[2023] Use Real GIAC Dumps – 100% Free GSEC Exam Dumps [Q146-Q170]

Posted byadminFebruary 23, 2023Leave a Comment on [2023] Use Real GIAC Dumps – 100% Free GSEC Exam Dumps [Q146-Q170]

Rate this post

[2023] Use Real GIAC Dumps – 100% Free GSEC Exam Dumps

Realistic GSEC Dumps Latest GIAC Practice Tests Dumps

NO.146 Place the routing protocols in their appropriate categories.

Answer: A

NO.147 You work as a Network Administrator for Tech Perfect Inc. The company has a Linux-based network. You want to kill a process running on a Linux server. Which of the following commands will you use to know the process identification number (PID) of the process?

killall

getpid

kill

NO.148 What is the name of the command-line tool for Windows that can be used to manage audit policies on remote systems?

SECEDTT.EXE

POLCLI.EXE

REMOTEAUDIT.EXE

AUDITPOL.EXE

NO.149 Which of the following is an advantage of private circuits versus VPNs?

Flexibility

Performance guarantees

Cost

Time required to implement

NO.150 What are the two actions the receiver of a PGP email message can perform that allows establishment of trust between sender and receiver?

Decode the message by decrypting the asymmetric key with his private key, then using the asymmetric key to decrypt the message.

Decode the message by decrypting the symmetric key with his private key, then using the symmetric key to decrypt the message.

Decode the message by decrypting the symmetric key with his public key, then using the symmetric key to decrypt the message.

Decrypt the message by encrypting the digital signature with his private key, then using the digital signature to decrypt the message.

NO.151 Your organization has broken its network into several sections/segments, which are separated by firewalls, ACLs and VLANs. The purpose is to defend segments of the network from potential attacks that originate in a different segment or that attempt to spread across segments.
This style of defense-in-depth protection is best described as which of the following?

Uniform protection

Protected enclaves

Vector-oriented

Information-centric

NO.152 Validating which vulnerabilities in a network environment are able to be exploited by an attacker is called what?

Anomaly detection

Vulnerability scanning

Perimeter assessment

Penetration testing

NO.153 Analyze the screenshot below. What is the purpose of this message?

To gather non-specific vulnerability information

To get the user to download malicious software

To test the browser plugins for compatibility

To alert the user to infected software on the computer.

NO.154 While using Wire shark to investigate complaints of users being unable to login to a web application, you come across an HTTP POST submitted through your web application. The contents of the POST are listed below. Based on what you see below, which of the following would you recommend to prevent future damage to your database?

Use ssh to prevent a denial of service attack

Sanitize user inputs to prevent injection attacks

Authenticate users to prevent hackers from using your database

Use https to prevent hackers from inserting malware

NO.155 Your software developer comes to you with an application that controls a user device. The application monitors its own behavior and that of the device and creates log files. The log files are expected to grow steadily and rapidly. Your developer currently has the log files stored in the /bin folder with the application binary. Where would you suggest that the developer store the log files?

/var/log

/etc/log

/usr/log

/tmp/log

/dev/log

NO.156 You work as a Network Administrator for Tech Perfect Inc. The company has a Linux-based network. Mark, a Sales Manager, complains that he is unable to logon to the server. You verify that his computer is working properly and that another user is able to logon to the server from Mark’s computer. The shadow password policy is implemented in the company. Mark’s account entry in the /etc/passwd file is as follows: mark:*:501:100:Mark Smith:/home/mark:bin/tcsh What will you do to resolve the issue?

Create a new user account for Mark.

Change the user ID from 501 to 50.

Delete the command shell entry /bin/tcsh.

Change the second field value to x.

NO.157 Your CIO has found out that it is possible for an attacker to clone your company’s RFID (Radio Frequency ID) based key cards. The CIO has tasked you with finding a way to ensure that anyone entering the building is an employee. Which of the following authentication types would be the appropriate solution to this problem?

Mandatory Access Controls

Bell-LaPadula

Two-Factor

TACACS

NO.158 Which of the following frequencies are used by wireless standard 802.11n to operate? Each correct answer represents a complete solution. Choose two.

1 Ghz

2 Ghz

2.4 Ghz

5 Ghz

NO.159 Which of the following is used to allow or deny access to network resources?

Spoofing

ACL

System hardening

NFS

NO.160 When considering ingress filtering, why should all inbound packets be dropped if they contain a source address from within the protected network address space?

The packets are probably corrupted.

The packets may have been accidentally routed onto the Internet.

The packets may be deliberately spoofed by an attacker.

The packets are a sign of excess fragmentation.

A and B

B and C

B and D

A and D

NO.161 Which of the following is an advantage of an Intrusion Detection System?

It is a mature technology.

It is the best network security.

It never needs patching.

It is a firewall replacement.

NO.162 When discussing access controls, which of the following terms describes the process of determining the activities or functions that an Individual is permitted to perform?

Authentication

Identification

Authorization

Validation

NO.163 John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. John is working as a root user on the Linux operating system. He executes the following command in the terminal: echo $USER, $UID Which of the following will be displayed as the correct output of the above command?

root, 500

root, 0

John, 502

John, 0

NO.164 An organization monitors the hard disks of its employees’ computers from time to time. Which policy does this pertain to?

Backup policy

User password policy

Network security policy

NO.165 You have just taken over network support for a small company. They are currently using MAC filtering to secure their wireless network. Is this adequate or not and why or why not?

No, MAC filtering is not secure at all.

No, you should have WEP or WPA encryption as well.

Yes, in fact MAC filtering is the most security you can have.

Yes, MAC filtering includes encryption.

NO.166 What is the name of the Windows XP/2003 tool that you can use to schedule commands to be executed on remote systems during off-peak hours?

SCHTASKS.EXE

SCHEDULETSKS.EXE

SCHEDULR.EXE

SCHRUN.EXE

NO.167 Which of the following protocols is used to retrieve e-mails from a remote mail server?

IGMP

SNMP

POP3

SMTP

NO.168 Which of the following are network connectivity devices?
Each correct answer represents a complete solution. Choose all that apply.

Network analyzer

Bridge

Brouter

Firewall

Repeater

Hub

NO.169 Your customer wants wireless internet in his home. He must have speeds of at least 100 mbps. Which wireless option would you recommend?

802.11b

802.11a

802.11n

802.11g

NO.170 Your customer wants to make sure that only computers he has authorized can get on his Wi-Fi. What is the most appropriate security measure you can recommend?

A firewall

WPA encryption

WEP encryption

Mac filtering

Loading …