transposition cipher
  D. Asymmetric-key encryption
  E. Simple substitution cipher
  C. Transposition cipher

• Question 46:

  What is the purpose of resource isolation?

  A. To reduce the level of broadcast traffic on physical segments.
  B. To ensure that anyone accessing a resource has appropriate integrity.
  C. To automate the creation of access control lists and Trusted Computing Bases.
  D. To enforce access controls, and clearly separate resources from each other.
  E. To make people buy more computers than they really need.
  D. To enforce access controls, and clearly separate resources from each other.

• Question 47:

  To comply with the secure design principle of fail-safe defaults, what must a system do if it receives an instruction it does not understand? The system should:

  A. send the instruction to a peer server, to see if the peer can execute.
  B. not attempt to execute the instruction.
  C. close the connection, and refuse all further traffic from the originator.
  D. not launch its debugging features, and attempt to resolve the instruction.
  E. search for a close match in the instruction set it understands.
  B. not attempt to execute the instruction.

• Question 48:

  Which of the following entities review partner-extranet requirements?

  A. Information systems
  B. Shipping and receiving
  C. Marketing
  D. Requesting department
  E. Chief Information Officer
  D. Requesting department

• Question 49:

  _________ is a smaller, enhanced version of the X.500 protocol. It is used to provide directory-service information. (Choose the BEST answer.)

  A. Lightweight Directory Access Protocol
  B. X.400 Directory Access Protocol
  C. Access control list
  D. Lightweight Host Configuration Protocol
  E. Role-based access control
  A. Lightweight Directory Access Protocol

• Question 50:

  A(n) _______ occurs when intrusion-detection measures fail to recognize suspicious traffic or activity.

  A. False positive
  B. False negative
  C. CIFS pop-up
  D. Threshold
  E. Alarm
  B. False negative