C837 - CIW: Web Security Associate

C837 - CIW: Web Security Associate What tool allows network administrators to capture and analyze data traversing their networks? - Protocol analyzer Following a natural or manmade incident at your organization that involved loss of data from local HDDs and storage, what entity should you contact to enable recovery of data? - Backup service What is a disadvantage of creating hashes of each file on an attached storage device? - Places a performance burden on the host and slows its ability to respond to requests What is a primary disadvantage of asymmetric-key encryption? - Slow speed due to high processing burden What defensive action will allow you to reduce severity of attacks involving specific services and protocols coming from outside of your network? - Configure your firewall to filter out unwanted traffic based on protocol or services What is considered to be the most secure default firewall policy? - Implicit Deny (Blocking all access by default, then allowing only specific, necessary connections) Common security threats to Web servers include, but are not limited to: - CGI Scripts, SQL injections, Cross site scripting (XSS), DDOS What is the foundational component needed to be in place FIRST when creating a secure networking environment? - Security Policy In considering authentication using HTTP vs HTTPS, which operates fully in the clear and introduces susceptibility man-in-the-middle attacks? - HTTP What malicious logic, when installed on a system, replaces or modifies legitimate programs preventing them from functioning as expected in effort to hide malicious programs and activity? - A root kit What organization maintains information about how to solve specific security