CIW Web Security Associate - 1D0-671 Exam Questions [2026]

QUESTION NO: 1
A Web site that contains malicious content designed to harm your computer is known as:

A. a greynet Web site. B. a poisoned Web site. C. a wiki. D. an ad-hoc Web site.

Correct Answer: B

QUESTION NO: 2
Consider the following image:
From the information in this image, what type of attack is occurring?

A. A brute-force attack B. A man-in-the-middle attack C. A spoofing attackD.A spoofing attack D. A connection-hijacking attackC.A connection-hijacking attack

Correct Answer: A

QUESTION NO: 3
Which technique can help to protect an FTP server?

A. When setting IP-based blocking rules for the FTP server, move the FTP files to C:\ftpfiles for maximum security. B. Use separate FTP user accounts from those used to access the Web. C. Place downloads on the same partition as the FTP server binaries. D. Install the operating system on the same partition as the FTP server.

Correct Answer: B

QUESTION NO: 4
You have implemented a service on a Linux system that allows a user to read and edit resources.
What is the function of this service?

A. Authentication B. Data integrity C. Intrusion detection D. Access control

Correct Answer: D

QUESTION NO: 5
What is the most common attack method against TCP?

A. SYN flood attack B. Illicit server C. IP address spoofing D. Trojan

Correct Answer: A

QUESTION NO: 6
At the beginning of an IPsec session, which activity occurs during the Internet Key Exchange (IKE)?

A. Negotiating the authentication method B. Determining the number of security associations C. Determining the network identification number D. Negotiating the version of IP to be used

Correct Answer: A

QUESTION NO: 7
What is the primary advantage of using a circuit-level proxy?

A. It can discriminate between good and malicious data. B. It allows applications to provide connection information to the SOCKS server. C. It provides Network Address Translation (NAT). D. It allows masquerading.

Correct Answer: C

QUESTION NO: 8
A new server has been placed on the network. You have been assigned to protect this server using a packet-filtering firewall. To comply with this request, you have enabled the following ruleset:
Which choice describes the next step to take now that this ruleset has been enabled?

A. From the internal network, use your Web browser to determine whether all internal users can access the Web server. B. From the external network, use your Web browser to determine whether all external users can access the Web server. C. From the internal network, use your e-mail client to determine whether all internal users can access the e-mail server. D. From the external network, use your e-mail client to determine whether all external users can access the e-mail server.

Correct Answer: D

QUESTION NO: 9
Which of the following is a primary weakness of asymmetric-key encryption?

A. It can lead to the corruption of encrypted data during network transfer. B. It is reliant on the Secure Sockets Layer (SSL) standard, which has been compromised. C. It is slow because it requires extensive calculations by the computer. D. It is difficult to transfer any portion of an asymmetric key securely.

Correct Answer: C

QUESTION NO: 10
Which term describes a firewall topology element that consists of a subnet of computers?

A. Zone B. Firewall box C. Security strategy D. Demilitarized zone (DMZ)

Correct Answer: D