CheckPoint 156-110 Online Practice Questions and Exam Preparation

CheckPoint 156-110 Online Questions & Answers

• Question 61:

  A(n) _______ is the first step for determining which technical information assets should be protected.

  A. Network diagram
  B. Business Impact Analysis
  C. Office floor plan
  D. Firewall
  E. Intrusion detection system
  A. Network diagram

• Question 62:

  All of the following are possible configurations for a corporate intranet, EXCEPT:

  A. Value-added network
  B. Wide-area network
  C. Campus-area network
  D. Metropolitan-area network
  E. Local-area network
  A. Value-added network

• Question 63:

  Why should the number of services on a server be limited to required services?

  A. Every open service represents a potential vulnerability.
  B. Closed systems require special connectivity services.
  C. Running extra services makes machines more efficient.
  D. All services are inherently stable and secure.
  E. Additional services make machines more secure.
  A. Every open service represents a potential vulnerability.

• Question 64:

  ____________________ is the state of being correct, or the degree of certainty a person or process can have, that the data in an information asset is correct.

  A. Confidentiality
  B. Integrity
  C. Authenticity
  D. Privacy
  E. Availability
  B. Integrity

• Question 65:

  When attempting to identify OPSEC indicators, information-security professionals must: (Choose THREE.)

  A. Discover the information daily activities yield.
  B. Meet with adversaries.
  C. Perform business impact analysis surveys.
  D. Scrutinize their organizations' daily activities.
  E. Analyze indicators, to determine the information an adversary can glean ?both from routine and nonroutine activities.
  A. Discover the information daily activities yield.
  D. Scrutinize their organizations' daily activities.
  E. Analyze indicators, to determine the information an adversary can glean ?both from routine and nonroutine activities.

• Question 66:

  Which type of Business Continuity Plan (BCP) test involves practicing aspects of the BCP, without actually interrupting operations or bringing an alternate site on-line?

  A. Structured walkthrough
  B. Checklist
  C. Simulation
  D. Full interruption
  E. Parallel
  C. Simulation

• Question 67:

  How is bogus information disseminated?

  A. Adversaries sort through trash to find information.
  B. Adversaries use anomalous traffic patterns as indicators of unusual activity. They will employ other methods, such as social engineering, to discover the cause of the noise.
  C. Adversaries use movement patterns as indicators of activity.
  D. Adversaries take advantage of a person's trust and goodwill.
  E. Seemingly, unimportant pieces of data may yield enough information to an adversary, for him to disseminate incorrect information and sound authoritative.
  E. Seemingly, unimportant pieces of data may yield enough information to an adversary, for him to disseminate incorrect information and sound authoritative.

• Question 68:

  Which of the following is NOT a restriction, for partners accessing internal corporate resources through an extranet?

  A. Preventing modification of restricted information
  B. Using restricted programs, to access databases and other information resources
  C. Allowing access from any location
  D. Preventing access to any network resource, other than those explicitly permitted
  E. Viewing inventory levels for partner products only
  C. Allowing access from any location

• Question 69:

  Which of the following is likely in a small-business environment?

  A. Most small businesses employ a full-time information-technology staff.
  B. Resources are available as needed.
  C. Small businesses have security personnel on staff.
  D. Most employees have experience with information security.
  E. Security budgets are very small.
  E. Security budgets are very small.

• Question 70:

  Which of the following best describes an external intrusion attempt on a local-area network (LAN)?

  A. Internal users try to gain unauthorized access to information assets outside the organizational perimeter.
  B. External-intrusion attempts from sources outside the LAN are not granted permissions or rights to an organization's information assets.
  C. External users attempt to access public resources.
  D. External intruders attempt exploitation of vulnerabilities, to remove their own access.
  E. Internal users perform inappropriate acts on assets to which they have been given rights or permissions.
  B. External-intrusion attempts from sources outside the LAN are not granted permissions or rights to an organization's information assets.