CIW 1D0-571 Online Practice Questions and Exam Preparation

CIW 1D0-571 Online Questions & Answers

• Question 41:

  You want to create a certificate for use in a Secure Sockets Layer (SSL) session. Which of the following is responsible for verifying the identity of an individual and also issuing the certificate?

  A. Kerberos server
  B. Certificate authority
  C. Certificate revocation entity
  D. Certificate repository
  B. Certificate authority

• Question 42:

  A distributed denial-of-service (DDOS) attack has occurred where both ICMP and TCP packets have crashed the company's Web server. Which of the following techniques will best help reduce the severity of this attack?

  A. Filtering traffic at the firewall
  B. Changing your ISP
  C. Installing Apache Server rather than Microsoft IIS
  D. Placing the database and the Web server on separate systems
  A. Filtering traffic at the firewall

• Question 43:

  The best way to thwart a dictionary attack is by enforcing a:

  A. strong password policy.
  B. restricted access policy.
  C. firewall configuration policy.
  D. proxy server policy.
  A. strong password policy.

• Question 44:

  You have been asked to encrypt a large file using a secure encryption algorithm so you can send it via e-mail to your supervisor. Encryption speed is important. The key will not be transmitted across a network. Which form of encryption should you use?

  A. Asymmetric
  B. PGP
  C. Hash
  D. Symmetric
  D. Symmetric

• Question 45:

  Consider the following diagram:

  

  Which type of attack is occurring?

  A. Polymorphic virus-based attack
  B. Denial-of-service attack
  C. Distributed denial-of-service attack
  D. Man-in-the-middle attack using a packet sniffer
  C. Distributed denial-of-service attack

• Question 46:

  Which of the following is the primary weakness of symmetric-key encryption?

  A. Data encrypted using symmetric-key encryption is subject to corruption during transport.
  B. Symmetric-key encryption operates slower than asymmetric-key encryption.
  C. Symmetric-key encryption does not provide the service of data confidentiality.
  D. Keys created using symmetric-key encryption are difficult to distribute securely.
  D. Keys created using symmetric-key encryption are difficult to distribute securely.

• Question 47:

  Consider the following diagram involving two firewall-protected networks:

  

  Which of the following is necessary for each of the firewalls to allow private IP addresses to be passed on to the Internet?

  A. Chargeback
  B. Stateful multi-layer inspection
  C. Masquerading
  D. DMZ creation
  C. Masquerading

• Question 48:

  What is the first tool needed to create a secure networking environment?

  A. User authentication
  B. Confidentiality
  C. Security policy
  D. Auditing
  C. Security policy

• Question 49:

  Which choice lists typical firewall functions?

  A. Creating a VLAN and configuring the intrusion-detection system
  B. Issuing alerts and limiting host access
  C. Logging traffic and creating a choke point
  D. Implementing the security policy and scanning the internal network
  C. Logging traffic and creating a choke point

• Question 50:

  Consider the following series of commands from a Linux system: iptables -A input -p icmp -s 0/0 A. Individuals on remote networks will no longer be able to use SSH to control internal network resources.
  B. Internal hosts will not be able to ping each other using ICMP.
  C. Stateful multi-layer inspection has been enabled.
  D. Individuals on remote networks will not be able to use ping to troubleshoot connections.

  D. Individuals on remote networks will not be able to use ping to troubleshoot connections.