CIW CIW Certification 1D0-571 Questions & Answers

• Question 21:

  Which of the following is the primary weakness of symmetric-key encryption?

  A. Data encrypted using symmetric-key encryption is subject to corruption during transport.

  B. Symmetric-key encryption operates slower than asymmetric-key encryption.

  C. Symmetric-key encryption does not provide the service of data confidentiality.

  D. Keys created using symmetric-key encryption are difficult to distribute securely.

  Correct Answer: D

• Question 22:

  A new video conferencing device has been installed on the network. You have been assigned to troubleshoot a connectivity problem between remote workers and the central company. Specifically, remote workers are having problems making any connection at all. Which technique will most likely help you solve this problem while retaining the existing level of security at the firewall?

  A. Deny all use of UDP above Port 1024.

  B. Configure the firewall to provide VPN access.

  C. Configure a second network connection directly to the video conferencing device.

  D. Allow all use of UDP below Port 1024.

  Correct Answer: B

• Question 23:

  Consider the following image: From the information in this image, what type of attack is occurring?

  

  A. A man-in-the-middle attack

  B. A brute-force attack

  C. A connection-hijacking attack

  D. A spoofingattackD.A spoofing attack

  Correct Answer: B

• Question 24:

  Which choice lists typical firewall functions?

  A. Creating a VLAN and configuring the intrusion-detection system

  B. Issuing alerts and limiting host access

  C. Logging traffic and creating a choke point

  D. Implementing the security policy and scanning the internal network

  Correct Answer: C

• Question 25:

  Which algorithm can use a 128-bit key, and has been adopted as a standard by various governments and corporations?

  A. MARS

  B. RC2

  C. Advanced Encryption Standard (AES)

  D. International Data Encryption Algorithm (IDEA)

  Correct Answer: C

• Question 26:

  Which of the following describes the practice of stateful multi-layer inspection?

  A. Using a VLAN on a firewall to enable masquerading of private IP addresses

  B. Prioritizing voice and video data to reduce congestion

  C. Inspecting packets in all layers of the OSI/RM with a packet filter

  D. Using Quality of Service (QoS) on a proxy-oriented firewall

  Correct Answer: C

• Question 27:

  Which of the following can help you authoritatively trace a network flooding attack?

  A. Your ISP

  B. Firewall logs

  C. Router logs

  D. Ping

  Correct Answer: A

• Question 28:

  You want to create a certificate for use in a Secure Sockets Layer (SSL) session. Which of the following is responsible for verifying the identity of an individual and also issuing the certificate?

  A. Kerberos server

  B. Certificate authority

  C. Certificate revocation entity

  D. Certificate repository

  Correct Answer: B

• Question 29:

  You have implemented a service on a Linux system that allows a user to read and edit resources. What is the function of this service?

  A. Authentication

  B. Data integrity

  C. Access control

  D. Intrusion detection

  Correct Answer: C

• Question 30:

  Which of the following details should be included in documentation of an attack?

  A. An overview of the security policy and suggestions for the next response plan

  B. Estimates of how much the attack cost the company, and a list of the applications used by the attacker

  C. The time and date of the attack, and the names of employees who were contacted during the response

  D. The network resources involved in the attack, and recommendations for thwarting future attacks

  Correct Answer: C