CIW 1D0-571 Online Practice Questions and Exam Preparation

CIW 1D0-571 Online Questions & Answers

• Question 11:

  Which tool is best suited for identifying applications and code on a Web server that can lead to a SQL injection attack?

  A. A vulnerability scanner
  B. A packet sniffer
  C. An intrusion-detection system
  D. A network switch
  A. A vulnerability scanner

• Question 12:

  At what layer of the OSI/RM does a packet filter operate?

  A. Layer 1
  B. Layer 3
  C. Layer 5
  D. Layer 7
  B. Layer 3

• Question 13:

  Which of the following is most likely to pose a security threat to a Web server?

  A. CGI scripts
  B. Database connections
  C. Flash or Silverlight animation files
  D. LDAP servers
  A. CGI scripts

• Question 14:

  Your organization has made a particularly unpopular policy decision. Your supervisor fears that a series of attacks may occur as a result. You have been assigned to increase automated auditing on a server. When fulfilling this request, which of the following resources should you audit the most aggressively?

  A. Authentication databases, including directory servers
  B. Intrusion detection systems, especially those placed on sensitive networks
  C. Log files on firewall systems
  D. Firewall settings for desktop systems
  A. Authentication databases, including directory servers

• Question 15:

  Which of the following is most likely to address a problem with an operating system's ability to withstand an attack that attempts to exploit a buffer overflow?

  A. Firewall
  B. Software update
  C. Intrusion detection system
  D. Network scanner
  B. Software update

• Question 16:

  A disgruntled employee has discovered that the company Web server is not protected against a particular buffer overflow vulnerability. The disgruntled employee has created an application to take advantage of this vulnerability and secretly obtain sensitive data from the Web server's hard disk. This application sends a set of packets to the Web server that causes it to present an unauthenticated terminal with root privileges. What is the name for this particular type of attack?

  A. Man-in-the-middle attack
  B. Trojan
  C. Denial of service
  D. Zero-day attack
  D. Zero-day attack

• Question 17:

  Consider the following image of a packet capture:

  

  Which of the following best describes the protocol used, along with its primary benefit?

  A. It is a passive FTP session, which is easier for firewalls to process.
  B. It is an active FTP session, which is necessary in order to support IPv6.
  C. It is an extended passive FTP session, which is necessary to support IPv6.
  D. It is an active FTP session, which is supported by all FTP clients.
  A. It is a passive FTP session, which is easier for firewalls to process.

• Question 18:

  A new server has been placed on the network. You have been assigned to protect this server using a packet-filtering firewall. To comply with this request, you have enabled the following ruleset:

  

  Which choice describes the next step to take now that this ruleset has been enabled?

  A. From the internal network, use your Web browser to determine whether all internal users can access the Web server.
  B. From the internal network, use your e-mail client to determine whether all internal users can access the e-mail server.
  C. From the external network, use your Web browser to determine whether all external users can access the Web server.
  D. From the external network, use your e-mail client to determine whether all external users can access the e-mail server.
  D. From the external network, use your e-mail client to determine whether all external users can access the e-mail server.

• Question 19:

  Which of the following describes the practice of stateful multi-layer inspection?

  A. Using a VLAN on a firewall to enable masquerading of private IP addresses
  B. Prioritizing voice and video data to reduce congestion
  C. Inspecting packets in all layers of the OSI/RM with a packet filter
  D. Using Quality of Service (QoS) on a proxy-oriented firewall
  C. Inspecting packets in all layers of the OSI/RM with a packet filter

• Question 20:

  What is the primary drawback of using symmetric-key encryption?

  A. Key transport across a network
  B. Speed of encryption
  C. Denial-of-service attacks
  D. Inability to support convergence traffic
  A. Key transport across a network