CIW CIW Security Analyst 1 — Questions and Answers
Question 1: What is a firewall primarily used for in network security?
- Speed up internet connections
- Monitor and control incoming and outgoing network traffic based on security rules (Correct answer)
- Encrypt email messages
- Manage user passwords
Correct answer: Monitor and control incoming and outgoing network traffic based on security rules
A firewall enforces security policies by filtering network traffic, allowing or blocking packets based on predefined rules.
Question 2: What type of attack involves an attacker intercepting communication between two parties without their knowledge?
- Denial of Service (DoS)
- SQL Injection
- Man-in-the-Middle (MitM) (Correct answer)
- Cross-Site Scripting (XSS)
Correct answer: Man-in-the-Middle (MitM)
A Man-in-the-Middle attack occurs when an attacker secretly relays and potentially alters communication between two parties who believe they are communicating directly.
Question 3: What is phishing?
- A method to speed up network connections
- A social engineering attack using deceptive emails or websites to trick users into revealing sensitive information (Correct answer)
- A type of antivirus software
- An encryption algorithm
Correct answer: A social engineering attack using deceptive emails or websites to trick users into revealing sensitive information
Phishing deceives victims through fraudulent emails, messages, or websites that mimic trusted entities to steal credentials or personal data.
Question 4: What does authentication verify in information security?
- The encryption strength of a message
- The identity of a user or system trying to access a resource (Correct answer)
- The availability of a web server
- The integrity of a database backup
Correct answer: The identity of a user or system trying to access a resource
Authentication confirms that an entity (user, device, or service) is who or what it claims to be before granting access.
Question 5: What is a denial-of-service (DoS) attack?
- Stealing user credentials via email
- Overwhelming a server or network with traffic to make it unavailable to legitimate users (Correct answer)
- Injecting malicious code into a database
- Intercepting encrypted communications
Correct answer: Overwhelming a server or network with traffic to make it unavailable to legitimate users
A DoS attack floods a target system with requests, consuming resources and preventing legitimate users from accessing services.
Question 6: What is the purpose of encryption in web security?
- Compress files to save storage space
- Convert data into an unreadable format to protect it from unauthorized access (Correct answer)
- Speed up data transmission
- Back up data to remote servers
Correct answer: Convert data into an unreadable format to protect it from unauthorized access
Encryption transforms readable plaintext into ciphertext using an algorithm and key, making intercepted data useless to unauthorized parties.
CIW CIW Security Analyst 1
What is a firewall primarily used for in network security?