Question 1

Which of the following is the primary weakness of symmetric-key encryption?

Accepted Answer

A)  Data encrypted using symmetric-key encryption is subject to corruption during transport. 
B)  Symmetric-key encryption operates slower than asymmetric-key encryption. 
C)  Symmetric-key encryption does not provide the service of data confidentiality. 
D)  Keys created using symmetric-key encryption are difficult to distribute securely. 
A)  Data encrypted using symmetric-key encryption is subject to corruption during transport. 
B)  Symmetric-key encryption operates slower than asymmetric-key encryption. 
C)  Symmetric-key encryption does not provide the service of data confidentiality. 
D)  Keys created using symmetric-key encryption are difficult to distribute securely.

Question 2

A CGI application on the company's Web server has a bug written into it. This particular bug allows the application to write data into an area of memory that has not been properly allocated to the application. An attacker has created an application that takes advantage of this bug to obtain credit card information. Which of the following security threats is the attacker exploiting, and what can be done to solve the problem?

Accepted Answer

A)  - Buffer overflow - Work with the Web developer to solve the problem 
B)  - SQL injection - Work with a database administrator to solve the problem 
C)  - Denial of service - Contact the organization that wrote the code for the Web server 
D)  - Man-in-the-middle attack - Contact the company auditor 
A)  - Buffer overflow - Work with the Web developer to solve the problem 
B)  - SQL injection - Work with a database administrator to solve the problem 
C)  - Denial of service - Contact the organization that wrote the code for the Web server 
D)  - Man-in-the-middle attack - Contact the company auditor

Question 3

You want to create a certificate for use in a Secure Sockets Layer (SSL) session. Which of the following is responsible for verifying the identity of an individual and also issuing the certificate?

Accepted Answer

A)  Kerberos server 
B)  Certificate authority 
C)  Certificate revocation entity 
D)  Certificate repository 
A)  Kerberos server 
B)  Certificate authority 
C)  Certificate revocation entity 
D)  Certificate repository

Question 4

You have been assigned to provide security measures for your office's reception area. Although the company needs to provide security measures, costs must be kept to a minimum. Which of the following tools is the most appropriate choice?

Accepted Answer

A)  Firewall 
B)  Intrusion-detection system 
C)  Camera 
D)  Security guard 
A)  Firewall 
B)  Intrusion-detection system 
C)  Camera 
D)  Security guard

Question 5

Which tool is best suited for identifying applications and code on a Web server that can lead to a SQL injection attack?

Accepted Answer

A)  A vulnerability scanner 
B)  A packet sniffer 
C)  An intrusion-detection system 
D)  A network switch 
A)  A vulnerability scanner 
B)  A packet sniffer 
C)  An intrusion-detection system 
D)  A network switch

Question 6

Which of the following describes the practice of stateful multi-layer inspection?

Accepted Answer

A)  Using a VLAN on a firewall to enable masquerading of private IP addresses 
B)  Prioritizing voice and video data to reduce congestion 
C)  Inspecting packets in all layers of the OSI/RM with a packet filter 
D)  Using Quality of Service (QoS) on a proxy-oriented firewall 
A)  Using a VLAN on a firewall to enable masquerading of private IP addresses 
B)  Prioritizing voice and video data to reduce congestion 
C)  Inspecting packets in all layers of the OSI/RM with a packet filter 
D)  Using Quality of Service (QoS) on a proxy-oriented firewall

Question 7

A new server has been placed on the network. You have been assigned to protect this server using a packet-filtering firewall. To comply with this request, you have enabled the following ruleset:   Which choice describes the next step to take now that this ruleset has been enabled?

Accepted Answer

A)  From the internal network, use your Web browser to determine whether all internal users can access the Web server. 
B)  From the internal network, use your e-mail client to determine whether all internal users can access the e-mail server. 
C)  From the external network, use your Web browser to determine whether all external users can access the Web server. 
D)  From the external network, use your e-mail client to determine whether all external users can access the e-mail server. 
A)  From the internal network, use your Web browser to determine whether all internal users can access the Web server. 
B)  From the internal network, use your e-mail client to determine whether all internal users can access the e-mail server. 
C)  From the external network, use your Web browser to determine whether all external users can access the Web server. 
D)  From the external network, use your e-mail client to determine whether all external users can access the e-mail server.

Question 8

Consider the following diagram involving two firewall-protected networks:   Which of the following is necessary for each of the firewalls to allow private IP addresses to be passed on to the Internet?

Accepted Answer

A)  Chargeback 
B)  Stateful multi-layer inspection 
C)  Masquerading 
D)  DMZ creation 
A)  Chargeback 
B)  Stateful multi-layer inspection 
C)  Masquerading 
D)  DMZ creation

Question 9

Which of the following applications can help determine whether a denial-of-service attack is occurring against a network host?

