CheckPoint CheckPoint Certification 156-110 Questions & Answers

• Question 1:

  Who should have physical access to network-connectivity devices and corporate servers?

  A. Customers and clients

  B. Accounting, information-technology, and auditing staff

  C. Managers and C-level executives

  D. Only appropriate information-technology personnel

  E. Only the maintenance staff

  Correct Answer: D

• Question 2:

  Which of the following represents a valid reason for testing a patch on a nonproduction system, before applying it to a production system?

  A. Patches may re-enable services previously disabled.

  B. Patches are a kind of virus.

  C. Patches always overwrite user data.

  D. Only patches on vendor-pressed CDs can be trusted.

  E. Patches usually break important system functionality.

  Correct Answer: A

• Question 3:

  A(n) _______________ is an abstract machine, which mediates all access subjects have to objects.

  A. ACL

  B. Reference monitor

  C. State machine

  D. TCB

  E. Router

  Correct Answer: B

• Question 4:

  Why should user populations be segmented?

  A. To allow resources to be shared among employees

  B. To allow appropriate collaboration, and prevent inappropriate resource sharing

  C. To prevent appropriate collaboration

  D. To provide authentication services

  E. To prevent the generation of audit trails from gateway devices

  Correct Answer: B

• Question 5:

  Which of the following are appropriate uses of asymmetric encryption? (Choose THREE.)

  A. Authentication

  B. Secure key-exchange mechanisms

  C. Public Web site access

  D. Data-integrity checking

  E. Sneaker net

  Correct Answer: ABD

• Question 6:

  What is the purpose of resource isolation?

  A. To reduce the level of broadcast traffic on physical segments.

  B. To ensure that anyone accessing a resource has appropriate integrity.

  C. To automate the creation of access control lists and Trusted Computing Bases.

  D. To enforce access controls, and clearly separate resources from each other.

  E. To make people buy more computers than they really need.

  Correct Answer: D

• Question 7:

  Which of the following equations results in the Single Loss Expectancy for an asset?

  A. Asset Value x % Of Loss From Realized Exposure

  B. Asset Value x % Of Loss From Realized Threat

  C. Annualized Rate of Occurrence / Annualized Loss Expectancy

  D. Asset Value x % Of Loss From Realized Vulnerability

  E. Annualized Rate of Occurrence x Annualized Loss Expectancy

  Correct Answer: B

• Question 8:

  Which encryption algorithm has the highest bit strength?

  A. AES

  B. Blowfish

  C. DES

  D. CAST

  E. Triple DES

  Correct Answer: A

• Question 9:

  _________________ is a type of cryptography, where letters of an original message are systematically rearranged into another sequence.

  A. Symmetric-key exchange

  B. Steganography

  C. Transposition cipher

  D. Asymmetric-key encryption

  E. Simple substitution cipher

  Correct Answer: C

• Question 10:

  _______ is a method of tricking users into revealing passwords, or other sensitive information.

  A. Dumpster diving

  B. Means testing

  C. Social engineering

  D. Risk

  E. Exposure

  Correct Answer: C