CIW 1D0-671 Practice Exams
Last updated on Oct 22,2026- Exam Code: 1D0-671
- Exam Name: CIW Web Security Associate
- Certification Provider: CIW
- Latest update: Oct 22,2026
You are using a PKI solution that is based on Secure Sockets Layer (SSL).
Which of the following describes the function of the asymmetric-key-encryption algorithm used?
- A . It encrypts the symmetric key.
- B . It encrypts all of the data.
- C . It encrypts the hash code used for data integrity.
- D . It encrypts the X.509 key.
Jason is attempting to gain unauthorized access to a corporate server by running a program that enters passwords from a long list of possible passwords.
Which type of attack is this?
- A . Brute force
- B . Denial of service
- C . Botnet
- D . Buffer overflow
A new server has been placed on the network. You have been assigned to protect this server using a packet-filtering firewall. To comply with this request, you have enabled the following ruleset:
Which choice describes the next step to take now that this ruleset has been enabled?
- A . From the internal network, use your Web browser to determine whether all internal users can access the Web server.
- B . From the internal network, use your e-mail client to determine whether all internal users can access the e-mail server.
- C . From the external network, use your Web browser to determine whether all external users can access the Web server.
- D . From the external network, use your e-mail client to determine whether all external users can access the e-mail server.
Which of the following is the primary weakness of symmetric-key encryption?
- A . Data encrypted using symmetric-key encryption is subject to corruption during transport.
- B . Symmetric-key encryption operates slower than asymmetric-key encryption.
- C . Symmetric-key encryption does not provide the service of data confidentiality.
- D . Keys created using symmetric-key encryption are difficult to distribute securely.
Which of the following commands would you use to create a simple personal firewall that blocks all incoming ICMP traffic?
- A . iptables -A INPUT -p icmp -s 10.100.100.0/24 -d 0/0 -j DROP
- B . iptables -A INPUT -p icmp -s 10.100.100.0/255.255.255 -d 0/0 -j KILL
- C . iptables -A INPUT -p icmp -s 0/0 -d 0/0 -j DROP
- D . iptables – INPUT -p icmp -s 0/0 -d 0/0 -j KILL
Which of the following errors most commonly occurs when responding to a security breach?
- A . Shutting down network access using the firewall, rather than the network router
- B . Adhering to the company policy rather than determining actions based on the IT manager’s input
- C . Making snap judgments based on emotions, as opposed to company policy
- D . Taking too much time to document the attack
You want to create a certificate for use in a Secure Sockets Layer (SSL) session.
Which of the following is responsible for verifying the identity of an individual and also issuing the certificate?
- A . Kerberos server
- B . Certificate authority
- C . Certificate revocation entity
- D . Certificate repository
What is the term for a self-replicating program or algorithm that consumes system resources?
- A . Illicit server
- B . Root kit
- C . Trojan
- D . Worm
Which of the following organizations provides regular updates concerning security breaches and issues?
- A . IETF
- B . ISO
- C . ICANN
- D . CERT
Which term describes a firewall topology element that consists of a subnet of computers?
- A . Demilitarized zone (DMZ)
- B . Zone
- C . Firewall box
- D . Security strategy