GIAC GIAC Information Security GISF Questions & Answers

• Question 321:

  Which of the following protocols provides secured transaction of data between two computers?

  A. SSH

  B. FTP

  C. Telnet

  D. RSH

  Correct Answer: A

• Question 322:

  John works as an Exchange Administrator for Apple Inc. The company has a Windows 2003 Active Directory domain-based network. The network contains several Windows Server 2003 servers. Three of them have been configured as domain controllers. John complains to the Network Administrator that he is unable to manage group memberships. Which of the following operations master roles is responsible for managing group memberships?

  A. PDC emulator

  B. Infrastructure master

  C. Schema master

  D. RID master

  Correct Answer: B

• Question 323:

  You are the project manager of SST project. You are in the process of collecting and distributing performance information including status report, progress measurements, and forecasts. Which of the following process are you performing?

  A. Perform Quality Control

  B. Verify Scope

  C. Report Performance

  D. Control Scope

  Correct Answer: C

• Question 324:

  John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. The company is aware of various types of security attacks and wants to impede them. Hence, management has assigned John a project to port scan the company's Web Server. For this, he uses the nmap port scanner and issues the following command to perform idle port scanning:

  nmap -PN -p- -sI IP_Address_of_Company_Server

  He analyzes that the server's TCP ports 21, 25, 80, and 111 are open. Which of the following security policies is the company using during this entire process to mitigate the risk of hacking attacks?

  A. Audit policy

  B. Antivirus policy

  C. Non-disclosure agreement

  D. Acceptable use policy

  Correct Answer: A

• Question 325:

  Which of the following statements are true about Dsniff? Each correct answer represents a complete solution. Choose two.

  A. It is a virus.

  B. It contains Trojans.

  C. It is antivirus.

  D. It is a collection of various hacking tools.

  Correct Answer: BD

• Question 326:

  Based on the information given in the case study, which two authentication methods should you use to allow customers to access their photos on the Web site? (Click the Exhibit button on the toolbar to see the case study.) Each correct answer represents a part of the solution. Choose two.

  A. Basic authentication without SSL

  B. Digest authentication with SSL

  C. Integrated Windows authentication

  D. Anonymous access

  E. Basic authentication with SSL

  F. Digest authentication without SSL

  Correct Answer: BE

• Question 327:

  Which of the following are the goals of the cryptographic systems? Each correct answer represents a complete solution. Choose three.

  A. Availability

  B. Authentication

  C. Confidentiality

  D. Integrity

  Correct Answer: BCD

• Question 328:

  You work as a security manager for Qualxiss Inc. Your Company involves OODA loop for resolving and deciding over company issues. You have detected a security breach issue in your company.

  Which of the following procedures regarding the breach is involved in the observe phase of the OODA loop?

  A. Follow the company security guidelines.

  B. Decide an activity based on a hypothesis.

  C. Implement an action practically as policies.

  D. Consider previous experiences of security breaches.

  Correct Answer: A

• Question 329:

  How should you configure the Regional Centers' e-mail, so that it is secure and encrypted? (Click the Exhibit button on the toolbar to see the case study.)

  A. Use EFS.

  B. Use IPSec.

  C. Use S/MIME.

  D. Use TLS.

  Correct Answer: C

• Question 330:

  How long are cookies in effect if no expiration date is set?

  A. Fifteen days

  B. Until the session ends.

  C. Forever

  D. One year

  Correct Answer: B