CIW 1D0-671 Practice Exams
Last updated on Oct 22,2026- Exam Code: 1D0-671
- Exam Name: CIW Web Security Associate
- Certification Provider: CIW
- Latest update: Oct 22,2026
What is TEMPEST?
- A . A physical access control technique in which knowledgeable, skilled guards are placed at all locations containing false ceilings and exposed jacks
- B . A physical security technique that applies humidity controls and proper ventilation to networking equipment
- C . A standard developed by the U.S. government to help control electromagnetic transmissions that interfere with network connectivity
- D . A biometric technique that places an individual’s biometric information onto smart cards
Danielle was informed by her network administrator that an audit may be conducted during the night to determine the hosts that exist on the network and document any open ports. The next day, Danielle was unable to access any network services.
What may have occurred instead of the anticipated audit?
- A . A social engineering attack
- B . A zero-day attack
- C . A scanning attack
- D . A brute-force attack
You have discovered that the ls, su and ps commands no longer function as expected. They do not return information in a manner similar to any other Linux system. Also, the implementation of Tripwire you have installed on this server is returning new hash values.
Which of the following has most likely occurred?
- A . A trojan has attacked the system.
- B . A SQL injection attack has occurred.
- C . A spyware application has been installed.
- D . A root kit has been installed on the system.
A CGI application on the company’s Web server has a bug written into it. This particular bug allows the application to write data into an area of memory that has not been properly allocated to the application. An attacker has created an application that takes advantage of this bug to obtain credit card information.
Which of the following security threats is the attacker exploiting, and what can be done to solve the problem?
- A . – Buffer overflow
– Work with the Web developer to solve the problem - B . – SQL injection
– Work with a database administrator to solve the problem - C . – Denial of service
– Contact the organization that wrote the code for the Web server - D . – Man-in-the-middle attack
– Contact the company auditor
Which of the following is a form of "what you know" authentication?
- A . Providing a PIN for an ATM card when accessing a bank account
- B . Using an application to access a Web site
- C . Using a key to enter a building
- D . Providing your name to an operator
A denial-of-service attack has been perpetrated on your system, resulting in loss of essential data.
Which of the following can help you recover quickly from this attack?
- A . An intrusion-detection device
- B . A backup service
- C . Stateful multi-layer inspection
- D . A firewall
Which tool is best suited for identifying applications and code on a Web server that can lead to a SQL injection attack?
- A . A vulnerability scanner
- B . A packet sniffer
- C . An intrusion-detection system
- D . A network switch
What is the primary use of hash (one-way) encryption in networking?
- A . Signing files, for data integrity
- B . Encrypting files, for data confidentiality
- C . Key exchange, for user authentication
- D . User authentication, for non-repudiation
The most popular types of proxy-oriented firewalls operate at which layer of the OSI/RM?
- A . Application layer
- B . Network layer
- C . Session layer
- D . Transport layer
An application is creating hashes of each file on an attached storage device.
Which of the following will typically occur during this process?
- A . An increase in the amount of time it takes for the system to respond to requests
- B . Reduced risk of an attack
- C . Increased risk of an attack
- D . A reduction in the amount of time it takes for the system to respond to requests