CIW Certification Suite — Questions and Answers

Question 1: What is social engineering in cybersecurity?

Automating security awareness training
Building secure social network APIs
Manipulating people through psychological tactics to divulge confidential information or perform harmful actions (Correct answer)
Engineering software for social media platforms

Correct answer: Manipulating people through psychological tactics to divulge confidential information or perform harmful actions

Social engineering exploits human psychology rather than technical vulnerabilities to trick individuals into compromising security.

Question 2: In CSS3, which value of the 'position' property removes an element from the normal document flow and positions it relative to the nearest positioned ancestor?

relative
absolute (Correct answer)
fixed
sticky

Correct answer: absolute

position: absolute removes the element from document flow and positions it based on the nearest ancestor with a non-static position.

Question 3: Which HTML5 element is used to define the main content area of a document, excluding headers, footers, and navigation?

<main> (Correct answer)
<body>
<article>
<content>

Correct answer: <main>

The <main> element identifies the dominant content of the document body and should appear only once per page.

Question 4: What CSS3 property applies shadow effects behind an element's border box?

drop-shadow
text-shadow
box-shadow (Correct answer)
element-shadow

Correct answer: box-shadow

box-shadow applies one or more shadow effects to the exterior of an element's box, defined by offset, blur, spread, and color values.

Question 5: Which HTML5 semantic element is most appropriate for the main navigation links of a website?

<aside>
<nav> (Correct answer)
<section>
<footer>

Correct answer: <nav>

The `<nav>` element is the HTML5 semantic tag intended to contain the site's primary navigation links.

Question 6: Which HTML5 element represents a self-contained composition that could be independently distributed, such as a blog post?

<article> (Correct answer)
<section>
<aside>
<main>

Correct answer: <article>

The <article> element represents content that is self-contained and could stand alone, such as a news article, blog post, or forum entry.

Question 7: Which HTML attribute specifies that a form field must be filled out before submitting the form?

notnull
mandatory
validate
required (Correct answer)

Correct answer: required

The `required` attribute on an input element triggers built-in browser validation, preventing form submission if the field is empty.

Question 8: Which protocol is used by web browsers to securely request and receive web pages?

POP3
FTP
HTTPS (Correct answer)
SMTP

Correct answer: HTTPS

HTTPS (HyperText Transfer Protocol Secure) encrypts communication between browser and server using TLS, protecting data in transit.

Question 9: What is the function of DNS (Domain Name System)?

Store website backup files
Assign bandwidth to users
Translate human-readable domain names into IP addresses (Correct answer)
Encrypt network traffic

Correct answer: Translate human-readable domain names into IP addresses

DNS acts as the internet's phone book, converting memorable domain names like www.example.com into the numeric IP addresses computers use.

Question 10: What is the purpose of the robots.txt file on a website?

Instruct search engine crawlers which pages to crawl or avoid (Correct answer)
Define CSS styles for automated browsers
Set server response time limits
Detect and block malicious bots

Correct answer: Instruct search engine crawlers which pages to crawl or avoid

The robots.txt file uses the Robots Exclusion Protocol to tell web crawlers which URLs they should or should not access.

Question 11: Which protocol is used to synchronize clocks across network devices and is critical for authentication protocols like Kerberos?

LDAP
NTP (Correct answer)
RADIUS
SNMP

Correct answer: NTP

NTP (Network Time Protocol) synchronizes clocks across network devices; accurate time is essential for authentication tickets, logs, and certificates.

Question 12: What type of relationship exists when a row in Table A can relate to many rows in Table B, and a row in Table B can also relate to many rows in Table A?

Many-to-many (Correct answer)
One-to-many
Self-referencing
One-to-one

Correct answer: Many-to-many

A many-to-many relationship requires a junction (bridge) table containing foreign keys to both related tables.

Question 13: Which routing protocol uses bandwidth and delay as its composite metric by default?

BGP
RIP
OSPF
EIGRP (Correct answer)

Correct answer: EIGRP

EIGRP uses a composite metric based on bandwidth and delay (and optionally reliability, load, and MTU) to select the best path.

Question 14: The information 2E22:4F00:000E:00D0:A267:97FF:FE6B:FE34 is referenced by which of the following?

An IPv6 address (Correct answer)
A MAC address
An IP diagnostic loopback address
AnIPv4address

Correct answer: An IPv6 address

The given string 2E22:4F00:000E:00D0:A267:97FF:FE6B:FE34 is an example of an IPv6 address. IPv6 addresses are 128-bit hexadecimal numbers, typically written as eight groups of four hexadecimal digits separated by colons. In contrast, IPv4 addresses consist of four decimal numbers separated by dots, and MAC addresses are usually 12 hexadecimal digits separated by hyphens or colons.

Question 15: What is the primary purpose of the HTML5 <figure> and <figcaption> elements?

