CIW 1D0-671 Practice Exams
Last updated on Oct 22,2026- Exam Code: 1D0-671
- Exam Name: CIW Web Security Associate
- Certification Provider: CIW
- Latest update: Oct 22,2026
Which technique can help to protect an FTP server?
- A . Place downloads on the same partition as the FTP server binaries.
- B . When setting IP-based blocking rules for the FTP server, move the FTP files to C:ftpfiles for maximum security.
- C . Use separate FTP user accounts from those used to access the Web.
- D . Install the operating system on the same partition as the FTP server.
How do activity logs help to implement and maintain a security plan?
- A . Activity logs provide advice on firewall installation, because they enable network baseline creation.
- B . Activity logs remind users to log on with strong passwords, because the logs can be analyzed to see if users are complying with policy.
- C . Activity logs allow you to determine if and how an unauthorized activity occurred.
- D . Activity logs dissuade would-be hackers from breaching your security.
A security breach has occurred involving the company e-commerce server. Customer credit card data has been released to unauthorized third parties.
Which of the following lists the appropriate parties to inform?
- A . Shareholders, law enforcement agencies and company employees
- B . Affected customers, credit card companies and law enforcement agencies
- C . The Internet Service Provider, ICANN and company shareholders
- D . External security consultants, company board members and affected customers
Which of the following tools allows you to implement packet filtering for a network?
- A . Hub
- B . Router
- C . Bridge
- D . Browser
When Tripwire discovers that a file or database has been altered, how will it alert you?
- A . Via an e-mail message only
- B . Via a log file entry only
- C . Via a pager configured to receive a special signal
- D . Via e-mail or a log file entry
After you have determined that a hacker has entered your system, what is the first step you should take?
- A . Review the pre-written security response policy.
- B . Document the hacker’s activity after penetration has occurred.
- C . Determine the scope of the breach on affected systems.
Which of the following is a typical target of a trojan on a Linux system?
- A . Kernel modules
- B . Shared libraries
- C . Boot sector files
- D . System32 DLL files
You want to create a quick solution that allows you to obtain real-time login information for the administrative account on an LDAP server that you feel may become a target.
Which of the following will accomplish this goal?
- A . Reinstall the LDAP service on the server so that it is updated and more secure.
- B . Install an application that creates checksums of the contents on the hard disk.
- C . Create a login script for the administrative account that records logins to a separate server.
- D . Create a dummy administrator account on the system so that a potential hacker is distracted from the real login account.
Which of the following accurately describes an aspect of an access control list (ACL)?
- A . The ACL defines users that have access to a resource on a database server.
- B . The ACL defines the database roles that users have on a database server.
- C . The ACL cannot determine whether a user has access to an object, but can define exactly what the user can do with that object.
- D . The ACL lists entities that can access a database server, but does not provide access levels.
The best way to thwart a dictionary attack is by enforcing a:
- A . strong password policy.
- B . restricted access policy.
- C . firewall configuration policy.
- D . proxy server policy.