CIW Web Security Associate (1D0-671) Free Practice Test

Question 1

Which of the following is the device used to authenticate and encrypt packets in IPsec?

A. Encryption tunnel

B. Internet Key Exchange (IKE)

C. Authentication Header (AH)

D. Encapsulating Security Payload (ESP)

Correct Answer: D

Question 2

You have determined that the company Web server has several vulnerabilities, including a buffer overflow that has resulted in an attack. The Web server uses PHP and has direct connections to an Oracle database server. It also uses many CGI scripts.
Which of the following is the most effective way to respond to this attack?

A. Installing software updates for the Web server daemon

B. Installing an intrusion detection service to monitor logins

C. Using the GET method instead of the POST method for a Web form

D. Using the POST method instead of the GET method for a Web form

Correct Answer: A

Question 3

Considering physical security, which of the following should you look for when identifying a room that will act as a server room?

A. Power over Ethernet (PoE) settings

B. Space for backup servers

C. Electrical outlets

D. False ceilings

Correct Answer: D

Question 4

What would be the result if you were the recipient of a SYN flood or malformed packet?

A. A virus would be unleashed on your system at the time the SYN flood or malformed packet was received.

B. The files on your boot sector would be replaced with infected code.

C. You would be unable to access a legitimate service, such as establishing a network connection.

D. You would be misdirected to a fraudulent Web site without your knowledge or consent.

Correct Answer: C

Question 5

What is the main purpose of reviewing a security incident after it has been resolved?

A. To learn what can be changed or improved in your security policy

B. To bring charges against the ISP that carries the hacker's account

C. To discover and report that a piece of hardware or software has purportedly failed

D. To discover who within your company should be reprimanded

Correct Answer: A

Question 6

Which of the following will best help you ensure a database server can withstand a recently discovered vulnerability?

A. Installing a system update

B. Reconfiguring the firewall

C. Adding a buffer overflow rule to the intrusion detection system

D. Updating the company vulnerability scanner and conducting a new scan

Correct Answer: A

Welcome to TestSimulate

CIW Web Security Associate (1D0-671) Free Practice Test