1D0-671 Exam Training Practice Tests (CIW Web Security Associate)]

Question 1

A distributed denial-of-service (DDOS) attack has occurred where both ICMP and TCP packets have crashed the company's Web server.
Which of the following techniques will best help reduce the severity of this attack?

A. Changing your ISP B. Installing Apache Server rather than Microsoft IIS C. Filtering traffic at the firewall D. Placing the database and the Web server on separate systems

Correct Answer: C

Question 2

What is the primary advantage of using a circuit-level proxy?

A. It provides Network Address Translation (NAT). B. It can discriminate between good and malicious data. C. It allows masquerading. D. It allows applications to provide connection information to the SOCKS server.

Correct Answer: A

Question 3

A new server has been placed on the network. You have been assigned to protect this server using a packet-filtering firewall. To comply with this request, you have enabled the following ruleset:
Which choice describes the next step to take now that this ruleset has been enabled?

A. From the internal network, use your e-mail client to determine whether all internal users can access the e-mail server. B. From the external network, use your e-mail client to determine whether all external users can access the e-mail server. C. From the external network, use your Web browser to determine whether all external users can access the Web server. D. From the internal network, use your Web browser to determine whether all internal users can access the Web server.

Correct Answer: B

Question 4

Which of the following can effectively thwart VLAN hopping?

A. Enabling your network's autotrunking capability B. Enabling multiple firewalls on your broadcast domain C. Ensuring that each trunk port retains its default VLAN setting (VLAN1) D. Removing the default VLAN setting (VLAN1) from any trunk port

Correct Answer: D

Question 5

Your firewall is configured to forbid all internal traffic from going out to the Internet. You want to allow internal clients to access all Web traffic.
At a minimum, what ports must you open in regards to the internal systems?

A. TCP Ports 80 and 443, and all ports above 1023 B. All TCP ports above 80 and below 1023 C. TCP Ports 80 and 443 D. TCP Port 80 and all ports above 1023

Correct Answer: A

Question 6

Which of the following is a common problem with proxy servers?

A. Proxy servers do not log incoming and outgoing access, so you will not be able to see details of successful and failed connections. B. Proxy servers may return old cached information. C. Proxy servers cannot filter out specific application-layer traffic. D. Because proxy servers do not mask network resources, hackers may be able to access all exposed systems.

Correct Answer: B

Question 7

Considering physical security, which of the following should you look for when identifying a room that will act as a server room?

A. Power over Ethernet (PoE) settings B. Electrical outlets C. False ceilings D. Space for backup servers

Correct Answer: C

CIW Web Security Associate - 1D0-671 Exam Practice Test