CheckPoint 156-110 Online Practice Questions and Exam Preparation

CheckPoint 156-110 Online Questions & Answers

• Question 71:

  The items listed below are examples of ___________________ controls.

  *Smart cards *Access control lists *Authentication servers *Auditing

  A. Role-based
  B. Administrative
  C. Technical
  D. Physical
  E. Mandatory
  C. Technical

• Question 72:

  Which of the following represents a valid reason for testing a patch on a nonproduction system, before applying it to a production system?

  A. Patches may re-enable services previously disabled.
  B. Patches are a kind of virus.
  C. Patches always overwrite user data.
  D. Only patches on vendor-pressed CDs can be trusted.
  E. Patches usually break important system functionality.
  A. Patches may re-enable services previously disabled.

• Question 73:

  ABC Corporation's network requires users to authenticate to cross the border firewall, and before entering restricted segments. Servers containing sensitive information require separate authentication. This is an example of which type of access-control method?

  A. Single sign-on
  B. Decentralized access control
  C. Hybrid access control
  D. Layered access control
  E. Mandatory access control
  D. Layered access control

• Question 74:

  A(n) ________________ is a one-way mathematical function that maps variable values into smaller values of a fixed length.

  A. Symmetric key
  B. Algorithm
  C. Back door
  D. Hash function
  E. Integrity
  D. Hash function

• Question 75:

  Which of the following is MOST likely to cause management to view a security-needs proposal as invalid?

  A. Real-world examples
  B. Exaggeration
  C. Ranked threats
  D. Quantified risks
  E. Temperate manner
  B. Exaggeration

• Question 76:

  Virtual corporations typically use a(n) _______ for maintaining centralized information assets.

  A. Off-line repository
  B. Floppy disk
  C. Data warehouse
  D. CD-ROM burner
  E. Colocation
  E. Colocation

• Question 77:

  Which of the following statements about the maintenance and review of information security policies is NOT true?

  A. The review and maintenance of security policies should be tied to the performance evaluations of accountable individuals.
  B. Review requirements should be included in the security policies themselves.
  C. When business requirements change, security policies should be reviewed to confirm that policies reflect the new business requirements.
  D. Functional users and information custodians are ultimately responsible for the accuracy and relevance of information security policies.
  E. In the absence of changes to business requirements and processes, information-security policy reviews should be annual.
  D. Functional users and information custodians are ultimately responsible for the accuracy and relevance of information security policies.

• Question 78:

  What must system administrators do when they cannot access a complete replica of their production environment for testing?

  A. Extrapolate results from a limited subset.
  B. Eliminate the testing phase of change control.
  C. Request additional hardware and software.
  D. Refuse to implement change requests.
  E. Deploy directly to the production environment.
  A. Extrapolate results from a limited subset.

• Question 79:

  Which of the following is NOT an auditing function that should be performed regularly?

  A. Reviewing IDS alerts
  B. Reviewing performance logs
  C. Reviewing IDS logs
  D. Reviewing audit logs
  E. Reviewing system logs
  B. Reviewing performance logs

• Question 80:

  _______ intrusion detection involves comparing traffic to known characteristics of malicious traffic, known as attack signatures.

  A. Pattern matching
  B. Statistical anomaly
  C. Behavioral analysis
  D. Host
  E. Network
  A. Pattern matching