CIW Web Security Associate - 1D0-671 Exam Practice Test

Question 1

Which of the following is most likely to address a problem with an operating system's ability to withstand an attack that attempts to exploit a buffer overflow?

A. Intrusion detection system

B. Software update

C. Firewall

D. Network scanner

Correct Answer: B

Question 2

Which of the following errors most commonly occurs when responding to a security breach?

A. Taking too much time to document the attack

B. Shutting down network access using the firewall, rather than the network router

C. Making snap judgments based on emotions, as opposed to company policy

D. Adhering to the company policy rather than determining actions based on the IT manager's input

Correct Answer: C

Question 3

Which of the following security measures presents the most risk?

A. A login script

B. A jail

C. A tripwire

D. A firewall application

Correct Answer: B

Question 4

Which of the following is considered to be the most secure default firewall policy, yet usually causes the most work from an administrative perspective?

A. Blocking all access by default, then allowing only necessary connections

B. Configuring the firewall to respond automatically to threats

C. Allowing all access by default, then blocking only suspect network connections

D. Configuring the firewall to coordinate with the intrusion-detection system

Correct Answer: A

Question 5

Why can instant messaging (IM) and peer-to-peer (P2P) applications be considered a threat to network security?

A. Because they use ports below 1023 and many firewalls are not configured to block this traffic

B. Because they use ports above 1023 and many firewalls are not configured to block this traffic

C. Because they usually lie outside the broadcast domain

D. Because they are susceptible to VLAN hopping

Correct Answer: B

Question 6

Which term describes an outer corporate network, created using VPN technologies, that extends the corporate network to include suppliers and customers?

A. Extended firewall network

B. Virtual network perimeter

C. Public Key Infrastructure

D. Virtual network

Correct Answer: B

Question 7

A security breach has occurred involving the company e-commerce server. Customer credit card data has been released to unauthorized third parties.
Which of the following lists the appropriate parties to inform?

A. Affected customers, credit card companies and law enforcement agencies

B. Shareholders, law enforcement agencies and company employees

C. External security consultants, company board members and affected customers

D. The Internet Service Provider, ICANN and company shareholders

Correct Answer: A

Question 8

You have just deployed an application that uses hash-based checksums to monitor changes in the configuration scripts of a database server that is accessible via the Internet.
Which of the following is a primary concern for this solution?

A. The possibility of a buffer overflow attack leading to a security breach

B. The amount of memory remaining now that the checksum-based application is running

C. The extra hard disk space required to store the database of checksums

D. The security of the checksum database on a read-only media format

Correct Answer: D

CIW Web Security Associate - 1D0-671 Exam Practice Test

Latest Update

Useful Links

Contact Us