Free 1D0-571 Exam Braindumps
1D0-571 CIW v5 Security Essentials Questions 16–20 (page: 5)

Updated On: 9-Feb-2026

You have determined that the company Web server has several vulnerabilities, including a buffer overflow that has resulted in an attack. The Web server uses PHP and has direct connections to an Oracle database server. It also uses many CGI scripts. Which of the following is the most effective way to respond to this attack?

  1. Installing software updates for the Web server daemon
  2. Using the POST method instead of the GET method for a Web form
  3. Installing an intrusion detection service to monitor logins
  4. Using the GET method instead of the POST method for a Web form

Answer(s): A



Which of the following standards is used for digital certificates?

  1. DES
  2. Diffie-Hellman
  3. X.509
  4. RC5

Answer(s): C



At the beginning of an IPsec session, which activity occurs during the Internet Key Exchange (IKE)?

  1. Determining the number of security associations
  2. Negotiating the authentication method
  3. Determining the network identification number
  4. Negotiating the version of IP to be used

Answer(s): B



A security breach has occurred in which a third party was able to obtain and misuse legitimate authentication information. After investigation, you determined that the specific cause for the breach was that end users have been placing their passwords underneath their keyboards. Which step will best help you resolve this problem?

  1. Discipline specific end users as object lessons to the rest of the staff and reset passwords on all systems immediately.
  2. Change all passwords on the company servers immediately and inform end users that their passwords will be changing on a regular basis.
  3. Set passwords to expire at specific intervals and establish mandatory continual training sessions.
  4. Inform end users that their passwords will be changing on a regular basis and require more complex passwords.

Answer(s): C



You have implemented a version of the Kerberos protocol for your network. What service does Kerberos primarily offer?

  1. Authentication
  2. Encryption
  3. Non-repudiation
  4. Data integrity

Answer(s): A



Viewing page 5 of 14
Viewing questions 21 - 25 out of 62 questions


Post your Comments and Discuss CIW 1D0-571 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!