CIW Web Security Associate 1D0-571 Exam | Practice Test / Quiz / MCQs

1. Consider the following series of commands from a Linux system: iptables -A input -p icmp -s 0/0 -d 0/0 -j REJECT Which explanation best describes the impact of the resulting firewall ruleset?

Individuals on remote networks will no longer be able to use SSH to control internal network resources.Internal hosts will not be able to ping each other using ICMP.Individuals on remote networks will not be able to use ping to troubleshoot connections.Stateful multi-layer inspection has been enabled.

2. You want to create a certificate for use in a Secure Sockets Layer (SSL) session. Which of the following is responsible for verifying the identity of an individual and also issuing the certificate?

Kerberos serverCertificate authorityCertificate repositoryCertificate revocation entity

4. Requests for Web-based resources have become unacceptably slow. You have been assigned to implement a solution that helps solve this problem. Which of the following would you recommend?

Implement caching on the network proxy serverImplement a screening router on the network DMZEnable authentication on the network proxy serverEnable stateful multi-layer inspection on the packet filter

5. At the beginning of an IPsec session, which activity occurs during the Internet Key Exchange (IKE)?

Negotiating the version of IP to be usedDetermining the network identification numberDetermining the number of security associationsNegotiating the authentication method

6. Which of the following details should be included in documentation of an attack?

The network resources involved in the attack, and recommendations for thwarting future attacksAn overview of the security policy and suggestions for the next response planThe time and date of the attack, and the names of employees who were contacted during the responseEstimates of how much the attack cost the company, and a list of the applications used by the attacker

7. Which of the following is the most likely first step to enable a server to recover from a denial-of-service attack in which all hard disk data is lost?

Contact the backup serviceContact a disk recovery serviceRebuild your RAID 0 arrayEnable virtualization

8. What is the primary use of hash (one-way) encryption in networking?

User authentication, for non-repudiationEncrypting files, for data confidentialitySigning files, for data integrityKey exchange, for user authentication

10. A security breach has occurred in which a third party was able to obtain and misuse legitimate authentication information. After investigation, you determined that the specific cause for the breach was that end users have been placing their passwords underneath their keyboards. Which step will best help you resolve this problem?

Inform end users that their passwords will be changing on a regular basis and require more complex passwords.Change all passwords on the company servers immediately and inform end users that their passwords will be changing on a regular basis.Set passwords to expire at specific intervals and establish mandatory continual training sessions.Discipline specific end users as object lessons to the rest of the staff and reset passwords on all systems immediately.

11. Which of the following errors most commonly occurs when responding to a security breach?

Adhering to the company policy rather than determining actions based on the IT manager's inputTaking too much time to document the attackMaking snap judgments based on emotions, as opposed to company policyShutting down network access using the firewall, rather than the network router

12. Which of the following describes the practice of stateful multi-layer inspection?

Using a VLAN on a firewall to enable masquerading of private IP addressesUsing Quality of Service (QoS) on a proxy-oriented firewallPrioritizing voice and video data to reduce congestionInspecting packets in all layers of the OSI/RM with a packet filter

13. A new server has been placed on the network. You have been assigned to protect this server using a packet-filtering firewall. To comply with this request, you have enabled the following ruleset: Which choice describes the next step to take now that this ruleset has been enabled?

From the external network, use your Web browser to determine whether all external users can access the Web server.From the internal network, use your Web browser to determine whether all internal users can access the Web server.From the internal network, use your e-mail client to determine whether all internal users can access the e-mail server.From the external network, use your e-mail client to determine whether all external users can access the e-mail server.

16. Which choice lists typical firewall functions?

Creating a VLAN and configuring the intrusion-detection systemImplementing the security policy and scanning the internal networkLogging traffic and creating a choke pointIssuing alerts and limiting host access

17. Which of the following applications can help determine whether a denial-of-service attack is occurring against a network host?

The ping command and User ManagerThe netstat command and a packet snifferThe ps command and a network scannerThe iptables command and Windows desktop firewall

18. You have been asked to encrypt a large file using a secure encryption algorithm so you can send it via e-mail to your supervisor. Encryption speed is important. The key will not be transmitted across a network. Which form of encryption should you use?

HashPGPAsymmetric Symmetric

20. A disgruntled employee has discovered that the company Web server is not protected against a particular buffer overflow vulnerability. The disgruntled employee has created an application to take advantage of this vulnerability and secretly obtain sensitive data from the Web server's hard disk. This application sends a set of packets to the Web server that causes it to present an unauthenticated terminal with root privileges. What is the name for this particular type of attack?

Zero-day attackTrojanMan-in-the-middle attackDenial of service

21. Which tool is best suited for identifying applications and code on a Web server that can lead to a SQL injection attack?

A packet snifferA vulnerability scannerA network switchAn intrusion-detection system

22. Which of the following is a common problem, yet commonly overlooked, in regards to physical security in server rooms?

Firewalls that do not have a dedicated backup Biometric malfunctionsLogic bombsFalse ceilings

23. Consider the following image of a packet capture: This packet capture has recorded two types of attacks. Which choice lists both attack types?

A dictionary attack and a worm-based attackA.A dictionary attack and a worm-based attackA syn flood attack and a spoofing attackB.A syn flood attack and a spoofing attackA SQL injection attack and a virus attackD.A SQL injection attack and a virus attackA worm attack and a botnet attack C.A worm attack and a botnet attack

25. Irina has contracted with a company to provide Web design consulting services. The company has asked her to use several large files available via an HTTP server. The IT department has provided Irina with user name and password, as well as the DNS name of the HTTP server. She then used this information to obtain the files she needs to complete her task using Mozilla Firefox. Which of the following is a primary risk factor when authenticating with a standard HTTP server?

Irina has used the wrong application for this protocol, thus increasing the likelihood of a man-in-the-middle attack.A standard HTTP connection uses public-key encryption that is not sufficiently strong, inviting the possibility of a man-in-the-middle attack.Irina has accessed the Web server using a non-standard Web browser.HTTP uses cleartext transmission during authentication, which can lead to a man-in-the-middle attack.

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know? Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com