Pass CIW 1D0-671 Actual Free Exam Q&As Updated Dump Oct 24, 2024
Latest 1D0-671 Actual Free Exam Updated 126 Questions
NEW QUESTION # 10
Consider the following series of commands from a Linux system:
iptables -A input -p icmp -s 0/0 -d 0/0 -j REJECT
Which explanation best describes the impact of the resulting firewall ruleset?
- A. Individuals on remote networks will no longer be able to use SSH to control internal network resources.
- B. Individuals on remote networks will not be able to use ping to troubleshoot connections.
- C. Internal hosts will not be able to ping each other using ICMP.
- D. Stateful multi-layer inspection has been enabled.
Answer: B
NEW QUESTION # 11
Which technique can help to protect an FTP server?
- A. Install the operating system on the same partition as the FTP server.
- B. Place downloads on the same partition as the FTP server binaries.
- C. When setting IP-based blocking rules for the FTP server, move the FTP files to C:\ftpfiles for maximum security.
- D. Use separate FTP user accounts from those used to access the Web.
Answer: D
NEW QUESTION # 12
What is the primary use of hash (one-way) encryption in networking?
- A. Signing files, for data integrity
- B. User authentication, for non-repudiation
- C. Key exchange, for user authentication
- D. Encrypting files, for data confidentiality
Answer: A
NEW QUESTION # 13
Which of the following is a primary auditing activity?
- A. Configuring the firewall
- B. Encrypting data files
- C. Checking log files
- D. Changing login accounts
Answer: C
NEW QUESTION # 14
Consider the following image of a packet capture:
Which of the following best describes the protocol used, along with its primary benefit?
- A. It is an active FTP session, which is necessary in order to support IPv6.
- B. It is an active FTP session, which is supported by all FTP clients.
- C. It is a passive FTP session, which is easier for firewalls to process.
- D. It is an extended passive FTP session, which is necessary to support IPv6.
Answer: C
NEW QUESTION # 15
Why can instant messaging (IM) and peer-to-peer (P2P) applications be considered a threat to network security?
- A. Because they use ports below 1023 and many firewalls are not configured to block this traffic
- B. Because they usually lie outside the broadcast domain
- C. Because they use ports above 1023 and many firewalls are not configured to block this traffic
- D. Because they are susceptible to VLAN hopping
Answer: C
NEW QUESTION # 16
Which of the following is a primary weakness of asymmetric-key encryption?
- A. It is reliant on the Secure Sockets Layer (SSL) standard, which has been compromised.
- B. It can lead to the corruption of encrypted data during network transfer.
- C. It is slow because it requires extensive calculations by the computer.
- D. It is difficult to transfer any portion of an asymmetric key securely.
Answer: C
NEW QUESTION # 17
Which of the following describes the practice of stateful multi-layer inspection?
- A. Prioritizing voice and video data to reduce congestion
- B. Using a VLAN on a firewall to enable masquerading of private IP addresses
- C. Using Quality of Service (QoS) on a proxy-oriented firewall
- D. Inspecting packets in all layers of the OSI/RM with a packet filter
Answer: D
NEW QUESTION # 18
What is TEMPEST?
- A. A biometric technique that places an individual's biometric information onto smart cards
- B. A physical security technique that applies humidity controls and proper ventilation to networking equipment
- C. A physical access control technique in which knowledgeable, skilled guards are placed at all locations containing false ceilings and exposed jacks
- D. A standard developed by the U.S. government to help control electromagnetic transmissions that interfere with network connectivity
Answer: D
NEW QUESTION # 19
You have determined that the company Web server has several vulnerabilities, including a buffer overflow that has resulted in an attack. The Web server uses PHP and has direct connections to an Oracle database server. It also uses many CGI scripts.
Which of the following is the most effective way to respond to this attack?
- A. Installing an intrusion detection service to monitor logins
- B. Using the GET method instead of the POST method for a Web form
- C. Using the POST method instead of the GET method for a Web form
- D. Installing software updates for the Web server daemon
Answer: D
NEW QUESTION # 20
Which protocol uses cleartext communication by default?
- A. IPSEC
- B. POP3
- C. SSL
- D. HTTP
Answer: D
NEW QUESTION # 21
Requests for Web-based resources have become unacceptably slow. You have been assigned to implement a solution that helps solve this problem.
