Free 156-110 sample questions

Correct answer: External-intrusion attempts from sources outside the LAN are not granted permissions or rights to an organization's information assets

External intrusion attempts are attacks originating from outside the organization's network perimeter, where unauthorized external entities attempt to gain access to internal resources without proper permissions or rights. This represents the classic security threat model where attackers from the internet or other external sources try to breach network defenses. The other options incorrectly describe internal threats (insider attacks), confused definitions mixing external users with legitimate public access, nonsensical vulnerability exploitation for access removal, or internal misuse of authorized access.

Correct answer: Change-control

Business Continuity Plans must be integrated with change-control processes because any organizational changes (infrastructure, personnel, procedures, technology) can impact business continuity requirements and recovery capabilities. Change control ensures BCP updates are evaluated and implemented systematically when organizational changes occur. Disaster recovery is a component of BCP, not the integration point; inventory maintenance, discretionary budgets, and compensation reviews are operational processes that don't directly govern BCP maintenance cycles.

Correct answers: Connectivity failures; Hardware failures; Utility failures

Connectivity failures, hardware failures, and utility failures represent the three primary infrastructure-related failure categories that Business Continuity Plans must address. These cover network connectivity disruptions, physical equipment malfunctions, and power/utility service interruptions that can halt business operations. Accounting failures and personal failures are operational issues that, while important, are not among the core infrastructure failure types that form the foundation of most BCP scenarios in Check Point security planning.

Hardware failures, along with connectivity and utility failures, represent core infrastructure failure categories that Business Continuity Plans must address. Physical equipment failures including servers, storage systems, network devices, and workstations can completely disrupt business operations and require specific recovery procedures. Accounting failures and personal failures, while operational concerns, are not among the primary infrastructure-based failure scenarios that BCPs are designed to handle in enterprise security frameworks.

Utility failures, including power outages, heating/cooling system failures, and telecommunications service disruptions, are fundamental infrastructure threats that Business Continuity Plans must address alongside connectivity and hardware failures. These utility disruptions can render facilities unusable and systems inoperable, requiring backup power, alternative locations, and service restoration procedures. Accounting and personal failures are procedural issues that don't constitute the primary infrastructure failure categories central to BCP design.

Correct answer: Role-based

Role-based access control (RBAC) uses job duties and organizational positions to determine subjects' clearance levels and access permissions, mapping users to predefined roles that reflect their responsibilities within the organization. This approach streamlines access management by grouping permissions based on functional requirements rather than individual user attributes. Discretionary access control allows owners to set permissions, mandatory access control uses security labels and classifications, nondiscretionary access control is system-enforced, and hybrid approaches combine multiple models but don't specifically use job position information as the primary determinant.

Correct answer: Hash function

A hash function is a one-way mathematical function that takes variable-length input data and produces a fixed-length output value (hash or digest), commonly used for data integrity verification, digital signatures, and password storage in security systems. The one-way property means it's computationally infeasible to reverse the process and derive the original input from the hash value. Symmetric keys are used for encryption/decryption, algorithms are broader computational procedures, backdoors are unauthorized access methods, and integrity is a security principle that hash functions help achieve rather than being the function itself.

Correct answer: Their organizations' legal experts

INFOSEC professionals must consult with their organization's legal experts when implementing due care and due diligence measures because legal requirements vary by jurisdiction, industry regulations, and organizational context, and legal counsel ensures compliance with applicable laws and standards. Due diligence requires demonstrating reasonable care in protecting information assets, which has specific legal implications and liability considerations. Law enforcement, senior management, IETF officials, and other INFOSEC professionals provide valuable input but cannot provide the authoritative legal guidance necessary for proper due care implementation.