Best Preparations of 1D0-671 Exam 2024 Web Security Series Unlimited 126 Questions [Q49-Q70]

Rate this post

Best Preparations of 1D0-671 Exam 2024 Web Security Series Unlimited 126 Questions

Focus on 1D0-671 All-in-One Exam Guide For Quick Preparation.

QUESTION 49
Which of the following standards is used for digital certificates?

DES

Diffie-Hellman

X.509

RC5

QUESTION 50
A security breach has occurred in which a third party was able to obtain and misuse legitimate authentication information. After investigation, you determined that the specific cause for the breach was that end users have been placing their passwords underneath their keyboards.
Which step will best help you resolve this problem?

Discipline specific end users as object lessons to the rest of the staff and reset passwords on all systems immediately.

Change all passwords on the company servers immediately and inform end users that their passwords will be changing on a regular basis.

Set passwords to expire at specific intervals and establish mandatory continual training sessions.

Inform end users that their passwords will be changing on a regular basis and require more complex passwords.

QUESTION 51
What is TEMPEST?

A physical access control technique in which knowledgeable, skilled guards are placed at all locations containing false ceilings and exposed jacks

A physical security technique that applies humidity controls and proper ventilation to networking equipment

A standard developed by the U.S. government to help control electromagnetic transmissions that interfere with network connectivity

A biometric technique that places an individual’s biometric information onto smart cards

QUESTION 52
Which component works with an operating system to increase its security ability?

Network scanner

Operating system add-on

Log analysis tool

Port scanner

QUESTION 53
A security breach has occurred involving the company e-commerce server. Customer credit card data has been released to unauthorized third parties.
Which of the following lists the appropriate parties to inform?

Shareholders, law enforcement agencies and company employees

Affected customers, credit card companies and law enforcement agencies

The Internet Service Provider, ICANN and company shareholders

External security consultants, company board members and affected customers

QUESTION 54
The most popular types of proxy-oriented firewalls operate at which layer of the OSI/RM?

Application layer

Network layer

Session layer

Transport layer

QUESTION 55
Which algorithm can use a 128-bit key, and has been adopted as a standard by various governments and corporations?

MARS

RC2

Advanced Encryption Standard (AES)

International Data Encryption Algorithm (IDEA)

QUESTION 56
Requests for Web-based resources have become unacceptably slow. You have been assigned to implement a solution that helps solve this problem.
Which of the following would you recommend?

Enable stateful multi-layer inspection on the packet filter

Implement caching on the network proxy server

Enable authentication on the network proxy server

Implement a screening router on the network DMZ

QUESTION 57
Consider the following diagram:
Which type of attack is occurring?

Polymorphic virus-based attack

Denial-of-service attack

Distributed denial-of-service attack

Man-in-the-middle attack using a packet sniffer

QUESTION 58
Which term describes a dedicated system meant only to house firewall software?

Firewall appliance

Virtual Private Network (VPN)

Kernel firewall

Proxy server

QUESTION 59
What is the primary advantage of using a circuit-level proxy?

It provides Network Address Translation (NAT).

It can discriminate between good and malicious data.

It allows applications to provide connection information to the SOCKS server.

It allows masquerading.

QUESTION 60
An effective way to prevent a user from becoming the victim of a malicious bot is to use a technique in which the user must view a distorted text image, and then type it before he or she is allowed to proceed with a transaction.
This technique is known as a:

CAPTCHA.

zombie.

botnet.

SQL injection.

QUESTION 61
A CGI application on the company’s Web server has a bug written into it. This particular bug allows the application to write data into an area of memory that has not been properly allocated to the application. An attacker has created an application that takes advantage of this bug to obtain credit card information.
Which of the following security threats is the attacker exploiting, and what can be done to solve the problem?

– Buffer overflow
– Work with the Web developer to solve the problem

– SQL injection
– Work with a database administrator to solve the problem

– Denial of service
– Contact the organization that wrote the code for the Web server

– Man-in-the-middle attack
– Contact the company auditor

QUESTION 62
Consider the following image of a packet capture:
Which of the following best describes the protocol used, along with its primary benefit?

It is a passive FTP session, which is easier for firewalls to process.

It is an active FTP session, which is necessary in order to support IPv6.

It is an extended passive FTP session, which is necessary to support IPv6.

It is an active FTP session, which is supported by all FTP clients.

QUESTION 63
Which of the following applications can help determine whether a denial-ofservice attack is occurring against a network host?

The netstat command and a packet sniffer

The ps command and a network scanner

The ping command and User Manager

The iptables command and Windows desktop firewall

QUESTION 64
A new video conferencing device has been installed on the network. You have been assigned to troubleshoot a connectivity problem between remote workers and the central company. Specifically, remote workers are having problems making any connection at all.
Which technique will most likely help you solve this problem while retaining the existing level of security at the firewall?

Deny all use of UDP above Port 1024.

Configure the firewall to provide VPN access.

Configure a second network connection directly to the video conferencing device.

Allow all use of UDP below Port 1024.

QUESTION 65
What is the primary drawback of using symmetric-key encryption?

Key transport across a network

Speed of encryption

Denial-of-service attacks

Inability to support convergence traffic

QUESTION 66
Which choice lists the designated stages of a hacker attack in the correct order?

Discovery, penetration, control

Sniffing, penetration, control

Sniffing, discovery, penetration

Penetration, discovery, control

QUESTION 67
All servers assume that a valid IP address belongs to the computer that sent it. Because TCP/IP contains no built-in authentication, a hacker can assume the identity of another device.
If your security depends entirely upon the TCP/IP identity, which type of attack can allow a hacker to gain access to your system?

A spoofing attack

A social engineering attack

A denial-of-service attack

A brute-force attack

QUESTION 68
Which attribute of a security matrix considers the number of employees necessary to successfully implement and maintain your system?

Appropriate cost of ownership

Access control

Ease of use

Flexibility and scalability

QUESTION 69
Which of the following can effectively thwart VLAN hopping?

Removing the default VLAN setting (VLAN1) from any trunk port

Enabling multiple firewalls on your broadcast domain