Accepted Answer

A)  The netstat command and a packet sniffer 
B)  The ps command and a network scanner 
C)  The ping command and User Manager 
D)  The iptables command and Windows desktop firewall 
A)  The netstat command and a packet sniffer 
B)  The ps command and a network scanner 
C)  The ping command and User Manager 
D)  The iptables command and Windows desktop firewall

Question 10

Which of the following is the most likely first step to enable a server to recover from a denial-of-service attack in which all hard disk data is lost?

Accepted Answer

A)  Enable virtualization 
B)  Contact the backup service 
C)  Contact a disk recovery service 
D)  Rebuild your RAID 0 array 
A)  Enable virtualization 
B)  Contact the backup service 
C)  Contact a disk recovery service 
D)  Rebuild your RAID 0 array

Question 11

What is the primary use of hash (one-way) encryption in networking?

Accepted Answer

A)  Signing files, for data integrity 
B)  Encrypting files, for data confidentiality 
C)  Key exchange, for user authentication 
D)  User authentication, for non-repudiation 
A)  Signing files, for data integrity 
B)  Encrypting files, for data confidentiality 
C)  Key exchange, for user authentication 
D)  User authentication, for non-repudiation

Question 12

Which of the following is most likely to address a problem with an operating system's ability to withstand an attack that attempts to exploit a buffer overflow?

Accepted Answer

A)  Firewall 
B)  Software update 
C)  Intrusion detection system 
D)  Network scanner 
A)  Firewall 
B)  Software update 
C)  Intrusion detection system 
D)  Network scanner

Question 13

What is the primary drawback of using symmetric-key encryption?

Accepted Answer

A)  Key transport across a network 
B)  Speed of encryption 
C)  Denial-of-service attacks 
D)  Inability to support convergence traffic 
A)  Key transport across a network 
B)  Speed of encryption 
C)  Denial-of-service attacks 
D)  Inability to support convergence traffic

Question 14

Consider the following image of a packet capture:     Which of the following best describes the protocol used, along with its primary benefit?

Accepted Answer

A)  It is a passive FTP session, which is easier for firewalls to process. 
B)  It is an active FTP session, which is necessary in order to support IPv6. 
C)  It is an extended passive FTP session, which is necessary to support IPv6. 
D)  It is an active FTP session, which is supported by all FTP clients. 
A)  It is a passive FTP session, which is easier for firewalls to process. 
B)  It is an active FTP session, which is necessary in order to support IPv6. 
C)  It is an extended passive FTP session, which is necessary to support IPv6. 
D)  It is an active FTP session, which is supported by all FTP clients.

Question 15

Which of the following is a typical target of a trojan on a Linux system?

Accepted Answer

A)  Kernel modules 
B)  Shared libraries 
C)  Boot sector files 
D)  System32 DLL files 
A)  Kernel modules 
B)  Shared libraries 
C)  Boot sector files 
D)  System32 DLL files

Question 16

You are using a PKI solution that is based on Secure Sockets Layer (SSL). Which of the following describes the function of the asymmetric-key-encryption algorithm used?

Accepted Answer

A)  It encrypts the symmetric key. 
B)  It encrypts all of the data. 
C)  It encrypts the hash code used for data integrity. 
D)  It encrypts the X.509 key. 
A)  It encrypts the symmetric key. 
B)  It encrypts all of the data. 
C)  It encrypts the hash code used for data integrity. 
D)  It encrypts the X.509 key.

Question 17

Jason is attempting to gain unauthorized access to a corporate server by running a program that enters passwords from a long list of possible passwords. Which type of attack is this?

Accepted Answer

A)  Brute force 
B)  Denial of service 
C)  Botnet 
D)  Buffer overflow 
A)  Brute force 
B)  Denial of service 
C)  Botnet 
D)  Buffer overflow

Question 18

Which of the following is a common problem, yet commonly overlooked, in regards to physical security in server rooms?

Accepted Answer

A)  Firewalls that do not have a dedicated backup 
B)  False ceilings 
C)  Logic bombs 
D)  Biometric malfunctions 
A)  Firewalls that do not have a dedicated backup 
B)  False ceilings 
C)  Logic bombs 
D)  Biometric malfunctions

Question 19

You have determined that an attack is currently underway on your database server. An attacker is currently logged in, modifying data. You want to preserve logs, caching and other data on this affected server. Which of the following actions will best allow you to stop the attack and still preserve data?

Accepted Answer

A)  Pull the server network cable 
B)  Shut down the server 
C)  Back up the system logs 
D)  Force an instant password reset 
A)  Pull the server network cable 
B)  Shut down the server 
C)  Back up the system logs 
D)  Force an instant password reset

Question 20

You purchased a network scanner six months ago. In spite of regularly conducting scans using this software, you have noticed that attackers have been able to compromise your servers over the last month. Which of the following is the most likely explanation for this problem?

