CIW 1D0-671 Practice Exams
Last updated on Oct 22,2026- Exam Code: 1D0-671
- Exam Name: CIW Web Security Associate
- Certification Provider: CIW
- Latest update: Oct 22,2026
Consider the following diagram:
Which type of attack is occurring?
- A . Polymorphic virus-based attack
- B . Denial-of-service attack
- C . Distributed denial-of-service attack
- D . Man-in-the-middle attack using a packet sniffer
Which of the following can help you authoritatively trace a network flooding attack?
- A . Your ISP
- B . Firewall logs
- C . Router logs
- D . Ping
What is the primary drawback of using symmetric-key encryption?
- A . Key transport across a network
- B . Speed of encryption
- C . Denial-of-service attacks
- D . Inability to support convergence traffic
Which of the following is a common problem with proxy servers?
- A . Proxy servers do not log incoming and outgoing access, so you will not be able to see details of successful and failed connections.
- B . Proxy servers cannot filter out specific application-layer traffic.
- C . Proxy servers may return old cached information.
- D . Because proxy servers do not mask network resources, hackers may be able to access all exposed systems.
You have implemented a version of the Kerberos protocol for your network.
What service does Kerberos primarily offer?
- A . Authentication
- B . Encryption
- C . Non-repudiation
- D . Data integrity
Which choice lists typical firewall functions?
- A . Creating a VLAN and configuring the intrusion-detection system
- B . Issuing alerts and limiting host access
- C . Logging traffic and creating a choke point
- D . Implementing the security policy and scanning the internal network
A Web site that contains malicious content designed to harm your computer is known as:
- A . a wiki.
- B . a poisoned Web site.
- C . an ad-hoc Web site.
- D . a greynet Web site.
Which type of attack requires that the hacker be physically located between the two legitimate hosts being attacked?
- A . Man-in-the-middle attack
- B . E-mail virus attack
- C . Brute-force and dictionary attack
- D . Bug-based attack
Which of the following is a security principle that allows you to protect your network resources?
- A . Realize that some high-end systems should stand alone.
- B . Avoid being suspicious of legitimate activity.
- C . Deploy security enforcement only in the largest departments.
- D . Provide training for end users and IT workers.
At the beginning of an IPsec session, which activity occurs during the Internet Key Exchange (IKE)?
- A . Determining the number of security associations
- B . Negotiating the authentication method
- C . Determining the network identification number
- D . Negotiating the version of IP to be used