CIW 1D0-671 Practice Exams
Last updated on Oct 23,2026- Exam Code: 1D0-671
- Exam Name: CIW Web Security Associate
- Certification Provider: CIW
- Latest update: Oct 23,2026
A flaw is discovered in an application. Before a patch is available, this vulnerability is used to gain access to sensitive data.
What type of attack is being described?
- A . Social engineering
- B . Dictionary
- C . Zero day
- D . Zero day
Which of the following is most likely to pose a security threat to a Web server?
- A . CGI scripts
- B . Database connections
- C . Flash or Silverlight animation files
- D . LDAP servers
Which step in security policy implementation ensures that security policy will change as technology advances?
- A . Log, test and evaluate.
- B . Secure each resource and service.
- C . Publish the security policy.
- D . Repeat the process and keep current.
Which choice lists the designated stages of a hacker attack in the correct order?
- A . Discovery, penetration, control
- B . Sniffing, penetration, control
- C . Sniffing, discovery, penetration
- D . Penetration, discovery, control
Which type of attack exploits routed IP datagrams and is often found at the network layer?
- A . Source routing
- B . SYN flooding
- C . Route mangling
- D . IP spoofing
Consider the following series of commands from a Linux system:
iptables -A input -p icmp -s 0/0 Cd 0/0 -j REJECT
Which explanation best describes the impact of the resulting firewall ruleset?
- A . Individuals on remote networks will no longer be able to use SSH to control internal network resources.
- B . Internal hosts will not be able to ping each other using ICMP.
- C . Stateful multi-layer inspection has been enabled.
- D . Individuals on remote networks will not be able to use ping to troubleshoot connections.
Which task should you perform first when considering where to place equipment?
- A . Conduct research to determine the appropriate products for your organization.
- B . Consult with management to determine specific needs.
- C . Secure funding.
- D . Conduct a needs assessment audit.
Which algorithm can use a 128-bit key, and has been adopted as a standard by various governments and corporations?
- A . MARS
- B . RC2
- C . Advanced Encryption Standard (AES)
- D . International Data Encryption Algorithm (IDEA)
Consider the following image:
From the information in this image, what type of attack is occurring?
- A . A man-in-the-middle attack
- B . A brute-force attack
- C . A connection-hijacking attackC.A connection-hijacking attack
- D . A spoofing attackD.A spoofing attack
Which of the following can help reduce the likelihood of a successful dictionary attack?
- A . A strong password policy
- B . An IPSEC-based VPN
- C . The use of Microsoft Active Directory
- D . A security policy