CIW CIW Security Analyst

Question 1

What is a firewall primarily used for in network security?

Accepted Answer

Monitor and control incoming and outgoing network traffic based on security rules

Answer

A firewall enforces security policies by filtering network traffic, allowing or blocking packets based on predefined rules.

Question 2

What type of attack involves an attacker intercepting communication between two parties without their knowledge?

Accepted Answer

Man-in-the-Middle (MitM)

Answer

A Man-in-the-Middle attack occurs when an attacker secretly relays and potentially alters communication between two parties who believe they are communicating directly.

Question 3

What is phishing?

Accepted Answer

A social engineering attack using deceptive emails or websites to trick users into revealing sensitive information

Answer

Phishing deceives victims through fraudulent emails, messages, or websites that mimic trusted entities to steal credentials or personal data.

Question 4

What does authentication verify in information security?

Accepted Answer

The identity of a user or system trying to access a resource

Answer

Authentication confirms that an entity (user, device, or service) is who or what it claims to be before granting access.

Question 5

What is a denial-of-service (DoS) attack?

Accepted Answer

Overwhelming a server or network with traffic to make it unavailable to legitimate users

Answer

A DoS attack floods a target system with requests, consuming resources and preventing legitimate users from accessing services.

CIW - Certified Internet Web Professional Practice Test

CIW - Certified Internet Web Professional Practice Test

CIW CIW Security Analyst