CIW  (470) Braindumps 

Q. 1     Helga’s web server is placed behind her corporate firewall. Currently, her firewall allows only VPN connections from other remote clients and networks. She wants to open the internet-facing interface on her firewall so that it allows all users on the Internet to access her web server. Which of the following must Helga’s rule contain?

A.           Instructions allowing all UDP connections with a destination port of 80 and a source port of 1024

B.           Instructions allowing all UDP connections with a source port of 80 on the external interface and a destination port of 1024

C.           Instructions allowing all TCP connections with a source port of 80 on the internal interface and a destination port of 80

D.           Instructions allowing all TCP connections with a source port higher than 1024 and a destination port of 80

Answer: D

 Q. 2     While assessing the risk of a network, which step are you conducting when you determine whether the network can differentiate itself from other networks?

A.           Considering the business concerns

B.           Analysing, categorizing and prioritising resources

C.           Evaluating the existing perimeter and internal security

D.    Using the existing management and control architecture

Answer: C

 Q. 3     What is the most important step in securing a web server?

A.           Logging all HTTP activity

B.           Enabling system-wide encryption

C.           Placing the operating system, web server program, and server files on the same partition

D.           Placing the operating system, web server program, and server files on separate partitions

Answer: D

 Q. 4     Kerstin connected to an e-commerce site and brought a new mouse pad with her credit card for $5.00 plus shipping and handling. She never received her mouse pad so she called her credit card company to cancel the transaction. She was not charged for the mouse pad, but she received multiple charges she knew nothing about. She tried to connect to the site again but could not find it. Which type of hacking attack occurred?

A.           Denial-of-service attack

B.           Hijacking attack

C.    Illicit server attack

D.           Spoofing attack

Answer: B

 Q. 5     What is the most common security problem on a client/server network?

A.           Outdated software

B.    Old login accounts

C.    Non-secured ports

D.           Browser flaws

Answer: C