To create responsive image grids
To associate a caption with self-contained content like images or diagrams (Correct answer)
To display mathematical figures and equations
To embed SVG vector figures inline

Correct answer: To associate a caption with self-contained content like images or diagrams

<figure> wraps self-contained media (images, code, diagrams), and <figcaption> provides an optional accessible caption linked to that figure.

Question 16: Which standard defines the rules for how web clients and servers communicate?

TCP/IP only
SMTP standard
HTTP (HyperText Transfer Protocol) (Correct answer)
FTP specification

Correct answer: HTTP (HyperText Transfer Protocol)

HTTP (HyperText Transfer Protocol) is the application-layer protocol that defines how web clients request resources and how servers respond.

Question 17: What does JSON.stringify() do?

Converts a JavaScript value into a JSON-formatted string (Correct answer)
Parses a JSON string into a JavaScript object
Minifies a JSON object by removing whitespace
Validates whether a string is valid JSON

Correct answer: Converts a JavaScript value into a JSON-formatted string

JSON.stringify() serializes a JavaScript object or value into a JSON string representation.

Question 18: Which built-in JavaScript object provides methods for working with dates and times?

Date (Correct answer)
Calendar
Time
DateTime

Correct answer: Date

The Date object provides methods to create, retrieve, and manipulate dates and times in JavaScript.

Question 19: What is a digital certificate primarily used for in e-commerce?

Manage email subscriptions
Track website visitor behavior
Compress web pages
Authenticate identities and enable encrypted communications (Correct answer)

Correct answer: Authenticate identities and enable encrypted communications

A digital certificate binds a public key to an entity's identity, enabling SSL/TLS encryption and verifying website authenticity.

Question 20: Which CSS3 property is used to add rounded corners to an element's border box?

corner-radius
border-style
rounded-corner
border-radius (Correct answer)

Correct answer: border-radius

border-radius accepts one to four length values and applies rounded corners to the corners of an element's outer border edge.

Question 21: What does URL stand for and what is its purpose?

Universal Request Layer — handles HTTP requests
Unified Routing Language — defines network routing rules
User Registration Login — authenticates site visitors
Universal Resource Locator — specifies the address of a resource on the internet (Correct answer)

Correct answer: Universal Resource Locator — specifies the address of a resource on the internet

A URL (Uniform Resource Locator) is the full address used to access a specific resource on the internet, including protocol, domain, and path.

Question 22: What is the main difference between shared hosting and dedicated hosting?

Dedicated hosting is only for e-commerce sites
Shared hosting uses Linux; dedicated uses Windows
Shared hosting means many websites share one server's resources; dedicated hosting gives one website its own server (Correct answer)
Shared hosting is faster than dedicated

Correct answer: Shared hosting means many websites share one server's resources; dedicated hosting gives one website its own server

Shared hosting splits server resources among many customers, lowering cost but reducing performance, while dedicated hosting reserves an entire server for one client.

Question 23: Which HTML5 input type provides built-in validation for email address format?

type="text"
type="email" (Correct answer)
type="mail"
type="address"

Correct answer: type="email"

type="email" instructs the browser to validate that the entered value matches an email address format before form submission.

Question 24: What is affiliate marketing?

Marketing done by company employees only
Marketing limited to social media platforms
A performance-based model where affiliates earn commissions for driving traffic or sales to a merchant (Correct answer)
A type of email spam campaign

Correct answer: A performance-based model where affiliates earn commissions for driving traffic or sales to a merchant

Affiliate marketing pays third-party publishers a commission for generating traffic or sales for a merchant's products via tracked links.

Question 25: Which network device connects multiple networks and forwards data packets between them based on IP addresses?

Hub
Bridge
Router (Correct answer)
Switch

Correct answer: Router

A router forwards data packets between different networks by examining IP addresses to determine the best path.

Question 26: What HTML5 form attribute forces the user to fill in a field before the form can be submitted?

validate
notnull
required (Correct answer)
mandatory

Correct answer: required

The 'required' attribute triggers native browser-side validation, preventing form submission if the field is empty.

Question 27: Which HTML5 element is used to define a footer section for a document or a sectioning element?

<foot>
<footer> (Correct answer)
<bottom>
<end>

Correct answer: <footer>

The <footer> element represents the footer for its nearest sectioning content or the document root, typically containing author info, copyright, or links.

Question 28: Which HTML5 element is used to define a block of navigation links?

<nav> (Correct answer)
<section>
<header>
<aside>

Correct answer: <nav>

The <nav> element is the semantic HTML5 element specifically intended to contain a set of navigation links.

Question 29: In internet business, what is a viral marketing campaign?

