Online Access Free 1D0-571 Practice Test

A security breach has occurred involving the company e-commerce server. Customer credit card data has been released to unauthorized third parties. Which of the following lists the appropriate parties to inform?

• A.Shareholders, law enforcement agencies and company employees
• B.The Internet Service Provider, ICANN and company shareholders
• C.Affected customers, credit card companies and law enforcement agencies
• D.External security consultants, company board members and affected customers

You have been assigned to provide security measures for your office's reception area.
Although the company needs to provide security measures, costs must be kept to a minimum. Which of the following tools is the most appropriate choice?

• A.Security guard
• B.Intrusion-detection system
• C.Firewall
• D.Camera

You have determined that an attack is currently underway on your database server. An attacker is currently logged in, modifying data. You want to preserve logs, caching and other data on this affected server. Which of the following actions will best allow you to stop the attack and still preserve data?

• A.Pull the server network cable
• B.Back up the system logs
• C.Shut down the server
• D.Force an instant password reset

The most popular types of proxy-oriented firewalls operate at which layer of the OSI/RM?

• A.Transport layer
• B.Network layer
• C.Application layer
• D.Session layer

Irina has contracted with a company to provide Web design consulting services. The company has asked her to use several large files available via an HTTP server. The IT department has provided Irina with user name and password, as well as the DNS name of the HTTP server. She then used this information to obtain the files she needs to complete her task using Mozilla Firefox. Which of the following is a primary risk factor when authenticating with a standard HTTP server?

• A.A standard HTTP connection uses public-key encryption that is not sufficiently strong, inviting the possibility of a man-in-the-middle attack.
• B.Irina has accessed the Web server using a non-standard Web browser.
• C.Irina has used the wrong application for this protocol, thus increasing the likelihood of a man-in-the-middle attack.
• D.HTTP uses cleartext transmission during authentication, which can lead to a man-in-the- middle attack.