CIW 1D0-671 Practice Exams
Last updated on Oct 22,2026- Exam Code: 1D0-671
- Exam Name: CIW Web Security Associate
- Certification Provider: CIW
- Latest update: Oct 22,2026
You have determined that the company Web server has several vulnerabilities, including a buffer overflow that has resulted in an attack. The Web server uses PHP and has direct connections to an Oracle database server. It also uses many CGI scripts.
Which of the following is the most effective way to respond to this attack?
- A . Installing software updates for the Web server daemon
- B . Using the POST method instead of the GET method for a Web form
- C . Installing an intrusion detection service to monitor logins
- D . Using the GET method instead of the POST method for a Web form
Which of the following causes problems with firewalls
- A . Control FTP
- B . Data FTP
- C . Active FTP
- D . Passive FTP
Consider the following image of a packet capture:
This packet capture has recorded two types of attacks.
Which choice lists both attack types?
- A . A dictionary attack and a worm-based attackA.A dictionary attack and a worm-based attack
- B . A syn flood attack and a spoofing attackB.A syn flood attack and a spoofing attack
- C . A worm attack and a botnet attack C.A worm attack and a botnet attack
- D . A SQL injection attack and a virus attackD.A SQL injection attack and a virus attack
You have been assigned to configure a DMZ that uses multiple firewall components. Specifically, you must configure a router that will authoritatively monitor and, if necessary, block traffic. This device will be the last one that inspects traffic before it passes to the internal network.
Which term best describes this device?
- A . Screening router
- B . Bastion host
- C . Proxy server
- D . Choke router
Which ICMP message type is sent whenever the destination cannot handle the amount of traffic being received?
- A . Echo Reply
- B . Source Quench
- C . Source Quench
- D . Redirect Message
Which term describes an outer corporate network, created using VPN technologies, that extends the corporate network to include suppliers and customers?
- A . Public Key Infrastructure
- B . Extended firewall network
- C . Virtual network
- D . Virtual network perimeter
Which of the following is the most likely first step to enable a server to recover from a denial-of- service attack in which all hard disk data is lost?
- A . Enable virtualization
- B . Contact the backup service
- C . Contact a disk recovery service
- D . Rebuild your RAID 0 array
Which two protocols can be found at the transport layer of the TCP/IP stack?
- A . File Transfer Protocol (FTP) and Hypertext Transfer Protocol (HTTP)
- B . Internet Protocol (IP) and Internet Control Message Protocol (ICMP)
- C . Post Office Protocol 3 (POP3) and Simple Mail Transfer Protocol (SMTP)
- D . Transmission Control Protocol (TCP) and User Datagram Protocol (UDP)
Which security standard consists of 11 titles that are designed to improve the accuracy and reliability of corporate disclosure to reinforce investment confidence and protect investors?
- A . Sarbanes-Oxley (SOX)
- B . ISO 17799
- C . The Common Criteria (CC)
- D . Gramm-Leach-Bliley Act (GLBA)
A distributed denial-of-service (DDOS) attack has occurred where both ICMP and TCP packets have crashed the company’s Web server.
Which of the following techniques will best help reduce the severity of this attack?
- A . Filtering traffic at the firewall
- B . Changing your ISP
- C . Installing Apache Server rather than Microsoft IIS
- D . Placing the database and the Web server on separate systems