Accepted Answer

A)  The network scanner needs to be replaced. 
B)  The network scanner is no substitute for scans conducted by an individual. 
C)  The network scanner has a trojan. 
D)  The network scanner needs an update. 
A)  The network scanner needs to be replaced. 
B)  The network scanner is no substitute for scans conducted by an individual. 
C)  The network scanner has a trojan. 
D)  The network scanner needs an update.

Which of the following is the primary weakness of symmetric-key encryption?

You want to create a certificate for use in a Secure Sockets Layer (SSL) session. Which of the following is responsible for verifying the identity of an individual and also issuing the certificate?

You have been assigned to provide security measures for your office's reception area. Although the company needs to provide security measures, costs must be kept to a minimum. Which of the following tools is the most appropriate choice?

Which tool is best suited for identifying applications and code on a Web server that can lead to a SQL injection attack?

Which of the following describes the practice of stateful multi-layer inspection?

A new server has been placed on the network. You have been assigned to protect this server using a packet-filtering firewall. To comply with this request, you have enabled the following ruleset: Which choice describes the next step to take now that this ruleset has been enabled?

Consider the following diagram involving two firewall-protected networks: Which of the following is necessary for each of the firewalls to allow private IP addresses to be passed on to the Internet?

Which of the following applications can help determine whether a denial-of-service attack is occurring against a network host?

Which of the following is the most likely first step to enable a server to recover from a denial-of-service attack in which all hard disk data is lost?

What is the primary use of hash (one-way) encryption in networking?

Which of the following is most likely to address a problem with an operating system's ability to withstand an attack that attempts to exploit a buffer overflow?

What is the primary drawback of using symmetric-key encryption?

Consider the following image of a packet capture: Which of the following best describes the protocol used, along with its primary benefit?

Which of the following is a typical target of a trojan on a Linux system?

You are using a PKI solution that is based on Secure Sockets Layer (SSL). Which of the following describes the function of the asymmetric-key-encryption algorithm used?

Jason is attempting to gain unauthorized access to a corporate server by running a program that enters passwords from a long list of possible passwords. Which type of attack is this?

Which of the following is a common problem, yet commonly overlooked, in regards to physical security in server rooms?

You purchased a network scanner six months ago. In spite of regularly conducting scans using this software, you have noticed that attackers have been able to compromise your servers over the last month. Which of the following is the most likely explanation for this problem?

CIW v5 Site Designer

CIW E-Commerce Designer

CIW v5 Database Design Specialist

CIW Web Foundations Associate

CIW Internet Business Associate

CIW Site Development Associate

CIW Network Technology Associate

CIW User Interface Designer

CIW JavaScript Specialist

Filters

Exam 4: CIW v5 Security Essentials

Which of the following is the primary weakness of symmetric-key encryption?

You want to create a certificate for use in a Secure Sockets Layer (SSL) session. Which of the following is responsible for verifying the identity of an individual and also issuing the certificate?

You have been assigned to provide security measures for your office's reception area. Although the company needs to provide security measures, costs must be kept to a minimum. Which of the following tools is the most appropriate choice?

Which tool is best suited for identifying applications and code on a Web server that can lead to a SQL injection attack?

Which of the following describes the practice of stateful multi-layer inspection?

A new server has been placed on the network. You have been assigned to protect this server using a packet-filtering firewall. To comply with this request, you have enabled the following ruleset: Which choice describes the next step to take now that this ruleset has been enabled?

Consider the following diagram involving two firewall-protected networks: Which of the following is necessary for each of the firewalls to allow private IP addresses to be passed on to the Internet?

Which of the following applications can help determine whether a denial-of-service attack is occurring against a network host?

Which of the following is the most likely first step to enable a server to recover from a denial-of-service attack in which all hard disk data is lost?

What is the primary use of hash (one-way) encryption in networking?

Which of the following is most likely to address a problem with an operating system's ability to withstand an attack that attempts to exploit a buffer overflow?

What is the primary drawback of using symmetric-key encryption?

Consider the following image of a packet capture: Which of the following best describes the protocol used, along with its primary benefit?

Which of the following is a typical target of a trojan on a Linux system?

You are using a PKI solution that is based on Secure Sockets Layer (SSL). Which of the following describes the function of the asymmetric-key-encryption algorithm used?

Jason is attempting to gain unauthorized access to a corporate server by running a program that enters passwords from a long list of possible passwords. Which type of attack is this?

Which of the following is a common problem, yet commonly overlooked, in regards to physical security in server rooms?

You purchased a network scanner six months ago. In spite of regularly conducting scans using this software, you have noticed that attackers have been able to compromise your servers over the last month. Which of the following is the most likely explanation for this problem?

CIW v5 Site Designer

CIW E-Commerce Designer

CIW v5 Database Design Specialist

CIW Web Foundations Associate

CIW Internet Business Associate

CIW Site Development Associate

CIW Network Technology Associate

CIW User Interface Designer

CIW JavaScript Specialist

Filters