CIW 1D0-571 dumps - 100% Pass Guarantee!

You have been assigned to configure a DMZ that uses multiple firewall components. Specifically, you must configure a router that will authoritatively monitor and, if necessary, block traffic. This device will be the last one that inspects traffic before it passes to the internal network. Which term best describes this device?

A. Screening router

B. Bastion host

C. Proxy server

D. Choke router

Which of the following is the most likely first step to enable a server to recover from a denial-of- service attack in which all hard disk data is lost?

A. Enable virtualization

B. Contact the backup service

C. Contact a disk recovery service

D. Rebuild your RAID 0 array

You purchased a network scanner six months ago. In spite of regularly conducting scans using this software, you have noticed that attackers have been able to compromise your servers over the last month. Which of the following is the most likely explanation for this problem?

A. The network scanner needs to be replaced.

B. The network scanner is no substitute for scans conducted by an individual.

C. The network scanner has atrojan.

D. The network scanner needs an update.

Consider the following series of commands from a Linux system: iptables -A input -p icmp -s 0/0 璬 0/0 -j REJECT Which explanation best describes the impact of the resulting firewall ruleset?

A. Individuals on remote networks will no longer be able to use SSH to control internal network resources.

B. Internal hosts will not be able to ping each other using ICMP.

C. Stateful multi-layer inspection has been enabled.

D. Individuals on remote networks will not be able to use ping to troubleshoot connections.

Your organization has made a particularly unpopular policy decision. Your supervisor fears that a series of attacks may occur as a result. You have been assigned to increase automated auditing on a server. When fulfilling this request, which of the following resources should you audit the most aggressively?

A. Authentication databases, including directory servers

B. Intrusion detection systems, especially those placed on sensitive networks

C. Log files on firewall systems

D. Firewall settings for desktop systems