GSEC Exam Practice Questions prepared by GIAC Professionals [Q18-Q38]

Rate this post

GSEC Exam Practice Questions prepared by GIAC Professionals

Use Valid New GSEC Questions – Top choice Help You Gain Success

Target Audience

The GIAC Security Essentials certification exam targets all IT professionals with a recognized background in networking and information systems. On that note, security managers, auditors, penetration testers, and security administrators will benefit most from it. Still, the test is also a good choice for IT engineers, supervisors, and operations personnel.

NEW QUESTION 18
You work as a Network Administrator for Secure World Inc. The company has a Linux-based network. You want to run a command with the changed root directory. Which of the following commands will you use?

ls <new root> <command>

chroot <new root> <command>

route <new root> <command>

chdir <new root> <command>

Explanation/Reference:

NEW QUESTION 19
One of your Linux systems was compromised last night. According to change management history and a recent vulnerability scan, the system’s patches were up-to-date at the time of the attack. Which of the following statements is the Most Likely explanation?

It was a zero-day exploit.

It was a Trojan Horse exploit.

It was a worm exploit.

It was a man-in-middle exploit.

NEW QUESTION 20
Which of the following is used to allow or deny access to network resources?

Spoofing

ACL

System hardening

NFS

NEW QUESTION 21
You work as a Network Administrator for NetTech Inc. To ensure the security of files, you encrypt data files using Encrypting File System (EFS).
You want to make a backup copy of the files and maintain security settings. You can backup the files either to a network share or a floppy disk. What will you do to accomplish this?

Copy the files to a network share on an NTFS volume.

Copy the files to a network share on a FAT32 volume.

Place the files in an encrypted folder. Then, copy the folder to a floppy disk.

Copy the files to a floppy disk that has been formatted using Windows 2000 Professional.

NEW QUESTION 22
Which of the following languages enable programmers to store cookies on client computers? Each correct answer represents a complete solution. Choose two.

DHTML

Perl

HTML

JavaScript

NEW QUESTION 23
Which of the following protocols work at the Session layer of the OSI model? Each correct answer represents a complete solution. Choose all that apply.

Border Gateway Multicast Protocol (BGMP)

Internet Security Association and Key Management Protocol (ISAKMP)

Trivial File Transfer Protocol (TFTP)

User Datagram Protocol (UDP)

NEW QUESTION 24
In trace route results, what is the significance of an * result?

A listening port was identified.

A reply was returned in less than a second.

The target host was successfully reached.

No reply was received for a particular hop.

NEW QUESTION 25
Which of the following is a standard Unix command that would most likely be used to copy raw file system data for later forensic analysis?

backup

gzip

NEW QUESTION 26
Included below is the output from a resource kit utility run against local host.

Which command could have produced this output?

Schtasks

Task kill

Task list

NEW QUESTION 27
You work as a Network Administrator for McNeil Inc. The company has a Linux-based network. David, a Sales Manager, wants to know the name of the shell that he is currently using. Which of the following commands will he use to accomplish the task?

mv $shell

echo $shell

rm $shell

ls $shell

NEW QUESTION 28
With regard to defense-in-depth, which of the following statements about network design principles is correct?

A secure network design requires that systems that have access to the Internet should not be accessible from the Internet and that systems accessible from the Internet should not have access to the Internet.

A secure network design requires that networks utilize VLAN (Virtual LAN) implementations to insure that private and semi-public systems are unable to reach each other without going through a firewall.

A secure network design will seek to provide an effective administrative structure by providing a single choke-point for the network from which all security controls and restrictions will be enforced.

A secure network design will seek to separate resources by providing a security boundary between systems that have different network security requirements.

NEW QUESTION 29
Which of the following steps can be taken for securing a wireless LAN? Each correct answer represents a complete solution. Choose two.

Configure WLAN settings for WP

Use WEP and WPA compliant hardware.

Use NTFS file system on the client computers in the network.

Remove folder sharing from the client computers in the network.

NEW QUESTION 30
Which of the following statements about Hypertext Transfer Protocol Secure (HTTPS) are true? Each correct answer represents a complete solution. Choose two.

It uses TCP port 443 as the default port.

It is a protocol used in the Universal Resource Locater (URL) address line to connect to a secure site.

It is a protocol used to provide security for a database server in an internal network.

