CIW 1D0-671 Practice Exams
Last updated on Oct 22,2026- Exam Code: 1D0-671
- Exam Name: CIW Web Security Associate
- Certification Provider: CIW
- Latest update: Oct 22,2026
Which of the following is the simplest, most common firewall design?
- A . A dual-homed bastion host
- B . A screening router
- C . A screened subnet
- D . A single-homed bastion host
Which of the following applications can help determine whether a denial-ofservice attack is occurring against a network host?
- A . The netstat command and a packet sniffer
- B . The ps command and a network scanner
- C . The ping command and User Manager
- D . The iptables command and Windows desktop firewall
Which protocol uses cleartext communication by default?
- A . HTTP
- B . IPSEC
- C . SSL
- D . POP3
The vast majority of hackers are which type of attacker?
- A . Casual attacker
- B . Spy
- C . Disgruntled employee
- D . Determined attacker
Which symmetric algorithm created by the RSA Security Corporation is a stream cipher that encrypts messages as a whole, in real time?
- A . RC4
- B . RC6
- C . RC5
- D . RC2
Which of the following describes the practice of stateful multi-layer inspection?
- A . Using a VLAN on a firewall to enable masquerading of private IP addresses
- B . Prioritizing voice and video data to reduce congestion
- C . Inspecting packets in all layers of the OSI/RM with a packet filter
- D . Using Quality of Service (QoS) on a proxy-oriented firewall
Consider the following image of a packet capture:
Which of the following best describes the protocol used, along with its primary benefit?
- A . It is a passive FTP session, which is easier for firewalls to process.
- B . It is an active FTP session, which is necessary in order to support IPv6.
- C . It is an extended passive FTP session, which is necessary to support IPv6.
- D . It is an active FTP session, which is supported by all FTP clients.
What is the primary strength of symmetric-key encryption?
- A . It allows easy and secure exchange of the secret key.
- B . It creates a ash?of a text, enabling data integrity.It creates a ?ash?of a text, enabling data integrity.
- C . It can encrypt large amounts of data very quickly.
- D . It provides non-repudiation services more efficiently than asymmetric-key encryption.
Which component works with an operating system to increase its security ability?
- A . Network scanner
- B . Operating system add-on
- C . Log analysis tool
- D . Port scanner
A new video conferencing device has been installed on the network. You have been assigned to troubleshoot a connectivity problem between remote workers and the central company. Specifically, remote workers are having problems making any connection at all.
Which technique will most likely help you solve this problem while retaining the existing level of security at the firewall?
- A . Deny all use of UDP above Port 1024.
- B . Configure the firewall to provide VPN access.
- C . Configure a second network connection directly to the video conferencing device.
- D . Allow all use of UDP below Port 1024.