CIW 1D0-671 Practice Exams
Last updated on Oct 22,2026- Exam Code: 1D0-671
- Exam Name: CIW Web Security Associate
- Certification Provider: CIW
- Latest update: Oct 22,2026
Which of the following is a common problem, yet commonly overlooked, in regards to physical security in server rooms?
- A . Firewalls that do not have a dedicated backup
- B . False ceilings
- C . Logic bombs
- D . Biometric malfunctions
What is the purpose of a revocation certificate?
- A . It allows you to quickly publish the fact that the key pair is no longer valid because it has been compromised.
- B . It allows the user who creates asymmetric code to freely disseminate the code at his or her discretion.
- C . It logs remote user activity on a VPN.
- D . It prevents a man-in-the-middle attack on your network.
You have just deployed an application that uses hash-based checksums to monitor changes in the configuration scripts of a database server that is accessible via the Internet.
Which of the following is a primary concern for this solution?
- A . The extra hard disk space required to store the database of checksums
- B . The amount of memory remaining now that the checksum-based application is running
- C . The possibility of a buffer overflow attack leading to a security breach
- D . The security of the checksum database on a read-only media format
Which of the following details should be included in documentation of an attack?
- A . An overview of the security policy and suggestions for the next response plan
- B . Estimates of how much the attack cost the company, and a list of the applications used by the attacker
- C . The time and date of the attack, and the names of employees who were contacted during the response
- D . The network resources involved in the attack, and recommendations for thwarting future attacks
Which of the following security measures presents the most risk?
- A . A firewall application
- B . A tripwire
- C . A jail
- D . A login script
Which of the following will best help you ensure a database server can withstand a recently discovered vulnerability?
- A . Updating the company vulnerability scanner and conducting a new scan
- B . Adding a buffer overflow rule to the intrusion detection system
- C . Reconfiguring the firewall
- D . Installing a system update
Which of the following activities is the most effective at keeping the actions of nae end users from putting the company’s physical and logical resources at risk?
- A . Configuring network intrusion-detection software to monitor end user activity
- B . Conducting a training session at the time of hire
- C . Reconfiguring the network firewall
- D . Assembling a team of security professionals to monitor the network
Requests for Web-based resources have become unacceptably slow. You have been assigned to implement a solution that helps solve this problem.
Which of the following would you recommend?
- A . Enable stateful multi-layer inspection on the packet filter
- B . Implement caching on the network proxy server
- C . Enable authentication on the network proxy server
- D . Implement a screening router on the network DMZ
Consider the following diagram:
Which of the following best describes the protocol activity shown in the diagram, along with the most likely potential threat that accompanies this protocol?
- A . The ICMP Time Exceeded message, with the threat of a denial-of-service attack
- B . The SIP three-way handshake, with the threat of a buffer overflow
- C . The TCP three-way handshake, with the threat of a man-in-the-middle attack
- D . The DNS name query, with the threat of cache poisoning
You have determined that an attack is currently underway on your database server. An attacker is currently logged in, modifying data. You want to preserve logs, caching and other data on this affected server.
Which of the following actions will best allow you to stop the attack and still preserve data?
- A . Pull the server network cable
- B . Shut down the server
- C . Back up the system logs
- D . Force an instant password reset