CIW 1D0-671 Practice Exams
Last updated on Oct 22,2026- Exam Code: 1D0-671
- Exam Name: CIW Web Security Associate
- Certification Provider: CIW
- Latest update: Oct 22,2026
David has enabled auditing on the C, D and E drives of his Web server. This server runs Windows Server 2003 and uses all SCSI components. After David has finished his change, the help desk receives calls from customers complaining that transactions are being completed at an unusually slow rate.
What has David failed to consider?
- A . The performance effects that auditing can have on a system
- B . The restriction that auditing cannot be established on a RAID array in Windows Server 2003
- C . Network latency and system uptime requirements that appear to be system performance problems
- D . The limitation that auditing can be performed on only two disks of a RAID array
You have implemented a service on a Linux system that allows a user to read and edit resources.
What is the function of this service?
- A . Authentication
- B . Data integrity
- C . Access control
- D . Intrusion detection
Which of the following constitutes a problem when conducting a reverse scan?
- A . IP address spoofing
- B . SYN floods
- C . Default settings on target systems
- D . An older system kernel
Which of the following is most likely to address a problem with an operating system’s ability to withstand an attack that attempts to exploit a buffer overflow?
- A . Firewall
- B . Software update
- C . Intrusion detection system
- D . Network scanner
Consider the following diagram involving two firewall-protected networks:
Which of the following is necessary for each of the firewalls to allow private IP addresses to be passed on to the Internet?
- A . Chargeback
- B . Stateful multi-layer inspection
- C . Masquerading
- D . DMZ creation
Why can instant messaging (IM) and peer-to-peer (P2P) applications be considered a threat to network security?
- A . Because they use ports above 1023 and many firewalls are not configured to block this traffic
- B . Because they are susceptible to VLAN hopping
- C . Because they usually lie outside the broadcast domain
- D . Because they use ports below 1023 and many firewalls are not configured to block this traffic
Which security management concept is the ability for a department to accurately determine the costs of using various networking security services?
- A . Performance management
- B . Chargeback
- C . Capacity forecasting
- D . Amortization
What distinguishes hash encryption from other forms of encryption?
- A . Hash encryption creates a mathematically matched key pair in which one half of the pair encrypts, and the other half decrypts.
- B . Hash encryption creates a single key that is used to encrypt and decrypt information.
- C . Hash encryption is the encryption method of choice when conducting e-commerce transactions.
- D . Hash encryption is used for information that you want never to be decrypted or read.
You are creating an information security policy for your company.
Which of the following activities will help you focus on creating policies for the most important resources?
- A . Auditing the firewall
- B . Implementing non-repudiation
- C . Logging users
- D . Classifying systems
All servers assume that a valid IP address belongs to the computer that sent it. Because TCP/IP contains no built-in authentication, a hacker can assume the identity of another device.
If your security depends entirely upon the TCP/IP identity, which type of attack can allow a hacker to gain access to your system?
- A . A spoofing attack
- B . A social engineering attack
- C . A denial-of-service attack
- D . A brute-force attack