CheckPoint 156-110 Online Practice Questions and Exam Preparation

CheckPoint 156-110 Online Questions & Answers

• Question 81:

  Maintenance of the Business Continuity Plan (BCP) must be integrated with an organization's _______________ process.

  A. Change-control
  B. Disaster-recovery
  C. Inventory-maintenance
  D. Discretionary-budget
  E. Compensation-review
  A. Change-control

• Question 82:

  Which of these strategies can be employed to test training effectiveness? (Choose THREE.)

  A. Create a survey for managers, to see if participants practice behaviors presented during training.
  B. Provide feedback forms for employees to rate instruction and training material, immediately after training has ended.
  C. Include auditors before and after the training. This checks to see if the number of security-related incidents is reduced, because of the training.
  D. Give incentives to employees who attend security-awareness training. Perform spot-checks, to see if incentives are displayed.
  E. Test employees on security concepts several months after training has ended.
  A. Create a survey for managers, to see if participants practice behaviors presented during training.
  C. Include auditors before and after the training. This checks to see if the number of security-related incidents is reduced, because of the training.
  E. Test employees on security concepts several months after training has ended.

• Question 83:

  INFOSEC professionals are concerned about providing due care and due diligence. With whom should they consult, when protecting information assets?

  A. Law enforcement in their region
  B. Senior management, particularly business-unit owners
  C. IETF enforcement officials
  D. Other INFOSEC professionals
  E. Their organizations' legal experts
  E. Their organizations' legal experts

• Question 84:

  Which encryption algorithm has the highest bit strength?

  A. AES
  B. Blowfish
  C. DES
  D. CAST
  E. Triple DES
  A. AES

• Question 85:

  Which of the following is the MOST important consideration, when developing security- awareness training materials?

  A. Training material should be accessible and attractive.
  B. Delivery mechanisms should allow easy development of additional materials, to complement core material.
  C. Security-awareness training materials should never contradict an organizational security policy.
  D. Appropriate language should be used to facilitate localization, should training materials require translation.
  E. Written documentation should be archived, in case of disaster.
  C. Security-awareness training materials should never contradict an organizational security policy.

• Question 86:

  Who should have physical access to network-connectivity devices and corporate servers?

  A. Customers and clients
  B. Accounting, information-technology, and auditing staff
  C. Managers and C-level executives
  D. Only appropriate information-technology personnel
  E. Only the maintenance staff
  D. Only appropriate information-technology personnel

• Question 87:

  _______ is the process of confirming that implemented security safeguards work as expected.

  A. Penetration testing
  B. Exploitation
  C. Baselining
  D. A vulnerability
  E. A countermeasure
  A. Penetration testing

• Question 88:

  ABC Corporation's network is configured such that a user must log in individually at each server and access control. Which type of authentication is in use?

  A. Role-based access control
  B. Three-factor authentication
  C. Single sign-on
  D. Hybrid access control
  E. Mandatory sign-on
  E. Mandatory sign-on

• Question 89:

  Which of the following are enterprise administrative controls? (Choose TWO.)

  A. Network access control
  B. Facility access control
  C. Password authentication
  D. Background checks
  E. Employee handbooks
  D. Background checks
  E. Employee handbooks

• Question 90:

  Which of the following can be stored on a workstation? (Choose TWO.)

  A. Payroll information
  B. Data objects used by many employees
  C. Databases
  D. Interoffice memo
  E. Customer correspondence
  D. Interoffice memo
  E. Customer correspondence