1D0-571 Exam Training Practice Tests (CIW v5 Security Essentials)]

Question 1

A CGI application on the company's Web server has a bug written into it. This particular bug allows the application to write data into an area of memory that has not been properly allocated to the application. An attacker has created an application that takes advantage of this bug to obtain credit card information. Which of the following security threats is the attacker exploiting, and what can be done to solve the problem?

A. - Buffer overflow
- Work with the Web developer to solve the problem B. - SQL injection
- Work with a database administrator to solve the problem C. - Denial of service
- Contact the organization that wrote the code for the Web server D. - Man-in-the-middle attack
- Contact the company auditor

Correct Answer: A

Question 2

A distributed denial-of-service (DDOS) attack has occurred where both ICMP and TCP packets have crashed the company's Web server. Which of the following techniques will best help reduce the severity of this attack?

A. Changing your ISP B. Installing Apache Server rather than Microsoft IIS C. Filtering traffic at the firewall D. Placing the database and the Web server on separate systems

Correct Answer: C

Question 3

You want to create a quick solution that allows you to obtain real-time login information for the administrative account on an LDAP server that you feel may become a target. Which of the following will accomplish this goal?

A. Create a login script for the administrative account that records logins to a separate server. B. Reinstall the LDAP service on the server so that it is updated and more secure. C. Install an application that creates checksums of the contents on the hard disk. D. Create a dummy administrator account on the system so that a potential hacker is distracted from the real login account.

Correct Answer: A

Question 4

A security breach has occurred involving the company e-commerce server. Customer credit card data has been released to unauthorized third parties. Which of the following lists the appropriate parties to inform?

A. Affected customers, credit card companies and law enforcement agencies B. External security consultants, company board members and affected customers C. The Internet Service Provider, ICANN and company shareholders D. Shareholders, law enforcement agencies and company employees

Correct Answer: A

Question 5

You have been assigned to provide security measures for your office's reception area.
Although the company needs to provide security measures, costs must be kept to a minimum. Which of the following tools is the most appropriate choice?

A. Intrusion-detection system B. Security guard C. Camera D. Firewall

Correct Answer: C

Question 6

You have discovered that the ls, su and ps commands no longer function as expected.
They do not return information in a manner similar to any other Linux system. Also, the implementation of Tripwire you have installed on this server is returning new hash values.
Which of the following has most likely occurred?

A. A spyware application has been installed. B. A trojan has attacked the system. C. A SQL injection attack has occurred. D. A root kit has been installed on the system.

Correct Answer: D

Question 7

You have implemented a version of the Kerberos protocol for your network. What service does Kerberos primarily offer?

A. Non-repudiation B. Authentication C. Encryption D. Data integrity

Correct Answer: B

CIW v5 Security Essentials - 1D0-571 Exam Practice Test