CIW 1D0-571 Online Practice Questions and Exam Preparation

CIW 1D0-571 Online Questions & Answers

• Question 1:

  You have just deployed an application that uses hash-based checksums to monitor changes in the configuration scripts of a database server that is accessible via the Internet. Which of the following is a primary concern for this solution?

  A. The extra hard disk space required to store the database of checksums
  B. The amount of memory remaining now that the checksum-based application is running
  C. The possibility of a bufferoverflow attack leading to a security breach
  D. The security of the checksum database on a read-only media format
  D. The security of the checksum database on a read-only media format

• Question 2:

  You have implemented a version of the Kerberos protocol for your network. What service does Kerberos primarily offer?

  A. Authentication
  B. Encryption
  C. Non-repudiation
  D. Data integrity
  A. Authentication

• Question 3:

  Jason is attempting to gain unauthorized access to a corporate server by running a program that enters passwords from a long list of possible passwords. Which type of attack is this?

  A. Brute force
  B. Denial of service
  C. Botnet
  D. Buffer overflow
  A. Brute force

• Question 4:

  You purchased a network scanner six months ago. In spite of regularly conducting scans using this software, you have noticed that attackers have been able to compromise your servers over the last month. Which of the following is the most likely explanation for this problem?

  A. The network scanner needs to be replaced.
  B. The network scanner is no substitute for scans conducted by an individual.
  C. The network scanner has atrojan.
  D. The network scanner needs an update.
  D. The network scanner needs an update.

• Question 5:

  What is the primary strength of symmetric-key encryption?

  A. It allows easy and secure exchange of the secret key.
  B. It creates aash?of a text, enabling data integrity.It creates a ?ash?of a text, enabling data integrity.
  C. It can encrypt large amounts of data very quickly.
  D. It provides non-repudiation services more efficiently than asymmetric-key encryption.
  C. It can encrypt large amounts of data very quickly.

• Question 6:

  You have determined that the company Web server has several vulnerabilities, including a buffer overflow that has resulted in an attack. The Web server uses PHP and has direct connections to an Oracle database server. It also uses many CGI scripts. Which of the following is the most effective way to respond to this attack?

  A. Installing software updates for the Web server daemon
  B. Using the POST method instead of the GET method for a Web form
  C. Installing an intrusion detection service to monitor logins
  D. Using the GET method instead of the POST method for a Web form
  A. Installing software updates for the Web server daemon

• Question 7:

  An application is creating hashes of each file on an attached storage device. Which of the following will typically occur during this process?

  A. An increase in the amount of time it takes for the system to respond to requests
  B. Reduced risk of an attack
  C. Increased risk of an attack
  D. A reduction in the amount of time it takes for the system to respond to requests
  A. An increase in the amount of time it takes for the system to respond to requests

• Question 8:

  Which of the following will best help you ensure a database server can withstand a recently discovered vulnerability?

  A. Updating the company vulnerability scanner and conducting a new scan
  B. Adding a buffer overflow rule to the intrusion detection system
  C. Reconfiguring the firewall
  D. Installing a system update
  D. Installing a system update

• Question 9:

  Requests for Web-based resources have become unacceptably slow. You have been assigned to implement a solution that helps solve this problem. Which of the following would you recommend?

  A. Enablestateful multi-layer inspection on the packet filter
  B. Implement caching on the network proxy server
  C. Enable authentication on the network proxy server
  D. Implement a screening router on the network DMZ
  B. Implement caching on the network proxy server

• Question 10:

  Which of the following is a primary weakness of asymmetric-key encryption?

  A. It is slow because it requires extensive calculations by the computer.
  B. It is reliant on the Secure Sockets Layer (SSL) standard, which has been compromised.
  C. It is difficult to transfer any portion of an asymmetric key securely.
  A. It is slow because it requires extensive calculations by the computer.