最新的Web Security Series認證 1D0-671考試題庫

問題1

Which of the following is a security principle that allows you to protect your network resources?

A. Deploy security enforcement only in the largest departments.

B. Realize that some high-end systems should stand alone.

C. Provide training for end users and IT workers.

D. Avoid being suspicious of legitimate activity.

正確答案: C

問題2

Jason is attempting to gain unauthorized access to a corporate server by running a program that enters passwords from a long list of possible passwords.
Which type of attack is this?

A. Botnet

B. Brute force

C. Buffer overflow

D. Denial of service

正確答案: B

問題3

You have implemented a version of the Kerberos protocol for your network.
What service does Kerberos primarily offer?

A. Authentication

B. Non-repudiation

C. Encryption

D. Data integrity

正確答案: A

問題4

Which choice lists typical firewall functions?

A. Issuing alerts and limiting host access

B. Implementing the security policy and scanning the internal network

C. Logging traffic and creating a choke point

D. Creating a VLAN and configuring the intrusion-detection system

正確答案: C

問題5

You have implemented a service on a Linux system that allows a user to read and edit resources.
What is the function of this service?

A. Authentication

B. Data integrity

C. Access control

D. Intrusion detection

正確答案: C

問題6

You have determined that the company Web server has several vulnerabilities, including a buffer overflow that has resulted in an attack. The Web server uses PHP and has direct connections to an Oracle database server. It also uses many CGI scripts.
Which of the following is the most effective way to respond to this attack?

A. Using the POST method instead of the GET method for a Web form

B. Installing an intrusion detection service to monitor logins

C. Using the GET method instead of the POST method for a Web form

D. Installing software updates for the Web server daemon

正確答案: D

問題7

When Tripwire discovers that a file or database has been altered, how will it alert you?

A. Via an e-mail message only

B. Via a log file entry only

C. Via a pager configured to receive a special signal

D. Via e-mail or a log file entry

正確答案: D

最新的CIW Web Security Associate - 1D0-671免費考試真題

最新更新

站內鏈接

聯系我們