A strategy designed to encourage people to share content rapidly, spreading the message exponentially (Correct answer)
A campaign that uses malware to spread messages
An email campaign sent to virus-infected computers
A paid advertising campaign

Correct answer: A strategy designed to encourage people to share content rapidly, spreading the message exponentially

Viral marketing creates highly shareable content that spreads organically through social sharing, multiplying reach at little additional cost.

Question 30: What is e-commerce?

Internet service provider billing
Email marketing only
Electronic document management
The buying and selling of goods and services over the internet (Correct answer)

Correct answer: The buying and selling of goods and services over the internet

E-commerce encompasses all commercial transactions — buying, selling, and exchanging goods or services — conducted electronically over the internet.

Question 31: What does authentication verify in information security?

The encryption strength of a message
The availability of a web server
The identity of a user or system trying to access a resource (Correct answer)
The integrity of a database backup

Correct answer: The identity of a user or system trying to access a resource

Authentication confirms that an entity (user, device, or service) is who or what it claims to be before granting access.

Question 32: Which CSS3 property controls the speed curve of a transition effect?

transition-speed
animation-timing
transition-timing-function (Correct answer)
transition-curve

Correct answer: transition-timing-function

transition-timing-function specifies the acceleration curve (ease, linear, ease-in, ease-out, cubic-bezier, etc.) for a CSS transition.

Question 33: Which CSS3 function creates a smooth color transition from one point to another along a straight line?

color-gradient()
linear-gradient() (Correct answer)
radial-gradient()
gradient()

Correct answer: linear-gradient()

linear-gradient() generates an image that transitions between colors along a straight line at a specified angle or direction.

Question 34: Which of the following steps should be taken first to troubleshoot a network connection issue while using a cable modem?

Ping the default gateway
Ping local devices using their DNS names
Ping the proxy server
Ping local devices using their IP addresses (Correct answer)

Correct answer: Ping local devices using their IP addresses

When troubleshooting a network connection, the first step is to isolate the problem. By pinging local devices using their IP addresses, you can determine if the network interface card (NIC) and the local network stack are functioning correctly. This helps confirm basic connectivity within your immediate network segment before attempting to reach external resources or resolve DNS.

Question 35: In JavaScript, which method is used to convert a string to an integer?

Number()
toInteger()
Math.floor()
parseInt() (Correct answer)

Correct answer: parseInt()

parseInt() parses a string argument and returns an integer of the specified radix, stopping at the first non-numeric character.

Question 36: What is the difference between client-side and server-side scripting?

Client-side handles databases; server-side handles design
Client-side uses Python; server-side uses JavaScript
There is no difference — they are the same
Client-side runs in the user's browser; server-side runs on the web server before sending content to the browser (Correct answer)

Correct answer: Client-side runs in the user's browser; server-side runs on the web server before sending content to the browser

Client-side scripts (like JavaScript) execute in the visitor's browser, while server-side scripts (like PHP or Node.js) run on the server and send results to the browser.

Question 37: What is the purpose of a shopping cart on an e-commerce website?

Generate product reviews
Manage supplier invoices
Allow customers to select and temporarily hold items before purchasing (Correct answer)
Track user login sessions

Correct answer: Allow customers to select and temporarily hold items before purchasing

An e-commerce shopping cart lets users accumulate selected products before proceeding to checkout and payment.

Question 38: Which CSS3 pseudo-class selector targets an element only when it is the first child of its parent?

element:first-type
element:nth-child(1st)
element:first
element:first-child (Correct answer)

Correct answer: element:first-child

:first-child matches an element that is the very first child node within its parent, regardless of element type.

Question 39: Which of the following is a valid IPv4 address format?

192:168:1:1
192.168.1
192.168.1.1 (Correct answer)
192-168-1-1

Correct answer: 192.168.1.1

A valid IPv4 address consists of four decimal numbers (0–255) separated by periods, such as 192.168.1.1.

Question 40: What is multi-factor authentication (MFA)?

Requiring two or more verification factors (something you know, have, or are) to authenticate (Correct answer)
Using the same password across multiple sites
Logging in from multiple devices simultaneously
Using multiple passwords for one account

Correct answer: Requiring two or more verification factors (something you know, have, or are) to authenticate

MFA requires at least two independent authentication factors — such as a password plus a one-time code — dramatically reducing account compromise risk.

Question 41: What is the purpose of CSS3 @keyframes?

To specify breakpoints for responsive layouts
To declare the intermediate steps in a CSS animation sequence (Correct answer)
To define reusable sets of CSS properties as named blocks
To import font files for web use

Correct answer: To declare the intermediate steps in a CSS animation sequence

@keyframes defines the stages and styles of a CSS animation by specifying property values at specific percentage points during the animation.

Question 42: What is the correct HTML5 doctype declaration?