It uses TCP port 80 as the default port.

NEW QUESTION 31
You work as a Network Administrator for Net World Inc. The company has a Linux-based network. You want to mount an SMBFS share from a Linux workstation. Which of the following commands can you use to accomplish the task?
Each correct answer represents a complete solution. Choose two.

smbmount

mount smb

smbfsmount

mount -t smbfs

NEW QUESTION 32
You work as a Network Administrator for McNeil Inc. You are installing an application. You want to view the log file whenever a new entry is added to the /var/log/messages log file. Which of the following commands will you use to accomplish this?

TAIL -show /var/log/messages

TAIL -f /var/log/messages

TAIL -50 /var/log/messages

TAIL -view /var/log/messages

NEW QUESTION 33
John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. John is working as a root user on the Linux operating system. He executes the following command in the terminal: echo $USER, $UID Which of the following will be displayed as the correct output of the above command?

root, 500

root, 0

John, 502

John, 0

NEW QUESTION 34
At what point in the Incident Handling process should an organization determine its approach to notifying law enforcement?

When performing analysis

When preparing policy

When recovering from the incident

When reacting to an incident

NEW QUESTION 35
You are doing some analysis of malware on a Unix computer in a closed test network. The IP address of the computer is 192.168.1.120. From a packet capture, you see the malware is attempting to do a DNS query for a server called iamabadserver.com so that it can connect to it. There is no DNS server on the test network to do name resolution. You have another computer, whose IP is 192.168.1.115, available on the test network that you would like for the malware connect to it instead. How do you get the malware to connect to that computer on the test network?

You modify the HOSTS file on the computer you want the malware to connect to and add an entry that reads: 192.168.1.120 iamabadserver iamabadserver.com

You modify the HOSTS file on the Unix computer your malware is running on and add an entry that reads:
192.168.1.115 iamabadserveriamabadserver.com

You modify the HOSTS file on the Unix computer your malware is running on and add an entry that reads:
192.168.1.120 iamabadserver iamabadserver.com

You modify the HOSTS file on the computer you want the malware to connect to and add an entry that reads: 192.168.1.115 iamabadserver iamabadserver.com

NEW QUESTION 36
Which of the following SIP methods is used to setup a new session and add a caller?

ACK

BYE

INVITE

CANCEL

NEW QUESTION 37
One of your Linux systems was compromised last night. According to change management history and a recent vulnerability scan, the system’s patches were up-to-date at the time of the attack. Which of the following statements is the Most Likely explanation?

It was a zero-day exploit.

It was a Trojan Horse exploit.

It was a worm exploit.

It was a man-in-middle exploit.

NEW QUESTION 38
You work as a Network Administrator for NetTech Inc. When you enter http://66.111.64.227 in the browser’s address bar, you are able to access the site. But, you are unable to access the site when you enter http:// www.uCertify.com. What is the most likely cause?

DNS entry is not available for the host name.

The site’s Web server is offline.

The site’s Web server has heavy traffic.

WINS server has no NetBIOS name entry for the server.

Explanation/Reference:

Loading …

GIAC GSEC Exam Syllabus Topics:

Topic	Details
Topic 1	Understanding of the concepts of cryptography, including a high-level understanding of the major types of cryptosystems and steganography Understand what defense in depth is and an identify the key areas of security
Topic 2	Basic understanding of the risks of virtualization and cloud services and how to secure them Identify commonly used symmetric, asymmetric, and hashing cryptosystem
Topic 3	Demonstrate understanding of a variety of Linux operating systems, including mobile systems High-level understanding of the use, functionality, and operation of VPNs, GPG, and PKI
Topic 4	Demonstrate an understanding of web application security and common vulnerabilities including CGI, cookies, SSL Access Control & Password Management
Topic 5	Demonstrate the different strategies for implementing effective security within an organization Introduced to the techniques and technologies used to audit Windows hosts
Topic 6	Understand the fundamental theory of access control and the role of passwords in managing access control Basic understand of the mathematical concepts that contribute to cryptography

GSEC Exam Practice Materials Collection: https://www.examstorrent.com/GSEC-exam-dumps-torrent.html

Target Audience

GIAC GSEC Exam Syllabus Topics:

admin

You May Also Like

Leave a Reply Cancel reply