CheckPoint Checkpoint Certifications 156-110 Questions & Answers

• Question 71:

  _______ is the process of confirming that implemented security safeguards work as expected.

  A. Penetration testing

  B. Exploitation

  C. Baselining

  D. A vulnerability

  E. A countermeasure

  Correct Answer: A

• Question 72:

  You are a system administrator managing a pool of database servers. Your software vendor releases a service pack, with many new features. What should you do? (Choose TWO.)

  A. Eliminate the testing phase of change control.

  B. Read the release notes.

  C. Refuse to install the service pack.

  D. Install the service pack on all production database servers.

  E. Install the service pack on a database server, in a test environment.

  Correct Answer: BE

• Question 73:

  ____________________ are the people who consume, manipulate, and produce information assets.

  A. Information asset owners

  B. Business-unit owners

  C. Audit-control groups

  D. Information custodians

  E. Functional users

  Correct Answer: E

• Question 74:

  _________ is a smaller, enhanced version of the X.500 protocol. It is used to provide directory-service information. (Choose the BEST answer.)

  A. Lightweight Directory Access Protocol

  B. X.400 Directory Access Protocol

  C. Access control list

  D. Lightweight Host Configuration Protocol

  E. Role-based access control

  Correct Answer: A

• Question 75:

  Which of the following is an integrity requirement for Remote Offices/Branch Offices (ROBOs)?

  A. Private data must remain internal to an organization.

  B. Data must be consistent between ROBO sites and headquarters.

  C. Users must be educated about appropriate security policies.

  D. Improvised solutions must provide the level of protection required.

  E. Data must remain available to all remote offices.

  Correct Answer: B

• Question 76:

  A(n) __________________________ is issued by senior management, and defines an organization's security goals.

  A. Records-retention procedure

  B. Acceptable-use policy

  C. Organizational security policy

  D. Security policy mission statement

  E. Service level agreement

  Correct Answer: D

• Question 77:

  _______________________________ occurs when an individual or process acquires a higher level of privilege, or access, than originally intended.

  A. Security Triad

  B. Privilege aggregation

  C. Need-to-know

  D. Privilege escalation

  E. Least privilege

  Correct Answer: D

• Question 78:

  Which of these choices correctly describe denial-of-service (DoS) attacks? (Choose THREE.)

  A. DoS attacks do not require attackers to have any privileges on a target system.

  B. DoS attacks are nearly impossible to stop, once they begin.

  C. DoS attacks free the target system of excessive overhead.

  D. DoS ties up a system with so many requests, system resources are consumed, and performance degrades.

  E. DoS attacks cause the attacked system to accept legitimate access requests.

  Correct Answer: ABD

• Question 79:

  Which of the following is NOT a restriction, for partners accessing internal corporate resources through an extranet?

  A. Preventing modification of restricted information

  B. Using restricted programs, to access databases and other information resources

  C. Allowing access from any location

  D. Preventing access to any network resource, other than those explicitly permitted

  E. Viewing inventory levels for partner products only

  Correct Answer: C

• Question 80:

  Which of the following calculations is used when selecting countermeasures?

  A. Annualized Rate of Occurrence

  B. Single Loss Expectancy

  C. Annualized Loss Expectancy

  D. Business Impact Analysis

  E. Business Continuity Plan

  Correct Answer: C