<!DOCTYPE html> (Correct answer)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 5.0//EN">
<html version="5">

Correct answer: <!DOCTYPE html>

<!DOCTYPE html> is the simplified HTML5 doctype that instructs browsers to render the page in standards mode.

Question 43: What is the primary purpose of a primary key in a relational database table?

Sort rows alphabetically
Define the table's default sort order
Encrypt the table data
Uniquely identify each row in the table (Correct answer)

Correct answer: Uniquely identify each row in the table

A primary key uniquely identifies every record in a database table and cannot contain NULL values.

Question 44: Which of the following best describes cloud computing in a business context?

Using only wired internet connections
Storing data only on physical office servers
Delivering computing services — servers, storage, software — over the internet on demand (Correct answer)
A type of cybersecurity firewall

Correct answer: Delivering computing services — servers, storage, software — over the internet on demand

Cloud computing provides on-demand access to shared computing resources over the internet, eliminating the need for large on-premise infrastructure.

Question 45: Which HTML5 meta attribute specifies the character encoding for an HTML document?

charset (Correct answer)
content-type
language
encoding

Correct answer: charset

The charset attribute on a <meta> tag (e.g., <meta charset="UTF-8">) declares the character encoding used for the document.

Question 46: What does SSL/TLS provide for web-based transactions?

Inventory management
Automated product recommendation
Encrypted communication between the browser and web server (Correct answer)
Faster server response times

Correct answer: Encrypted communication between the browser and web server

SSL/TLS encrypts data in transit between a client's browser and the web server, protecting sensitive information like credit card numbers.

Question 47: Which CSS3 flexbox property aligns flex items along the cross axis (perpendicular to the main axis)?

align-items (Correct answer)
flex-direction
justify-content
flex-wrap

Correct answer: align-items

align-items sets the default alignment for all flex items along the cross axis of the flex container.

Question 48: What is a payment gateway in e-commerce?

The checkout page design template
A service that authorizes and processes online credit/debit card transactions (Correct answer)
A digital currency wallet
A physical bank ATM connected to the internet

Correct answer: A service that authorizes and processes online credit/debit card transactions

A payment gateway is a merchant service that securely transmits payment data between buyers, merchants, and financial institutions.

Question 49: Which CSS3 property applies 2D or 3D geometric transformations such as rotate, scale, and translate to an element?

position
transform (Correct answer)
animation
transition

Correct answer: transform

The transform property applies functions like rotate(), scale(), translateX(), and matrix3d() to visually modify an element without affecting document flow.

Question 50: What is the CAN-SPAM Act designed to regulate?

Spam phone calls and robocalls
Social media advertising
Commercial email messages sent to consumers (Correct answer)
Online advertising cookies

Correct answer: Commercial email messages sent to consumers

The CAN-SPAM Act establishes rules for commercial email in the US, requiring honest headers, clear opt-out mechanisms, and physical addresses.

Question 51: What is the purpose of encryption in web security?

Compress files to save storage space
Speed up data transmission
Back up data to remote servers
Convert data into an unreadable format to protect it from unauthorized access (Correct answer)

Correct answer: Convert data into an unreadable format to protect it from unauthorized access

Encryption transforms readable plaintext into ciphertext using an algorithm and key, making intercepted data useless to unauthorized parties.

Question 52: What does a 404 HTTP status code mean?

The request was successful
The server is temporarily unavailable
The requested resource was not found on the server (Correct answer)
The client is unauthorized to access the resource

Correct answer: The requested resource was not found on the server

A 404 Not Found error means the server could not locate the resource at the requested URL, often due to a broken or outdated link.

Question 53: What is a domain name used for on the internet?

Monitor server uptime
Store website files
Encrypt website traffic
Provide a human-readable address that maps to an IP address (Correct answer)

Correct answer: Provide a human-readable address that maps to an IP address

A domain name is a human-friendly label (like example.com) that the DNS system translates into the numeric IP address of the hosting server.

Question 54: A network admin uses the command 'show ip route' on a router and sees the prefix 'O' before a route entry. What does 'O' indicate?

The route is a directly connected network
The route was manually configured as a static route
The route was learned via EIGRP
The route was learned via OSPF (Correct answer)

Correct answer: The route was learned via OSPF

The 'O' code in the routing table indicates the route was learned via OSPF (Open Shortest Path First), a link-state routing protocol.

Question 55: In typography for the web, what does 'leading' refer to?

The horizontal spacing between characters
The font family selection
The weight of the font
The vertical spacing between lines of text (Correct answer)

Correct answer: The vertical spacing between lines of text

Leading (mapped to the CSS `line-height` property) controls the vertical distance between lines of text.

CIW Certification Suite

CIW (Certified Internet Webmaster) certifications validate expertise across web design, internet business, site development, and web security. Exams are vendor-neutral, computer-based, and cover foundational to specialist-level web technology skills.

Questions

90 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds