CIW 1D0-571 Free Practice Questions

Question No: 2

You are creating an information security policy for your company. Which of the following activities will help you focus on creating policies for the most important resources?

A. Auditing the firewall

B. Implementing non-repudiation

C. Logging users

D. Classifying systems

View Answer

Question No: 3

You have been asked to encrypt a large file using a secure encryption algorithm so you can send it via e-mail to your supervisor. Encryption speed is important. The key will not be transmitted across a network. Which form of encryption should you use?

A. Asymmetric

B. PGP

C. Hash

D. Symmetric

View Answer

Question No: 4

A distributed denial-of-service (DDOS) attack has occurred where both ICMP and TCP packets have crashed the company's Web server. Which of the following techniques will best help reduce the severity of this attack?

A. Filtering traffic at the firewall

B. Changing your ISP

C. Installing Apache Server rather than Microsoft IIS

D. Placing the database and the Web server on separate systems

View Answer

Question No: 5

Which choice lists typical firewall functions?

A. Creating a VLAN and configuring the intrusion-detection system

B. Issuing alerts and limiting host access

C. Logging traffic and creating a choke point

D. Implementing the security policy and scanning the internal network

View Answer

Question No: 6

You are using a PKI solution that is based on Secure Sockets Layer (SSL). Which of the following describes the function of the asymmetric-key-encryption algorithm used?

A. It encrypts the symmetric key.

B. It encrypts all of the data.

C. It encrypts the hash code used for data integrity.

D. It encrypts the X.509 key.

View Answer

Question No: 7

Consider the following diagram:

Which type of attack is occurring?

A. Polymorphic virus-based attack

B. Denial-of-service attack

C. Distributed denial-of-service attack

D. Man-in-the-middle attack using a packet sniffer

View Answer

Question No: 8

Which of the following is the primary weakness of symmetric-key encryption?

A. Data encrypted using symmetric-key encryption is subject to corruption during transport.

B. Symmetric-key encryption operates slower than asymmetric-key encryption.

C. Symmetric-key encryption does not provide the service of data confidentiality.

D. Keys created using symmetric-key encryption are difficult to distribute securely.

View Answer

Question No: 9

Your organization has made a particularly unpopular policy decision. Your supervisor fears that a series of attacks may occur as a result. You have been assigned to increase automated auditing on a server. When fulfilling this request, which of the following resources should you audit the most aggressively?

A. Authentication databases, including directory servers

B. Intrusion detection systems, especially those placed on sensitive networks

C. Log files on firewall systems

D. Firewall settings for desktop systems

View Answer

Question No: 10

You have determined that an attack is currently underway on your database server. An attacker is currently logged in, modifying data. You want to preserve logs, caching and other data on this affected server. Which of the following actions will best allow you to stop the attack and still preserve data?

A. Pull the server network cable

B. Shut down the server

C. Back up the system logs

D. Force an instant password reset

View Answer

Question No: 11

Consider the following image:

From the information in this image, what type of attack is occurring?

A. A man-in-the-middle attack

B. A brute-force attack

C. A connection-hijacking attackC.A connection-hijacking attack

D. A spoofing attackD.A spoofing attack

View Answer