CheckPoint Checkpoint Certifications 156-110 Questions & Answers

• Question 51:

  Which of the following is NOT a Business Continuity Plan (BCP) recovery strategy?

  A. Delegating risk to another entity, such as an insurer

  B. Manual procedures; alternative solution to technology available

  C. Deferring action; action waiting until a later date

  D. Reciprocal agreements with another organization

  E. Doing nothing; no action taken to recover the technology

  Correct Answer: A

• Question 52:

  What is single sign-on? An authentication method:

  A. that allows users to authenticate once, and then uses tokens or other credentials to manage subsequent authentication attempts

  B. that stores user credentials locally, so that users need only authenticate the first time, a local machine is used

  C. requiring the use of one-time passwords, so users authenticate only once, with a given set of credentials.

  D. that uses smart cards, hardware tokens, and biometrics to authenticate users; also known as three-factor authentication

  E. that requires users to re-authenticate for every resource accessed

  Correct Answer: A

• Question 53:

  Why should each system user and administrator have individual accounts? (Choose TWO.)

  A. Using generic user names and passwords increases system security and reliability.

  B. Using separate accounts for each user reduces resource consumption, particularly disk space.

  C. By using individual login names and passwords, user actions can be traced.

  D. If users do not have individual login names, processes can automatically run with root/administrator access.

  E. A generic user name and password for users and security administrators provides anonymity, which prevents useful logging and auditing.

  Correct Answer: CE

• Question 54:

  A(n) _______ occurs when intrusion-detection measures fail to recognize suspicious traffic or activity.

  A. False positive

  B. False negative

  C. CIFS pop-up

  D. Threshold

  E. Alarm

  Correct Answer: B

• Question 55:

  Embedding symbols in images or common items, such as pictures or quilts, is an example of __________.

  A. Espionage

  B. Transposition cipher

  C. Key exchange

  D. Arithmancy

  E. Steganography

  Correct Answer: E

• Question 56:

  A _______ _______ posture provides many levels of security possibilities, for access control.

  A. Layered defensive

  B. Multiple offensive

  C. Flat defensive

  D. Reactive defensive

  E. Proactive offensive

  Correct Answer: A

• Question 57:

  At ABC Corporation, access to critical information resources, such as database and e-mail servers, is controlled by the information-technology (IT) department. The supervisor in the department grants access to printers where the printer is located. Managers grant and revoke rights to files within their departments' directories on the file server, but the IT department controls who has access to the directories. Which type of access-management system is in use at ABC Corporation?

  A. Centralized access management

  B. Role-based access management

  C. Hybrid access management

  D. Decentralized access management

  E. Privileged access management

  Correct Answer: C

• Question 58:

  Which TWO of the following items should be accomplished, when interviewing candidates for a position within an organization?

  A. Hire an investigation agency to run background checks.

  B. Verify all dates of previous employment.

  C. Question candidates, using polygraphs.

  D. Contact personal and professional references.

  E. Run criminal-background checks.

  Correct Answer: D

• Question 59:

  Which of the following are common failures that should be addressed in an organization's Business Continuity Plan (BCP) ? (Choose THREE.)

  A. Connectivity failures

  B. Accounting failures

  C. Hardware failures

  D. Utility failures

  E. Personal failures

  Correct Answer: ACD

• Question 60:

  If e-mail is subject to review by individuals other than the sender and recipient, what should be clearly stated in the organization's e-mail policy?

  A. Technologies and methods used to monitor and enforce the organization's policies

  B. Senior management and business-unit owner responsibilities and delegation options

  C. Clear, legally defensible definition of what constitutes a business record

  D. Consequences for violation of the organization's acceptable-use policy

  E. No expectation of privacy for e-mail communications, using the organization's resources

  Correct Answer: E