CIW Web Security Associate (1D0-671) Certification Sample Questions

Web Security Associate Dumps, 1D0-671 Dumps, 1D0-671 PDF, Web Security Associate VCE, CIW 1D0-671 VCE, CIW Web Security Associate PDF The purpose of this Sample Question Set is to provide you with information about the CIW Web Security Associate exam. These sample questions will make you very familiar with both the type and the difficulty level of the questions on the 1D0-671 certification test. To get familiar with real exam environment, we suggest you try our Sample CIW Web Security Associate Certification Practice Exam. This sample practice exam gives you the feeling of reality and is a clue to the questions asked in the actual CIW Web Security Associate certification exam.

These sample questions are simple and basic questions that represent likeness to the real CIW 1D0-671 exam questions. To assess your readiness and performance with real time scenario based questions, we suggest you prepare with our Premium CIW Web Security Associate Certification Practice Exam. When you solve real time scenario based questions practically, you come across many difficulties that give you an opportunity to improve.

CIW 1D0-671 Sample Questions:

01. Five network administrators share a single administrator account, and its password is written in the team's runbook. After an unauthorized change to a core switch, the security officer cannot determine who made it.

Which risk factor does this situation illustrate?

a) An unpatched vulnerability in the switch's operating system

b) Weak encryption of the switch's management traffic

c) Improper authentication that removes individual accountability

d) A denial-of-service condition caused by account lockout

02. A company's border router accepts dynamic routing updates from any neighbor. An attacker on an adjacent network injects updates advertising a better path to the company's payroll server subnet, and traffic begins flowing through the attacker's router.

Which measure would have prevented the router from accepting the false routes?

a) Authenticating routing updates from known neighbors

b) Disabling ICMP echo replies on all of the border router's interfaces

c) Encrypting the disks of the payroll servers on that subnet

d) Increasing the maximum size of the router's routing table

03. Users in the finance department must be able to open a shared folder that contains approved spreadsheets. Last month, a user ran a macro-enabled file from that same folder that tried to open network connections and write to system directories. The administrator wants to keep users' read access to the folder while restricting what code launched from it is allowed to do.

Which control fits this requirement?

a) An access control list that removes read permission from the folder

b) An execution control list that limits the actions such code may perform

c) A stateful firewall rule that blocks all traffic to the folder's file server

d) A stronger password policy for accounts in the finance department

04. A company encrypts its laptops with BitLocker, using only the TPM to unlock the drive, so a laptop boots straight to the Windows sign-in screen without any extra prompt. An auditor worries that a thief could attack a stolen laptop while its drive is already unlocked at the sign-in screen.

Which change addresses this concern?

a) Store the BitLocker recovery key on the laptop's desktop

b) Turn off BitLocker and use file-level permissions instead

c) Disable the TPM and rely on the Windows sign-in password

d) Require pre-boot authentication to unlock the drive

05. Several users on one floor suddenly receive IP settings that point their default gateway and DNS server to an unfamiliar address. Investigation finds an unauthorized device plugged into a conference-room wall jack and answering DHCP requests.

Which control on the switches would prevent this attack?

a) DHCP snooping, trusting only the real server's ports

b) Static ARP entries for the default gateway on the DHCP server

c) A shorter DHCP lease time on the legitimate server, so clients renew more often

d) SNMPv3 monitoring of the switch ports on that floor

06. A company's only protection for its internal file servers is a well-configured perimeter firewall. An employee then opens a malicious e-mail attachment, and the malware begins spreading from the employee's workstation to the file servers.

Which addition best applies the principle of defense in depth to this environment?

a) Replacing the perimeter firewall with a faster model that inspects more traffic

b) Host-based protection and internal segmentation behind the firewall

c) A stricter rule set on the existing perimeter firewall

d) A second perimeter firewall from a different vendor in front of the first

07. Which two functions can a proxy-based firewall provide that a simple packet filter cannot?

(Choose two.)

a) Filtering by source and destination IP address

b) Blocking traffic to a specific TCP port

c) Authenticating users before relaying their connections

d) Caching frequently requested Web content

08. After a data theft, a company may take legal action against a former employee. The investigator removes a hard drive from the employee's workstation.

Which practice helps ensure that the drive will be accepted as evidence?

a) Documenting who handled the drive, when and why, at every transfer

b) Booting the workstation from the drive to see what the employee saw

c) Copying the relevant files, with their dates, to a shared folder for the legal team

d) Running antivirus software against the drive to remove malicious files

09. An intruder who gained administrator access to a server deleted the server's local audit log to hide what was done. The security team wants future audit records to remain trustworthy even if a server is fully compromised.

Which measure best meets that goal?

a) Enable auditing of failed logins as well as successful ones

b) Store the local audit log in a hidden directory on the server

c) Send audit events in real time to a separate log server

d) Increase the maximum size of the local audit log

10. A company adopts a software as a service (SaaS) customer relationship management application.

Which two security responsibilities remain with the company rather than the provider?

(Choose two.)

a) Hardening the servers and databases that run the application

b) Deciding what customer data is entered and classifying its sensitivity

c) Patching the application's code when the vendor releases a fix

d) Managing which employees have accounts and what each account can access

Answers:

Question: 01 Answer: c	Question: 02 Answer: a	Question: 03 Answer: b	Question: 04 Answer: d	Question: 05 Answer: a
Question: 06 Answer: b	Question: 07 Answer: c, d	Question: 08 Answer: a	Question: 09 Answer: c	Question: 10 Answer: b, d

Note: For any error in CIW Web Security Associate (1D0-671) certification exam sample questions, please update us by writing an email on feedback@edusum.com.