1D0-571 bible（2 to 11） for IT professionals: Jun 2021 Edition

New Questions 2

Consider the following diagram:

Which type of attack is occurring?

A. Polymorphic virus-based attack

B. Denial-of-service attack

C. Distributed denial-of-service attack

D. Man-in-the-middle attack using a packet sniffer

New Questions 3

Consider the following series of commands from a Linux system: iptables -A input -p icmp - s 0/0 -d 0/0 -j REJECT Which explanation best describes the impact of the resulting firewall ruleset?

A. Individuals on remote networks will no longer be able to use SSH to control internal network resources.

B. Internal hosts will not be able to ping each other using ICMP.

C. Stateful multi-layer inspection has been enabled.

D. Individuals on remote networks will not be able to use ping to troubleshoot connections.

New Questions 4

You have implemented a service on a Linux system that allows a user to read and edit resources. What is the function of this service?

A. Authentication

B. Data integrity

C. Access control

D. Intrusion detection

New Questions 5

Jason is attempting to gain unauthorized access to a corporate server by running a program that enters passwords from a long list of possible passwords. Which type of attack is this?

A. Brute force

B. Denial of service

C. Botnet

D. Buffer overflow

New Questions 6

Requests for Web-based resources have become unacceptably slow. You have been assigned to implement a solution that helps solve this problem. Which of the following

A. Enable stateful multi-layer inspection on the packet filter

B. Implement caching on the network proxy server

C. Enable authentication on the network proxy server

D. Implement a screening router on the network DMZ

New Questions 7

A distributed denial-of-service (DDOS) attack has occurred where both ICMP and TCP packets have crashed the company's Web server. Which of the following techniques will best help reduce the severity of this attack?

A. Filtering traffic at the firewall

B. Changing your ISP

C. Installing Apache Server rather than Microsoft IIS

D. Placing the database and the Web server on separate systems

New Questions 8

Which tool is best suited for identifying applications and code on a Web server that can lead to a SQL injection attack?

A. A vulnerability scanner

B. A packet sniffer

C. An intrusion-detection system

D. A network switch

New Questions 9

A new server has been placed on the network. You have been assigned to protect this server using a packet-filtering firewall. To comply with this request, you have enabled the following ruleset:

Which choice describes the next step to take now that this ruleset has been enabled?

A. From the internal network, use your Web browser to determine whether all internal users can access the Web server.

B. From the internal network, use your e-mail client to determine whether all internal users can access the e-mail server.

C. From the external network, use your Web browser to determine whether all external users can access the Web server.

D. From the external network, use your e-mail client to determine whether all external users can access the e-mail server.

New Questions 10

You have discovered that the ls, su and ps commands no longer function as expected. They do not return information in a manner similar to any other Linux system. Also, the implementation of Tripwire you have installed on this server is returning new hash values. Which of the following has most likely occurred?

A. A trojan has attacked the system.

B. A SQL injection attack has occurred.

C. A spyware application has been installed.

D. A root kit has been installed on the system.

New Questions 11

Which of the following is most likely to pose a security threat to a Web server?

A. CGI scripts

B. Database connections

C. Flash or Silverlight animation files

D. LDAP servers