Which of the following would you recommend?
- A. Implement caching on the network proxy server
- B. Implement a screening router on the network DMZ
- C. Enable authentication on the network proxy server
- D. Enable stateful multi-layer inspection on the packet filter
Answer: A
NEW QUESTION # 22
What distinguishes hash encryption from other forms of encryption?
- A. Hash encryption creates a single key that is used to encrypt and decrypt information.
- B. Hash encryption is the encryption method of choice when conducting e-commerce transactions.
- C. Hash encryption is used for information that you want never to be decrypted or read.
- D. Hash encryption creates a mathematically matched key pair in which one half of the pair encrypts, and the other half decrypts.
Answer: C
NEW QUESTION # 23
Which of the following is the device used to authenticate and encrypt packets in IPsec?
- A. Authentication Header (AH)
- B. Internet Key Exchange (IKE)
- C. Encapsulating Security Payload (ESP)
- D. Encryption tunnel
Answer: C
NEW QUESTION # 24
What is the main purpose of reviewing a security incident after it has been resolved?
- A. To learn what can be changed or improved in your security policy
- B. To discover and report that a piece of hardware or software has purportedly failed
- C. To bring charges against the ISP that carries the hacker's account
- D. To discover who within your company should be reprimanded
Answer: A
NEW QUESTION # 25
In relation to security, which of the following is the primary benefit of classifying systems?
- A. Ability to identify common attacks
- B. Collection of information for properly configuring the firewall
- C. Identification of highest-priority systems to protect
- D. Ability to recover quickly from a natural or man-made disaster
Answer: C
NEW QUESTION # 26
Which of the following constitutes a problem when conducting a reverse scan?
- A. IP address spoofing
- B. Default settings on target systems
- C. An older system kernel
- D. SYN floods
Answer: A
NEW QUESTION # 27
Which of the following is the most likely first step to enable a server to recover from a denial-of- service attack in which all hard disk data is lost?
- A. Contact the backup service
- B. Contact a disk recovery service
- C. Rebuild your RAID 0 array
- D. Enable virtualization
Answer: A
NEW QUESTION # 28
Which of the following organizations provides regular updates concerning security breaches and issues?
- A. ISO
- B. ICANN
- C. CERT
- D. IETF
Answer: C
NEW QUESTION # 29
A distributed denial-of-service (DDOS) attack has occurred where both ICMP and TCP packets have crashed the company's Web server.
Which of the following techniques will best help reduce the severity of this attack?
- A. Installing Apache Server rather than Microsoft IIS
- B. Changing your ISP
- C. Placing the database and the Web server on separate systems
- D. Filtering traffic at the firewall
Answer: D
NEW QUESTION # 30
Which ICMP message type is used to synchronize time between two hosts?
- A. Timestamp Request and Reply
- B. Parameter Problem and Time Exceeded
- C. Echo Request
- D. Time Exceeded
Answer: A
NEW QUESTION # 31
Which symmetric algorithm created by the RSA Security Corporation is a stream cipher that encrypts messages as a whole, in real time?
- A. RC4
- B. RC5
- C. RC2
- D. RC6
Answer: A
NEW QUESTION # 32
Which term describes an outer corporate network, created using VPN technologies, that extends the corporate network to include suppliers and customers?
- A. Public Key Infrastructure
- B. Virtual network
- C. Virtual network perimeter
- D. Extended firewall network
Answer: C
NEW QUESTION # 33
Which of the following can help you authoritatively trace a network flooding attack?
- A. Ping
- B. Router logs
- C. Firewall logs
- D. Your ISP
Answer: D
NEW QUESTION # 34
You have implemented a version of the Kerberos protocol for your network.
What service does Kerberos primarily offer?
- A. Non-repudiation
- B. Data integrity
- C. Encryption
- D. Authentication
Answer: D
NEW QUESTION # 35
......
Online Questions - Valid Practice 1D0-671 Exam Dumps Test Questions: https://www.examdumpsvce.com/1D0-671-valid-exam-dumps.html
100% Real 1D0-671 dumps - Brilliant 1D0-671 Exam Questions PDF: https://drive.google.com/open?id=1c7aVnCIiMyCwy8QBLG3waJMvtyPLh212
