CheckPoint CheckPoint Certification 156-110 Questions & Answers

• Question 81:

  Virtual corporations typically use a(n) _______ for maintaining centralized information assets.

  A. Off-line repository

  B. Floppy disk

  C. Data warehouse

  D. CD-ROM burner

  E. Colocation

  Correct Answer: E

• Question 82:

  Why should the number of services on a server be limited to required services?

  A. Every open service represents a potential vulnerability.

  B. Closed systems require special connectivity services.

  C. Running extra services makes machines more efficient.

  D. All services are inherently stable and secure.

  E. Additional services make machines more secure.

  Correct Answer: A

• Question 83:

  _______ intrusion detection involves comparing traffic to known characteristics of malicious traffic, known as attack signatures.

  A. Pattern matching

  B. Statistical anomaly

  C. Behavioral analysis

  D. Host

  E. Network

  Correct Answer: A

• Question 84:

  To comply with the secure design principle of fail-safe defaults, what must a system do if it receives an instruction it does not understand? The system should:

  A. send the instruction to a peer server, to see if the peer can execute.

  B. not attempt to execute the instruction.

  C. close the connection, and refuse all further traffic from the originator.

  D. not launch its debugging features, and attempt to resolve the instruction.

  E. search for a close match in the instruction set it understands.

  Correct Answer: B

• Question 85:

  Which of these metrics measure how a biometric device performs, when attempting to authenticate subjects? (Choose THREE.)

  A. False Rejection Rate

  B. User Acceptance Rate

  C. Crossover Error Rate

  D. False Acceptance Rate

  E. Enrollment Failure Rate

  Correct Answer: ACD

• Question 86:

  Which of the following is the MOST important consideration, when developing security- awareness training materials?

  A. Training material should be accessible and attractive.

  B. Delivery mechanisms should allow easy development of additional materials, to complement core material.

  C. Security-awareness training materials should never contradict an organizational security policy.

  D. Appropriate language should be used to facilitate localization, should training materials require translation.

  E. Written documentation should be archived, in case of disaster.

  Correct Answer: C

• Question 87:

  Which of the following tests provides testing teams some information about hosts or networks?

  A. Partial-knowledge test

  B. Full-knowledge test

  C. Zero-knowledge test

  Correct Answer: A

• Question 88:

  _______ can mimic the symptoms of a denial-of-service attack, and the resulting loss in productivity can be no less devastating to an organization.

  A. ICMP traffic

  B. Peak traffic

  C. Fragmented packets

  D. Insufficient bandwidth

  E. Burst traffic

  Correct Answer: D

• Question 89:

  Which of the following statements about the maintenance and review of information security policies is NOT true?

  A. The review and maintenance of security policies should be tied to the performance evaluations of accountable individuals.

  B. Review requirements should be included in the security policies themselves.

  C. When business requirements change, security policies should be reviewed to confirm that policies reflect the new business requirements.

  D. Functional users and information custodians are ultimately responsible for the accuracy and relevance of information security policies.

  E. In the absence of changes to business requirements and processes, information-security policy reviews should be annual.

  Correct Answer: D

• Question 90:

  Which of the following is a cost-effective solution for securely transmitting data between remote offices?

  A. Standard e-mail

  B. Fax machine

  C. Virtual private network

  D. Bonded courier

  E. Telephone

  Correct Answer: C