GIAC GIAC Information Security GISF Questions & Answers

• Question 1:

  Fill in the blank with the appropriate layer name.

  The Network layer of the OSI model corresponds to the______ layer of the TCP/IP model.

  Correct Answer: Internet

• Question 2:

  Fill in the blank with the appropriate value. SHA-1 produces a ______-bit message digest.

  Correct Answer: SHA-1 produces a160-bit message digest

• Question 3:

  Which of the following protocols is used to prevent switching loops in networks with redundant switched paths?

  A. Cisco Discovery Protocol (CDP)

  B. Spanning Tree Protocol (STP)

  C. File Transfer Protocol (FTP)

  D. VLAN Trunking Protocol (VTP)

  Correct Answer: B

• Question 4:

  Which of the following representatives of incident response team takes forensic backups of the systems that are the focus of the incident?

  A. Technical representative

  B. Legal representative

  C. Lead investigator

  D. Information security representative

  Correct Answer: A

• Question 5:

  Which of the following statements are true about Public-key cryptography? Each correct answer represents a complete solution. Choose two.

  A. Data encrypted with the secret key can only be decrypted by another secret key.

  B. The secret key can encrypt a message, and anyone with the public key can decrypt it.

  C. Data encrypted by the public key can only be decrypted by the secret key.

  D. The distinguishing technique used in public key-private key cryptography is the use of symmetric key algorithms.

  Correct Answer: BC

• Question 6:

  You work as an Application Developer for uCertify Inc. The company uses Visual Studio .NET Framework

  3.5 as its application development platform. You are working on a WCF service. You have decided to implement transport level security. Which of the following security protocols will you use?

  A. Kerberos

  B. HTTPS

  C. RSA

  D. IPSEC

  Correct Answer: B

• Question 7:

  Which of the following are the benefits of information classification for an organization?

  A. It helps identify which information is the most sensitive or vital to an organization.

  B. It ensures that modifications are not made to data by unauthorized personnel or processes

  C. It helps identify which protections apply to which information.

  D. It helps reduce the Total Cost of Ownership (TCO).

  Correct Answer: AC

• Question 8:

  You work as the Security Administrator for Prodotxiss Inc. You want to ensure the security of your Wi-Fi enterprise network against the wireless snooping attacks. Which of the following measures will you take over the site network devices of the network?

  A. Apply firewalls at appropriate spots.

  B. Download and install new firmware patch for the router.

  C. Disable the SSID broadcast feature of the router.

  D. Apply a standard ACL on the router.

  Correct Answer: C

• Question 9:

  Which of the following is used in asymmetric encryption?

  A. Public key and user key

  B. Public key and private key

  C. SSL

  D. NTFS

  Correct Answer: B

• Question 10:

  You are the project manager for BlueWell Inc. You are reviewing the risk register for your project. The risk register provides much information to you, the project manager and to the project team during the risk response planning. All of the following are included in the risk register except for which item?

  A. Trends in qualitative risk analysis results

  B. Symptoms and warning signs of risks

  C. List of potential risk responses

  D. Network diagram analysis of critical path activities

  Correct Answer: D