The Most In-Demand CIW 1D0-671 Pass Guaranteed Quiz [Q44-Q58]

Rate this post

The Most In-Demand CIW 1D0-671 Pass Guaranteed Quiz

New Version 1D0-671 Certificate & Helpful Exam Dumps is Online

QUESTION 44
Consider the following image of a packet capture:
This packet capture has recorded two types of attacks.
Which choice lists both attack types?

A dictionary attack and a worm-based attackA.A dictionary attack and a worm-based attack

A syn flood attack and a spoofing attackB.A syn flood attack and a spoofing attack

A worm attack and a botnet attack C.A worm attack and a botnet attack

A SQL injection attack and a virus attackD.A SQL injection attack and a virus attack

QUESTION 45
Which security standard consists of 11 titles that are designed to improve the accuracy and reliability of corporate disclosure to reinforce investment confidence and protect investors?

Sarbanes-Oxley (SOX)

ISO 17799

The Common Criteria (CC)

Gramm-Leach-Bliley Act (GLBA)

QUESTION 46
Which of the following is the primary weakness of symmetric-key encryption?

Data encrypted using symmetric-key encryption is subject to corruption during transport.

Symmetric-key encryption operates slower than asymmetric-key encryption.

Symmetric-key encryption does not provide the service of data confidentiality.

Keys created using symmetric-key encryption are difficult to distribute securely.

QUESTION 47
Which of the following is a common problem with proxy servers?

Proxy servers do not log incoming and outgoing access, so you will not be able to see details of successful and failed connections.

Proxy servers cannot filter out specific application-layer traffic.

Proxy servers may return old cached information.

Because proxy servers do not mask network resources, hackers may be able to access all exposed systems.

QUESTION 48
Which tool is best suited for identifying applications and code on a Web server that can lead to a SQL injection attack?

A vulnerability scanner

A packet sniffer

An intrusion-detection system

A network switch

QUESTION 49
Which of the following accurately describes an aspect of an access control list (ACL)?

The ACL defines users that have access to a resource on a database server.

The ACL defines the database roles that users have on a database server.

The ACL cannot determine whether a user has access to an object, but can define exactly what the user can do with that object.

The ACL lists entities that can access a database server, but does not provide access levels.

QUESTION 50
Consider the following diagram:
Which type of attack is occurring?

Polymorphic virus-based attack

Denial-of-service attack

Distributed denial-of-service attack

Man-in-the-middle attack using a packet sniffer

QUESTION 51
Which of the following commands would you use to create a simple personal firewall that blocks all incoming ICMP traffic?

iptables -A INPUT -p icmp -s 10.100.100.0/24 -d 0/0 -j DROP

iptables -A INPUT -p icmp -s 10.100.100.0/255.255.255 -d 0/0 -j KILL

iptables -A INPUT -p icmp -s 0/0 -d 0/0 -j DROP

iptables – INPUT -p icmp -s 0/0 -d 0/0 -j KILL

QUESTION 52
A distributed denial-of-service (DDOS) attack has occurred where both ICMP and TCP packets have crashed the company’s Web server.
Which of the following techniques will best help reduce the severity of this attack?

Filtering traffic at the firewall

Changing your ISP

Installing Apache Server rather than Microsoft IIS

Placing the database and the Web server on separate systems

QUESTION 53
Why can instant messaging (IM) and peer-to-peer (P2P) applications be considered a threat to network security?

Because they use ports above 1023 and many firewalls are not configured to block this traffic

Because they are susceptible to VLAN hopping

Because they usually lie outside the broadcast domain

Because they use ports below 1023 and many firewalls are not configured to block this traffic

QUESTION 54
In relation to security, which of the following is the primary benefit of classifying systems?

Ability to identify common attacks

Identification of highest-priority systems to protect

Ability to recover quickly from a natural or man-made disaster

Collection of information for properly configuring the firewall

QUESTION 55
A CGI application on the company’s Web server has a bug written into it. This particular bug allows the application to write data into an area of memory that has not been properly allocated to the application. An attacker has created an application that takes advantage of this bug to obtain credit card information.
Which of the following security threats is the attacker exploiting, and what can be done to solve the problem?

– Buffer overflow
– Work with the Web developer to solve the problem

– SQL injection
– Work with a database administrator to solve the problem

– Denial of service
– Contact the organization that wrote the code for the Web server

– Man-in-the-middle attack
– Contact the company auditor

QUESTION 56
To implement a successful security system, you should:

use as many security principles and techniques as you can to protect each resource.

place your firewall and network in a public area so that authorized users have easy access to them to solve problems as they occur.

implement beta software and operating systems that hold the promise of enhanced security measures.

find a product that can offer full protection against all threats.

QUESTION 57
The vast majority of hackers are which type of attacker?

Casual attacker

Spy

Disgruntled employee

Determined attacker

QUESTION 58
Consider the following diagram:
Which of the following best describes the protocol activity shown in the diagram, along with the most likely potential threat that accompanies this protocol?

The ICMP Time Exceeded message, with the threat of a denial-of-service attack

The SIP three-way handshake, with the threat of a buffer overflow

The TCP three-way handshake, with the threat of a man-in-the-middle attack

The DNS name query, with the threat of cache poisoning

Loading …

1D0-671 Free Certification Exam Material with 126 Q&As : https://www.actualcollection.com/1D0-671-exam-questions.html

Leave a comment Cancel reply