GIAC GIAC Information Security GCIA Questions & Answers

• Question 501:

  Which of the following is known as a message digest?

  A. Hash function

  B. Hashing algorithm

  C. Spider

  D. Message authentication code

  Correct Answer: A

• Question 502:

  Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet forum for online discussion. When a user visits the infected Web page, code gets automatically executed and Ryan can easily perform acts like account hijacking, history theft etc. Which of the following types of Cross- Site Scripting attack Ryan intends to do?

  A. Document Object Model (DOM)

  B. Non persistent

  C. SAX

  D. Persistent

  Correct Answer: D

• Question 503:

  Andrew works as a System Administrator for NetPerfect Inc. All client computers on the network run on Mac OS X. The Sales Manager of the company complains that his MacBook is not able to boot. Andrew wants to check the booting process. He suspects that an error persists in the bootloader of Mac OS X. Which of the following is the default bootloader on Mac OS X that he should use to resolve the issue?

  A. LILO

  B. BootX

  C. NT Loader

  D. GRUB

  Correct Answer: B

• Question 504:

  Sasha wants to add an entry to your DNS database for your mail server. Which of the following types of resource records will she use to accomplish this?

  A. ANAME

  B. SOA

  C. MX

  D. CNAME

  Correct Answer: C

• Question 505:

  Fill in the blank with the appropriate term.

  ___________is the practice of monitoring and potentially restricting the flow of information outbound from one network to another

  Correct Answer: Egress filtering

• Question 506:

  Fill in the blank with the appropriate term.

  ___________ is a technique used to make sure that incoming packets are actually from the networks that they claim to be from.

  Correct Answer: Ingress filtering

• Question 507:

  You work as a Network Administrator for McRobert Inc. The company's Windows 2000-based network is configured with Internet Security and Acceleration (ISA) Server 2000. You are configuring intrusion detection on the server. You want to get notified when a TCP SYN packet is sent with a spoofed source IP address and port number that match the destination IP address and port

  

  number. Mark the alert that you will enable on the Intrusion Detection tab page of the IP Packet Filters Properties dialog box to accomplish the task.

  Hot Area:

  

  Correct Answer: