CIW 1D0-571 Online Practice Questions and Exam Preparation

CIW 1D0-571 Online Questions & Answers

• Question 21:

  You have been assigned to provide security measures for your office's reception area. Although the company needs to provide security measures, costs must be kept to a minimum. Which of the following tools is the most appropriate choice?

  A. Firewall
  B. Intrusion-detection system
  C. Camera
  D. Security guard
  C. Camera

• Question 22:

  A security breach has occurred involving the company e-commerce server. Customer credit card data has been released to unauthorized third parties. Which of the following lists the appropriate parties to inform?

  A. Shareholders, law enforcement agencies and company employees
  B. Affected customers, credit card companies and law enforcement agencies
  C. The Internet Service Provider, ICANN and company shareholders
  D. External securityconsultants, company board members and affected customers
  B. Affected customers, credit card companies and law enforcement agencies

• Question 23:

  Which of the following is a typical target of a trojan on a Linux system?

  A. Kernel modules
  B. Shared libraries
  C. Boot sector files
  D. System32 DLL files
  A. Kernel modules

• Question 24:

  A new video conferencing device has been installed on the network. You have been assigned to troubleshoot a connectivity problem between remote workers and the central company. Specifically, remote workers are having problems making any connection at all. Which technique will most likely help you solve this problem while retaining the existing level of security at the firewall?

  A. Deny all use of UDP above Port 1024.
  B. Configure the firewall to provide VPN access.
  C. Configure a second network connection directly to the video conferencing device.
  D. Allow all use of UDP below Port 1024.
  B. Configure the firewall to provide VPN access.

• Question 25:

  Which of the following details should be included in documentation of an attack?

  A. An overview of the security policy and suggestions for the next response plan
  B. Estimates of how much the attack cost the company, and a list of the applications used by the attacker
  C. The time and date of the attack, and the names of employees who were contacted during the response
  D. The network resources involved in the attack, and recommendations for thwarting future attacks
  C. The time and date of the attack, and the names of employees who were contacted during the response

• Question 26:

  Which of the following is considered to be the most secure default firewall policy, yet usually causes the most work from an administrative perspective?

  A. Configuring the firewall to respond automatically to threats
  B. Blocking all access by default, then allowing only necessary connections
  C. Configuring the firewall to coordinate with the intrusion-detection system
  D. Allowing all access by default, then blocking only suspect network connections
  B. Blocking all access by default, then allowing only necessary connections

• Question 27:

  You have discovered that the ls, su and ps commands no longer function as expected. They do not return information in a manner similar to any other Linux system. Also, the implementation of Tripwire you have installed on this server is returning new hash values. Which of the following has most likely occurred?

  A. Atrojan has attacked the system.
  B. A SQL injection attack has occurred.
  C. A spyware application has been installed.
  D. A root kit has been installed on the system.
  D. A root kit has been installed on the system.

• Question 28:

  Consider the following image of a packet capture:

  

  This packet capture has recorded two types of attacks. Which choice lists both attack types?

  A. A dictionary attack and a worm-basedattackA.A dictionary attack and a worm-based attack
  B. Asyn flood attack and a spoofing attackB.A syn flood attack and a spoofing attack
  C. A worm attack and abotnet attack C.A worm attack and a botnet attack
  D. A SQL injection attack and a virusattackD.A SQL injection attack and a virus attack
  B. Asyn flood attack and a spoofing attackB.A syn flood attack and a spoofing attack

• Question 29:

  Which of the following standards is used for digital certificates?

  A. DES
  B. Diffie-Hellman
  C. X.509
  D. RC5
  C. X.509

• Question 30:

  A security breach has occurred in which a third party was able to obtain and misuse legitimate authentication information. After investigation, you determined that the specific cause for the breach was that end users have been placing their passwords underneath their keyboards. Which step will best help you resolve this problem?

  A. Discipline specific end users as object lessons to the rest of the staff and reset passwords on all systems immediately.
  B. Change all passwords on the company servers immediately and inform end users that their passwords will be changing on a regular basis.
  C. Set passwords to expire at specific intervals and establish mandatory continual training sessions.
  D. Inform end users that their passwords will be changing on a regular basis and require more complex passwords.
  C. Set passwords to expire at specific intervals and establish mandatory continual training sessions.