CheckPoint Checkpoint Certifications 156-110 Questions & Answers

• Question 61:

  Public servers are typically placed in the _______, to enhance security.

  A. Restricted Entry Zone

  B. Open Zone

  C. Internet Zone

  D. Demilitarized Zone

  E. Public Entry Zone

  Correct Answer: D

• Question 62:

  _______ involves gathering pieces of information and drawing a conclusion, whose sensitivity exceeds any of the individual pieces of information.

  A. Inference

  B. Social engineering

  C. Movement analysis

  D. Communication-pattern analysis

  E. Aggregation

  Correct Answer: E

• Question 63:

  When should procedures be evaluated?

  A. When new functional users join an organization

  B. On the anniversary of the procedures' implementation

  C. Each time procedures are used

  D. Whenever business processes are modified

  E. When new exploits and attacks are discovered

  Correct Answer: D

• Question 64:

  _________________ is the process of subjects establishing who they are to an access control.

  A. Identification

  B. Authentication

  C. Authorization

  D. Validation

  E. Biometrics

  Correct Answer: A

• Question 65:

  Which of these strategies can be employed to test training effectiveness? (Choose THREE.)

  A. Create a survey for managers, to see if participants practice behaviors presented during training.

  B. Provide feedback forms for employees to rate instruction and training material, immediately after training has ended.

  C. Include auditors before and after the training. This checks to see if the number of security-related incidents is reduced, because of the training.

  D. Give incentives to employees who attend security-awareness training. Perform spot-checks, to see if incentives are displayed.

  E. Test employees on security concepts several months after training has ended.

  Correct Answer: ACE

• Question 66:

  Which of the following entities review partner-extranet requirements?

  A. Information systems

  B. Shipping and receiving

  C. Marketing

  D. Requesting department

  E. Chief Information Officer

  Correct Answer: D

• Question 67:

  Which type of Business Continuity Plan (BCP) test involves practicing aspects of the BCP, without actually interrupting operations or bringing an alternate site on-line?

  A. Structured walkthrough

  B. Checklist

  C. Simulation

  D. Full interruption

  E. Parallel

  Correct Answer: C

• Question 68:

  A _______ attack uses multiple systems to launch a coordinated attack.

  A. Distributed denial-of-service

  B. Teardrop

  C. Birthday

  D. FTP Bounce

  E. Salami

  Correct Answer: A

• Question 69:

  What must system administrators do when they cannot access a complete replica of their production environment for testing?

  A. Extrapolate results from a limited subset.

  B. Eliminate the testing phase of change control.

  C. Request additional hardware and software.

  D. Refuse to implement change requests.

  E. Deploy directly to the production environment.

  Correct Answer: A

• Question 70:

  Enterprise employees working remotely require access to data at an organization's headquarters. Which of the following is the BEST method to transfer this data?

  A. Standard e-mail

  B. Faxed information

  C. Dial-in access behind the enterprise firewall

  D. Virtual private network

  E. CD-ROMs shipped with updated versions of the data

  Correct Answer: C