2024年最新の有効な1D0-671リアル試験問題（更新された）100%問題集と練習試験合格させます [Q39-Q54]

2024年最新の有効な1D0-671リアル試験問題（更新された）100%問題集と練習試験合格させます

[更新されたのは2024年]CIW 1D0-671問題準備には無料サンプルのPDF

質問 # 39
At the beginning of an IPsec session, which activity occurs during the Internet Key Exchange (IKE)?

A. Negotiating the authentication method
B. Determining the number of security associations
C. Determining the network identification number
D. Negotiating the version of IP to be used

正解：A

質問 # 40
A security breach has occurred in which a third party was able to obtain and misuse legitimate authentication information. After investigation, you determined that the specific cause for the breach was that end users have been placing their passwords underneath their keyboards.
Which step will best help you resolve this problem?

A. Set passwords to expire at specific intervals and establish mandatory continual training sessions.
B. Change all passwords on the company servers immediately and inform end users that their passwords will be changing on a regular basis.
C. Inform end users that their passwords will be changing on a regular basis and require more complex passwords.
D. Discipline specific end users as object lessons to the rest of the staff and reset passwords on all systems immediately.

正解：A

質問 # 41
Which of the following security services, as defined by the ISO 7498-2 Security Architecture document, protects against active threats by verifying or maintaining the consistency of information?

A. Data confidentiality
B. Authentication
C. Data integrity
D. Non-repudiation

正解：C

質問 # 42
When Tripwire discovers that a file or database has been altered, how will it alert you?

A. Via an e-mail message only
B. Via a pager configured to receive a special signal
C. Via a log file entry only
D. Via e-mail or a log file entry

正解：D

質問 # 43
Which term is used to describe the activity of a hacker who enters a computer network and begins mapping the contents of the system?

A. Spoofing
B. Virus planting
C. System snooping
D. Trojan

正解：C

質問 # 44
Which security management concept is the ability for a department to accurately determine the costs of using various networking security services?

A. Amortization
B. Chargeback
C. Capacity forecasting
D. Performance management

正解：B

質問 # 45
Which ICMP message type is sent whenever the destination cannot handle the amount of traffic being received?

A. Source Quench
B. Source Quench
C. Echo Reply
D. Redirect Message

正解：B

質問 # 46
A denial-of-service attack has been perpetrated on your system, resulting in loss of essential data.
Which of the following can help you recover quickly from this attack?

A. A firewall
B. Stateful multi-layer inspection
C. A backup service
D. An intrusion-detection device

正解：C

質問 # 47
What is the term for a self-replicating program or algorithm that consumes system resources?

A. Root kit
B. Illicit server
C. Trojan
D. Worm

正解：D

質問 # 48
A new video conferencing device has been installed on the network. You have been assigned to troubleshoot a connectivity problem between remote workers and the central company. Specifically, remote workers are having problems making any connection at all.
Which technique will most likely help you solve this problem while retaining the existing level of security at the firewall?

A. Deny all use of UDP above Port 1024.
B. Configure the firewall to provide VPN access.
C. Configure a second network connection directly to the video conferencing device.
D. Allow all use of UDP below Port 1024.

正解：B

質問 # 49
Which technique can help to protect an FTP server?

A. Use separate FTP user accounts from those used to access the Web.
B. When setting IP-based blocking rules for the FTP server, move the FTP files to C:\ftpfiles for maximum security.
C. Install the operating system on the same partition as the FTP server.
D. Place downloads on the same partition as the FTP server binaries.

正解：A

質問 # 50
You are creating an information security policy for your company.
Which of the following activities will help you focus on creating policies for the most important resources?

A. Classifying systems
B. Implementing non-repudiation
C. Auditing the firewall
D. Logging users

正解：A

質問 # 51
Which of the following security measures presents the most risk?

A. A tripwire
B. A firewall application
C. A login script
D. A jail

正解：D

質問 # 52
Which type of attack requires that the hacker be physically located between the two legitimate hosts being attacked?

A. E-mail virus attack
B. Brute-force and dictionary attack
C. Bug-based attack
D. Man-in-the-middle attack

正解：D

質問 # 53
Consider the following diagram involving two firewall-protected networks:
Which of the following is necessary for each of the firewalls to allow private IP addresses to be passed on to the Internet?